Blog Post

Core Infrastructure and Security Blog
19 MIN READ

Enabling Extended Security Updates (ESU) for Windows 10 with Intune

Jon Warnken's avatar
Jon Warnken
Icon for Microsoft rankMicrosoft
Jun 26, 2025

Guidance on enabling Extended Security Updates (ESU) for Windows 10 using Intune, especially for systems that cannot be upgraded to Windows 11

Hello everyone, Jon Warnken a Cloud Solutions Architect. This Blog post contains several PowerShell scripts and to not overwhelm you with a wall of code, the scripts are included in collapsible secti...
Updated Jul 09, 2025
Version 4.0
Esu license
Intune
JonathanWarnken
windows 10
Michael_Carlos's avatar
Michael_Carlos
Copper Contributor
Aug 05, 2025

The Check-Win10ESUPrereq script says my W10 machine is eligible for ESU, however Windows Update is not offering me the option to enroll.  What can I do to find out why and fix it?  The machine is not eligible for update to Windows 11. 

abbodi1406's avatar
abbodi1406
Iron Contributor
Aug 09, 2025

The "option to enroll" in Windows Update is for Consumer ESU
this topic is for commercial (keybased) ESU, which is traditional activation, it doesn't show in WU (yet)