Microsoft will officially end support for Windows 10 on October 14, 2025. For organizations that can’t immediately transition to Windows 11, Microsoft offers a temporary safety net: Extended Security Updates (ESUs).
This blog outlines what ESUs are, who can use them, cost considerations, and why they should be viewed as a bridge—not a long-term solution.
Extended Security Updates (ESUs) are a paid Microsoft program that provides critical and important security updates after Windows 10 reaches its end of support.
No new features
No performance improvements
No non-security fixes
In short, ESUs keep Windows 10 devices secure for a limited time, but do not advance the operating system in any other way.
ESUs are available to both organizations and individuals, but only on supported editions:
Windows 10 Pro, Enterprise, and Education
Devices must be running the latest version (22H2)
Not available for Windows 10 Home in corporate environments
Licenses can be purchased directly from Microsoft or through CSPs, OEM partners, or resellers.
Pros:
Extends device security beyond October 2025
Provides up to 3 extra years to plan a migration
Helps businesses that rely on legacy apps or hardware
Cons:
Not free: costs increase each year
Temporary: program ends after 3 years
Adds complexity: no feature updates, only security patches
ESUs are sold in 12-month increments and priced per device:
Year 1: $61 per device
Year 2: $122 per device
Year 3: $244 per device
Organizations should budget carefully—costs double each year and can add up quickly if used as more than a short-term solution.
No. ESUs are not a replacement for migrating to Windows 11.
Think of ESUs as a safety net, not a strategy:
They keep devices secure temporarily.
They buy you time for a proper migration plan.
They do not eliminate the need to move to Windows 11 or another supported OS.
When deciding how to approach Windows 10’s end of support, consider:
Timing: How soon can your organization realistically migrate?
Cost: Are ESU fees more expensive than accelerating a Windows 11 project?
Risk Tolerance: Can your business afford to rely on a temporary solution?
Windows 11 Upgrade
Define project scope, gain approval
Execute upgrade with coordinated project management
Typical timeline: X weeks from approval
Windows 10 ESU + Windows 11 Upgrade Later
Purchase ESUs for short-term coverage
Sourcepass deploys ESU keys quickly via ticket
Typical timeline: Y days from approval
Windows 10 ESUs are a short-term bridge—not a long-term plan.
They provide critical security coverage for organizations that need extra time, but the strategic priority should remain a planned migration to Windows 11.
At Sourcepass, we help organizations evaluate timing, cost, and risk to create a roadmap that minimizes disruption while keeping systems secure. Whether you need immediate ESU coverage or a full-scale Windows 11 upgrade project, our team provides the guidance and execution to move forward with confidence.