Windows 10 Extended Security Updates (ESU) is a paid subscription that now provides security fixes, Mainstream support for Windows 10 has ended. Free security updates and technical support are no longer available.
ESU only provides security patches. This paid service which extends “critical” and “important” security updates for Windows 10 for a maximum of three years, but does not include technical support, non-security fixes, or new features. Additionally, customers experiencing technical issues with Windows 10 not related to ESU updates will be advised to upgrade to Windows 11. ESU does not provide full fixes as vulnerabilities rated as “moderate” or “low” will not be addressed.
Given these limitations, Gartner recommends that regulated entities evaluate whether Windows 10 ESU meets regulatory definitions and requirements for end-of-life software.
Deep Dive into Windows 10 ESU
For organizations that were unable to migrate by October 14, 2025, Microsoft offers ESU program for Windows 10. ESU is a paid annual subscription that only provides “critical” and “important” security fixes until October 14, 2028. Microsoft provides Windows 10 ESU for consumer and commercial customers.
The Windows 10 ESU program is strictly limited to delivering “critical” and “important” security fixes for vulnerabilities discovered after the end of support date. Vulnerabilities rated as “moderate” or “low” cannot be addressed, meaning only partial coverage is provided. No additional updates, such as the release of new features, enhancements, or non-security bug fixes, are provided and the operating system remains functionally unchanged except for specified security fixes.
ESU does not operate as normal as general technical support is excluded. Microsoft will only assist with license activation, ESU installation, and troubleshooting issues directly caused by these updates. All other IT support, from usability issues to hardware or software compatibility Performance issues should be resolved internally or by third party vendors.
Regulated entities must evaluate whether Windows 10 ESU meets their regulatory requirements. Many regulatory frameworks have clear requirements and definitions for end-of-life (EOL) software, and failure to comply with these requirements can have additional financial consequences.
Microsoft 365 support on Windows 10
On April 24, 2025, Microsoft confirmed that Microsoft 365 Apps for Windows 10 will continue to receive “critical” and “important” security updates until October 10, 2028, as well as feature updates until October 2026. Support for these apps will be limited, and any issue affecting only Windows 10 may result in a recommendation to upgrade to Windows 11 for full compatibility and ongoing assistance.
Support for third-party apps in Windows 10 ESU will vary by vendor, but support is scheduled to end on October 14, 2025. Organizations planning to run business-critical applications on Windows 10 ESU should confirm with the vendor that they will be supported before making a purchase.
ESU prices double every year
Microsoft Windows 10 ESU licensing is structured so that encourage the transition to Windows 11 or Azure virtual environments, doubling prices annually across all customer segments. ESU licenses are cumulative, so second year subscribers must purchase both first and second year licenses, and third year subscribers must cover all three years.
Educational institutions receive a significant discount compared to commercial organizations. Commercial customers who manage Windows 10 devices via Microsoft Intun receive a 25% discount, which reduces your first year ESU fee to $45 per device. This escalating cost pattern reinforces Microsoft's position that ESU is a short-term bridge and underscores the need to prioritize Windows 11 deployments.
ESU is available free for Azure VMs and Windows 365 cloud PCs. ESU is also available for up to three years at no additional cost for Windows 10 VMs running multiple Azure services, such as:
- Windows 365
- Azure Virtual Desktop
- Azure Virtual Machines
- Azure Dedicated Host
- Azure VMware Solution
- Nutanix Cloud Clusters on Azure
- Azure Local (Azure Local is the new name for Azure Stack HCI).
- Azure Stack Center
- Azure stack Edge
Physical Windows 10 endpoints connecting to cloud-based Windows 365 PCs (for example, a Windows 10 laptop used to access Windows 365) are also eligible for up to three years of ESU with an active Windows 365 subscription. Running Windows 10 on Azure does not change the lack of technical support.
ESU – temporary bridge
Gartner recommends upgrading to Windows 11 as soon as possible. Gartner customers report that upgrading to Windows 11 was significantly easier and less effort-intensive than previous Windows upgrades.
The Windows 10 ESU program only provides “critical” and “important” security updates, leaving “moderate” and “low” vulnerabilities unpatched. Costs double annually and support is limited to security patches, making ESU unsuitable for long-term use. Non-security issues require internal or third-party support, increasing the total cost of ownership. Gartner urges organizations using Windows 10 ESU to recognize that it is a temporary and incomplete approach to long-term support for many Windows PCs.
However, for devices that cannot immediately meet the hardware requirements of Windows 11, the ESU can serve as a temporary bridge. Gartner encourages IT leaders to view the October 14, 2025 end of support date as a catalyst for broader IT strategy discussions, prioritizing migration to ensure a secure and supported environment.
This article is an excerpt from a Gartner report. What is the Windows 10 Extended Security Updates Program?? Timon Watson is a Director Analyst at Gartner.
