Blog Post

Core Infrastructure and Security Blog
19 MIN READ

Enabling Extended Security Updates (ESU) for Windows 10 with Intune

Jon Warnken's avatar
Jon Warnken
Icon for Microsoft rankMicrosoft
Jun 26, 2025

Guidance on enabling Extended Security Updates (ESU) for Windows 10 using Intune, especially for systems that cannot be upgraded to Windows 11

Hello everyone, Jon Warnken a Cloud Solutions Architect. This Blog post contains several PowerShell scripts and to not overwhelm you with a wall of code, the scripts are included in collapsible secti...
Updated Oct 20, 2025
Version 5.0
Esu license
Intune
JonathanWarnken
windows 10
chbmabbass's avatar
chbmabbass
Copper Contributor
Oct 14, 2025

If my company has only purchased 1 year of ESU, what, if anything, do I need to edit in the detection and remediation scripts to ensure it doesn't fail?

Jon Warnken's avatar
Jon Warnken
Icon for Microsoft rankMicrosoft
Oct 14, 2025

In the sample code update the value for

 $win10_Y1_Key = "Your-Year-1-ESU-Key-Here"

When you update the value with your Key the code will check, install, or activate as needed. If you leave the default placeholder value the code will skip the check. In you case update the value for Year 1 and leave the default for Years 2 and 3

  • chbmabbass's avatar
    chbmabbass
    Copper Contributor
    Oct 14, 2025

    Jon, thank you for the speedy response! I feel a lot more comfortable deploying this now.

    Thanks again,

    Moe