Windows 10 Extended Security Updates (ESU): What You Need to Know
Microsoft will officially end support for Windows 10 on October 14, 2025. After this date, no more free security patches or updates will be provided. For businesses that cannot immediately upgrade, Microsoft is offering the Extended Security Updates (ESU) program a temporary lifeline to keep older systems protected.
WHAT IS THE ESU PROGRAM?
The ESU program provides critical and important security updates for Windows 10 after its end-of-support date. However, it is important to understand what ESU is not:
- ❌ No new features
- ❌ No performance or stability fixes
- ❌ No technical support from Microsoft
It is strictly a bare minimum security patching service for unsupported operating systems.
Requirements for ESU
- You must already be running Windows 10 Pro, Enterprise, or Education editions.
- Enrollment in ESU is available only after October 14, 2025.
- Until you enroll, your system will be unprotected, as regular security updates stop on that date.
- ESU is offered on a subscription basis, typically renewed annually for up to three years.
Pros of Using ESU
- Extended protection: Keeps critical vulnerabilities patched while you plan a migration.
- Flexibility: Buys time if you rely on legacy applications or hardware not yet ready for Windows 11.
- Business continuity: Reduces the risk of downtime from cyberattacks on unpatched systems.
Cons of Using ESU
- Costly stopgap: ESU is priced as a premium option and can become expensive over time.
- No improvements: You don’t receive any usability, performance, or feature updates.
- Short-term only: ESU is temporary. By 2028 at the latest, support ends completely.
- Security risk window: If you delay enrollment past October 14, 2025, your system is unprotected until you subscribe.
- No Security Tools Will Be Reliable: Antivirus, EDR, and other protection tools rely on OS-level compatibility. Vendors stop developing and supporting these tools once Microsoft stops the technical support of the OS.
- No Vendor Support: If third-party apps break, you’re on your own. Software vendors will not troubleshoot or patch anything on a technically unsupported platform.
- No Covered Support from Your MSP: As much as they would love to help, most service plans do not cover any issues, incidents, or fallout from Windows 10 systems post-EOL, including security, performance, or compatibility problems. They simply cannot protect what Microsoft no longer technically supports or maintains.
UPGRADING NOW VS. WAITING FOR ESU
Upgrading Now
- ✅ Long-term solution
- ✅ Access to latest features, performance, and security improvements
- ✅ Full support from Microsoft and your IT provider
Enrolling in ESU Later
- ✅ Allows more time for planning, testing, or budgeting upgrades
- ✅ Keeps critical patches flowing for a limited time
- ❌ Adds recurring costs with no long-term payoff
- ❌ Leaves your environment in “maintenance mode” instead of modernization
OUR RECOMMENDATION
While the ESU program can be useful as a temporary safety net, it should not be viewed as a replacement for upgrading. The best path forward for most organizations is to begin planning your migration to Windows 11 now, ensuring your hardware, applications, and workflows are fully compatible before support for Windows 10 ends.
If your business has systems that cannot be upgraded immediately, enrolling in ESU can reduce security risks while you finalize your transition.
Need help assessing your environment and planning the right strategy? 📞 Contact Braver today—we’ll help you decide whether ESU is right for your situation or if upgrading now makes more sense.
Braver Technology Solutions | WeMakeITWork@BraverTechnology.com
Boston 617.315.8515 | Taunton 508.824.2260 | Providence 401.484.7900
