Blog Post

Core Infrastructure and Security Blog
19 MIN READ

Enabling Extended Security Updates (ESU) for Windows 10 with Intune

Jon Warnken's avatar
Jon Warnken
Icon for Microsoft rankMicrosoft
Jun 26, 2025

Guidance on enabling Extended Security Updates (ESU) for Windows 10 using Intune, especially for systems that cannot be upgraded to Windows 11

Hello everyone, Jon Warnken a Cloud Solutions Architect. This Blog post contains several PowerShell scripts and to not overwhelm you with a wall of code, the scripts are included in collapsible secti...
Updated Oct 20, 2025
Version 5.0
Esu license
Intune
JonathanWarnken
windows 10
DroidKid's avatar
DroidKid
Copper Contributor
Nov 18, 2025

I was in the same boat. I got a message center item late yesterday. 

It looks like you now need a preparation MSU before you can get the updates.....I'm not too happy about this. I'm now going to have to package this in Intune and deploy it first...

https://support.microsoft.com/en-us/topic/kb5072653-extended-security-updates-esu-licensing-preparation-package-for-windows-10-8c8b215c-d2af-44dc-b712-1ec403842cdc

 

Mark Burland's avatar
Mark Burland
Brass Contributor
Nov 20, 2025

This site https://support.microsoft.com/en-us/topic/october-14-2025-kb5066791-os-builds-19044-6456-and-19045-6456-657e5143-6c5d-4401-8efa-1641ca93c051#id0ebdh=windows_10%2C_version_22h2&id0edbf=business says "This update will be downloaded and installed automatically from Windows Update for Business in accordance with configured policies." As yet, I'm not finding this to be the case.