Blog Post

Core Infrastructure and Security Blog
19 MIN READ

Enabling Extended Security Updates (ESU) for Windows 10 with Intune

Jon Warnken's avatar
Jon Warnken
Icon for Microsoft rankMicrosoft
Jun 26, 2025

Guidance on enabling Extended Security Updates (ESU) for Windows 10 using Intune, especially for systems that cannot be upgraded to Windows 11

Hello everyone, Jon Warnken a Cloud Solutions Architect. This Blog post contains several PowerShell scripts and to not overwhelm you with a wall of code, the scripts are included in collapsible secti...
Updated Oct 20, 2025
Version 5.0
Esu license
Intune
JonathanWarnken
windows 10
MrBi0's avatar
MrBi0
Copper Contributor
Dec 05, 2025

This article has been really useful - thank you!

I did spot an issue with the logic at the end of the remediation script though - It does a check to see if all three of the Y1, Y2 & Y3 keys are valid and installed and only returns success if they are.  If you're only using one key, (eg, just Y1), the script always returns failed.

Change this...

If($ESUY1Status -and $ESUY2Status -and $ESUY3Status) {

to this...

If($ESUY1Status -or $ESUY2Status -or $ESUY3Status) {

...and it works.