Blog Post

Core Infrastructure and Security Blog
19 MIN READ

Enabling Extended Security Updates (ESU) for Windows 10 with Intune

Jon Warnken's avatar
Jon Warnken
Icon for Microsoft rankMicrosoft
Jun 26, 2025

Guidance on enabling Extended Security Updates (ESU) for Windows 10 using Intune, especially for systems that cannot be upgraded to Windows 11

Hello everyone, Jon Warnken a Cloud Solutions Architect. This Blog post contains several PowerShell scripts and to not overwhelm you with a wall of code, the scripts are included in collapsible secti...
Updated Jul 09, 2025
Version 4.0
Esu license
Intune
JonathanWarnken
windows 10
GlidingChute701's avatar
GlidingChute701
Copper Contributor
Jul 09, 2025

Another solution for the PowerShell execution policy setting if your environment prefers to have scripts blocked or set to something other than bypass or remote signed is to set your install command for the Win32 app like this:

powershell.exe -ExecutionPolicy Bypass -File .\ScriptName.ps1

That'll change the execution policy for just that PowerShell instance and save having to adjust configuration profiles.

Jon Warnken's avatar
Jon Warnken
Icon for Microsoft rankMicrosoft
Jul 09, 2025

Excellent point.  I have updated the post for this.