sodcalculator

10 Tech How-To

Fix Windows 10 ESU Enroll Option Missing

Guide 10-9701 · Updated · Step by step

If you’re trying to enroll a Windows 10 device in the Extended Security Updates (ESU) program but the enroll option is missing, the fix usually involves checking your Windows edition, installing the prerequisite update, or using the correct enrollment method for your licensing channel. This article walks through why the option disappears and the exact steps to get it back.

What Are Windows 10 ESUs and Who Needs Them?

Windows 10 reached end of support on October 14, 2025. After that date, Microsoft stopped releasing free security updates for most editions. The Extended Security Updates (ESU) program lets organizations and individuals pay for critical security patches for up to three additional years (through October 2028). ESUs do not add new features; they only provide security fixes for vulnerabilities rated critical and important.

ESUs are available for Windows 10 Professional, Enterprise, Education, and Pro Education editions. Home editions are not eligible. The enrollment process differs depending on whether you have a Microsoft 365 subscription, a Windows 10 Enterprise agreement, or a standalone device.

Why the Enroll Option Is Missing

The most common reasons the ESU enroll option doesn’t appear in Windows Update or Settings are:

  • Unsupported edition: Windows 10 Home or Pro for Workstations do not qualify for ESUs.
  • Missing prerequisite update: The ESU enrollment requires a specific servicing stack update (SSU) and the July 2025 update (KB5041587) to be installed.
  • Wrong licensing channel: If you have a Microsoft 365 subscription, you must use the Microsoft 365 Admin Center, not the classic Volume Licensing Service Center (VLSC).
  • Device not registered: For standalone devices, you need to create a Microsoft account and register the device in the ESU portal before Windows Update will show the option.
  • Group Policy or registry block: Some organizations disable ESU enrollment via policy.

How to Fix the Missing Enroll Option

Follow these steps in order. Stop when the option appears.

  1. Check your edition: Open Settings > System > About. Look at “Edition.� If it says Home, you cannot enroll. If it says Professional, Enterprise, Education, or Pro Education, continue.
  2. Install the latest updates: Go to Settings > Update & Security > Windows Update and click “Check for updates.� Install all pending updates, especially the July 2025 cumulative update (KB5041587) and any servicing stack updates. Restart if prompted.
  3. For Microsoft 365 subscribers: Go to the Microsoft 365 Admin Center > Billing > Purchase services. Search for “Windows 10 ESU� and purchase the license. Then go to Devices > Windows 10 and assign the ESU license to your device. After that, Windows Update should show the ESU enrollment option.
  4. For Volume Licensing customers: If you have an Enterprise agreement, use the Volume Licensing Service Center (VLSC) or the new Business Center to download the ESU key. Then go to Settings > Update & Security > Activation and click “Change product key� to enter the ESU key.
  5. For standalone devices: If you don’t have a volume license, you can buy a standalone ESU license from Microsoft. After purchase, you’ll get a product key. Open Settings > Update & Security > Activation, click “Change product key,� enter the ESU key, and then check Windows Update for the enrollment prompt.
  6. If the option still doesn’t appear: Open an elevated Command Prompt (Run as administrator) and run wuauclt /detectnow to force a Windows Update scan. Then restart and check again.

Common Problems and Workarounds

Many users report that after entering the ESU key, the “Enroll this device� button remains grayed out. This usually happens when the device isn’t activated with a valid Windows license. Make sure Windows is activated before attempting enrollment. If you see error 0x80070424 or 0x80070005, run the Windows Update troubleshooter (Settings > Update & Security > Troubleshoot > Windows Update).

Another frequent issue is that the ESU option appears but clicking it fails with “This device is not eligible.� That can occur if the device has a Home edition or if the ESU license was purchased for a different version (e.g., you bought an Enterprise ESU but your device is Pro). Double-check your edition and the license type.

ESU Enrollment Options Compared

There are three main ways to get ESUs, and the enroll option location varies:

  • Microsoft 365 subscription: Included at no extra cost for Windows 10 Pro or Enterprise devices that have an active Microsoft 365 E3 or E5 subscription. Enrollment is done in the Microsoft 365 Admin Center, and the device automatically gets ESUs without a product key.
  • Volume Licensing (Enterprise/Education): For organizations with an Enterprise Agreement or a Server & Cloud Enrollment. You get a MAK key from VLSC and enter it in Activation settings.
  • Standalone (Pro/Enterprise): For small businesses or individuals. You purchase a single ESU license from the Microsoft Store or via a Microsoft representative. You receive a product key and enroll the device manually.

Each method has a different path to the enroll option. If you’re looking for the classic “Enroll� button in Windows Update, that only appears for the standalone and Microsoft 365 methods. For volume licensing, you don’t see an enroll button; you just enter the key.

Costs and Licensing Details

ESU pricing varies by year and channel. Microsoft has published that the first year (2025-2026) costs $61 per device for the standalone option. Year two and three cost double the previous year. For volume licensing, pricing is negotiated per agreement. Microsoft 365 E3/E5 subscribers get ESUs at no additional cost, which is a major benefit.

Note that ESUs are cumulative – you must be enrolled in year one to get year two updates. You cannot skip a year and then enroll later. Also, ESUs are only for security updates; you won’t get new features, bug fixes outside security, or technical support.

Safety and Security Considerations

ESUs are a temporary bridge, not a permanent solution. Microsoft strongly recommends moving to Windows 11 or upgrading to a supported version. ESUs do not protect against all threats; they only patch known critical vulnerabilities. Once the ESU program ends in October 2028, the device will stop receiving updates entirely.

If you decide not to enroll, your Windows 10 PC will still work, but it will be more vulnerable to malware and exploits. For sensitive data, consider offline usage or upgrading hardware. Also, be aware that some third-party software may stop supporting Windows 10 after 2025, which could create compatibility issues.

Alternatives to ESU

If the enroll option is missing and you can’t fix it, or if you don’t want to pay for ESUs, consider these alternatives:

  • Upgrade to Windows 11: Free if your hardware meets the requirements. Use the PC Health Check app to verify compatibility.
  • Switch to a Linux distribution: Ubuntu or Linux Mint can run on older hardware and receive free security updates.
  • Keep using Windows 10 without updates: Not recommended for internet-connected devices, but acceptable for air-gapped systems.
  • Extend support via third-party: Some companies offer custom patches, but these are not official and may void warranties.

Frequently Asked Questions

Why is the ESU enroll option not showing in Windows Update?

Most likely because you haven’t installed the prerequisite July 2025 update (KB5041587) or your edition is Home. Install all updates first, then check again. If you have a volume license, you won’t see an enroll button – you enter the key in Activation settings.

Can I enroll a Windows 10 Home device in ESU?

No. ESUs are only for Professional, Enterprise, Education, and Pro Education editions. Home users must upgrade to a supported edition or to Windows 11.

How much does a Windows 10 ESU cost?

For standalone devices, the first year is $61 per device. Year two costs $122, and year three $244. Volume licensing and Microsoft 365 subscriptions have different pricing – Microsoft 365 E3/E5 includes ESUs at no extra cost.

Do I need to enroll every year?

Yes. You must enroll each year to continue receiving updates. If you skip a year, you cannot enroll for the next year – you’ll have to wait until the program ends.

What happens if I don’t enroll?

Your Windows 10 device will stop receiving security updates after October 14, 2025. It will still function, but it will be more vulnerable to new threats. You can continue using it, but Microsoft recommends upgrading.

Can I use a Windows 10 ESU key on multiple devices?

No. Each ESU license is per device. You need a separate key for each PC. Volume licensing keys have a limited number of activations based on your agreement.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →