Blog Post

Core Infrastructure and Security Blog
19 MIN READ

Enabling Extended Security Updates (ESU) for Windows 10 with Intune

Jon Warnken's avatar
Jon Warnken
Icon for Microsoft rankMicrosoft
Jun 26, 2025

Guidance on enabling Extended Security Updates (ESU) for Windows 10 using Intune, especially for systems that cannot be upgraded to Windows 11

Hello everyone, Jon Warnken a Cloud Solutions Architect. This Blog post contains several PowerShell scripts and to not overwhelm you with a wall of code, the scripts are included in collapsible secti...
Updated Oct 20, 2025
Version 5.0
Esu license
Intune
JonathanWarnken
windows 10
Merson's avatar
Merson
Copper Contributor
Nov 07, 2025

This article serves an authoritative write up for ESU enablement via MAK key distribution. However, Win 10 ESU 2025 Cloud Managed license is  confusing. Is this license applicable on physical devices that are Azure joined and Intune Managed?  Some articles, I remember talks about Intune managed or Auto Patch clients can use this license, however totally missing a elaborate guidance. Even MS Support is not prepared. Can you shed some light here?