Blog Post

Core Infrastructure and Security Blog
19 MIN READ

Enabling Extended Security Updates (ESU) for Windows 10 with Intune

Jon Warnken's avatar
Jon Warnken
Icon for Microsoft rankMicrosoft
Jun 26, 2025

Guidance on enabling Extended Security Updates (ESU) for Windows 10 using Intune, especially for systems that cannot be upgraded to Windows 11

Hello everyone, Jon Warnken a Cloud Solutions Architect. This Blog post contains several PowerShell scripts and to not overwhelm you with a wall of code, the scripts are included in collapsible secti...
Updated Oct 20, 2025
Version 5.0
Esu license
Intune
JonathanWarnken
windows 10
e-idy's avatar
e-idy
Copper Contributor
Nov 13, 2025

Awesome article. This helped a lot.

However, it looks like we are still not receiving updates. The November Quality Update that was released on the 11 still hasn't come through to our Pilot ring in Intune. The license does show activated like in the article.

  • DroidKid's avatar
    DroidKid
    Copper Contributor
    Nov 18, 2025

    I was in the same boat. I got a message center item late yesterday. 

    It looks like you now need a preparation MSU before you can get the updates.....I'm not too happy about this. I'm now going to have to package this in Intune and deploy it first...

    https://support.microsoft.com/en-us/topic/kb5072653-extended-security-updates-esu-licensing-preparation-package-for-windows-10-8c8b215c-d2af-44dc-b712-1ec403842cdc

     

    • Mark Burland's avatar
      Mark Burland
      Brass Contributor
      Nov 20, 2025

      This site https://support.microsoft.com/en-us/topic/october-14-2025-kb5066791-os-builds-19044-6456-and-19045-6456-657e5143-6c5d-4401-8efa-1641ca93c051#id0ebdh=windows_10%2C_version_22h2&id0edbf=business says "This update will be downloaded and installed automatically from Windows Update for Business in accordance with configured policies." As yet, I'm not finding this to be the case.