Recommended Free Tools
Extended Security Updates (ESU) are a temporary, product-specific way to receive certain security updates for eligible Microsoft software after its normal support ends. ESU can help reduce risk while you move to a supported version, but it does not restart the product lifecycle or provide general technical support.
What does Extended Security Updates mean?
Microsoft describes ESU as a last-resort option for customers who need to keep using certain legacy products after end of support. It is a time-limited security-update bridge, not a replacement for upgrading or migrating. Microsoft says ESUs are “not intended as a long-term solution, but rather as a temporary bridge to stay secure while one migrates to a newer, supported platform.” Microsoft Product Lifecycle FAQ: Extended Security Updates
The specific product’s ESU terms determine which updates are included, who can enroll, how long coverage lasts, and how it is obtained. Microsoft’s general lifecycle FAQ says certain products may receive Critical and/or Important security updates for up to three years after the end of Extended Support; that maximum does not apply universally.
What does ESU include—and what does it not include?
ESU supplies only the security updates Microsoft makes available under the applicable product program. It does not add features, provide customer-requested non-security updates or design changes, extend the product lifecycle, or restore standard troubleshooting and technical guidance beyond the original support timeline. Microsoft Product Lifecycle FAQ: Extended Security Updates
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware match#1 Best Overall
Update severity also varies by product. Windows 10 ESU covers Critical and Important security updates, as defined by the Microsoft Security Response Center (MSRC). Microsoft’s SQL Server ESU FAQ describes coverage for Critical security updates. Check the terms for the exact product and version rather than assuming one ESU program matches another. Windows 10 ESU documentation · SQL Server ESU FAQ
How long do Extended Security Updates last?
There is no single ESU duration or deadline. Microsoft’s general FAQ gives a maximum of three years after end of support for certain products, while individual programs set their own coverage periods. For example, the FAQ lists Windows Server 2012/R2 ESU through October 13, 2026; SQL Server 2014 ESU through July 14, 2026; and SQL Server 2016 ESU as available through July 17, 2029. Those are product-specific dates, not a general ESU rule. Microsoft Product Lifecycle FAQ: Extended Security Updates
Rank #2
Windows 10 as a current example
Windows 10 reached end of support on October 14, 2025. Microsoft’s consumer ESU program applies to eligible devices running Windows 10 version 22H2, and its consumer page says enrollment remains open until October 12, 2027; coverage for devices already enrolled is stated to continue through that date. These dates describe the consumer program, not commercial or educational fleet coverage. Windows 10 ESU documentation · Windows 10 consumer ESU page
For organizations, Windows 10 ESU is a separate commercial and educational program. Microsoft says qualifying enrolled organization PCs can receive updates for a maximum of three years after end of support. Consumer enrollment directions and deadlines should not be applied to managed fleets; organizations need to confirm their own eligibility, licensing, and coverage terms. Windows 10 ESU documentation
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsWho can use ESU, and how much does it cost?
Eligibility, price, and enrollment route depend on the product and the environment. For Windows 10 consumer ESU, Microsoft’s requirements include an eligible edition, the latest Windows update, and an administrator Microsoft account. The consumer program cannot be used for commercial scenarios and excludes certain managed or domain-joined devices. Consult Microsoft’s current page for the full eligibility rules and enrollment options. Windows 10 consumer ESU page
Commercial licensing and pricing can change. Server ESU routes can also differ: Microsoft says eligible Windows Server ESUs are free for Azure virtual machines, while on-premises and hybrid servers use specified licensing or Azure Arc routes. Check current terms for the particular product and hosting setup instead of treating ESU as one universally priced purchase. Microsoft Product Lifecycle FAQ: Extended Security Updates
Rank #4
Is ESU a substitute for upgrading?
No. ESU is a temporary way to receive qualifying security updates while planning a move to a supported platform. It does not turn an out-of-support product back into a fully supported one. A Windows 10 PC enrolled in ESU may still be upgraded to Windows 11 if it meets the hardware requirements. Windows 10 consumer ESU page
Before choosing an ESU route, verify these details for the exact product and environment:
Quick Recap
- Which security severity levels are covered.
- Which version and edition qualify.
- The coverage end date, and whether late enrollment requires coverage for prior years.
- Current cost and the applicable purchase, licensing, or hosting route.
- Which support services remain excluded.
How to check an ESU offer
- Name the product and version. “ESU” alone is not specific enough: Windows 10, Windows Server, and SQL Server programs have different terms.
- Identify the environment. Establish whether the device is a consumer PC, a managed organization device, an Azure VM, or an on-premises or hybrid server.
- Read the product’s official ESU terms. Confirm eligible editions, security-update severity, enrollment requirements, coverage dates, and any prior-year coverage rules.
- Compare the bridge with migration. Account for ESU’s limited security scope and the support it does not restore when deciding how quickly to move to a supported platform.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
