What Is the Windows Extended Security Updates (ESU) Program?
The Extended Security Updates (ESU) program is a paid Microsoft offering designed for organizations with Windows 10 PCs that cannot be upgraded to Windows 11 immediately.
It is not an extension of standard support: the ESU program only provides critical and important security patches for Windows 10.
When Does the Extended Security Updates Program Start for Businesses?
The first year of coverage begins in November 2025, but registration is already open and will remain available until October 13, 2026. Organizations can subscribe for a maximum of three years, up to October 2028.
Enrollment in the ESU program is not automatic. It must be purchased annually, and each year requires renewing the ESU licence to continue receiving updates. This yearly cycle adds extra administrative overhead for IT teams.
What Does the ESU Service Include (and What Doesn’t it Cover)?
- critical and important security patches
- Microsoft Defender Antivirus updates until October 2028
- full technical support (except for activation and installation issues with ESU updates)
- non-security related fixes
- new Windows features or performance improvements
KEY TAKEAWAY
The ESU program ensures a basic level of protection, but it does not meet long-term modernization needs.
Microsoft 365 Apps and Compatibility with Windows 10 ESU
Microsoft 365 applications installed on Windows 10 will continue to be supported long after the end of free official support.
Specifically, they will receive security updates until October 10, 2028, and feature updates until 2026, depending on the chosen update channel.
After 2026, features will be frozen, but security patches will continue until 2028. This means your productivity tools will remain usable during the ESU period, but without the latest innovations.
Source : Windows 10 end of support and Microsoft 365 Apps – Microsoft 365 Apps | Microsoft Learn
Practical Scenarios Where Windows 10 ESU Still Makes Sense
01 - Budget Constraints
02 - Specialized Workstations
03 - Operational Constraints
These situations are real and affect a meaningful number of Quebec SMBs.
Still, recent data shows that most organizations are already planning a fast migration.
According to the IDC U.S. Commercial PCD Survey 2024:
- Over 53% plan to complete their migration in the first half of 2025
- 28% by the end of 2025
- 16% expect to delay until 2026 or later
In other words, ESU should be viewed strictly as a short-term option, not a long-term strategy.
Do Not Wait Until Windows 10 Support Ends to Secure Your Business.
Let our experts help you upgrade to Windows 11 with confidence.
Contact us
Cost of Extended Security Updates on Windows 10
- $86 CAD for the first year of ESU licensing — November 2025 to October 2026
- $172 CAD for the second year of ESU licensing — November 2026 to October 2027
- $345 CAD for the third and final year of ESU licensing — November 2027 to October 2028
KEY TAKEAWAY
If you wait until after October 2026 to purchase Windows 10 Extended Security Updates, you will still need to pay for Year 1, since Windows 10 security update fees are cumulative.
Source: Extended Security Updates (ESU) program for Windows 10 | Microsoft Learn
How to Purchase and Deploy ESU Licences on Windows 10 Devices
Obtaining ESU requires buying a specific activation key, which must be entered on each individual workstation. This process is not automatic and can require manual intervention, device by device.
However, some centralized administration solutions make it possible to automate the deployment of these keys. Companies can also choose to work with a managed cloud services provider, such as ited, who can handle provisioning and licence deployment while supporting the planning of their Windows 11 migration.
Why Extended Security Updates Are Not Enough in the Long Run
01 - Minimal Security and Ongoing Risks
02 - Declining Software Compatibility
03 - No Evolution and Limited Support
The cost of maintaining ESU is also an annual expense that increases significantly for businesses year over year.
These limitations confirm that ESU is nothing more than a temporary safety net, helping organizations plan their transition to Windows 11, but never a sustainable long-term strategy.
Why Should You Plan Your Windows 11 Transition Now
The Benefits of a More Modern and Secure Operating System
- Enhanced security: TPM 2.0, Secure Boot
- Ongoing support: regular security and feature updates
- Stronger compatibility: modern applications, cloud services, and AI tools
- Increased productivity: streamlined interface, optimized multitasking, seamless integration with Microsoft 365
How ited Supports Your Windows 11 Migration
At ited, your migration is not treated as a simple technical upgrade. It is a strategic project that requires rigorous planning.
- IT asset assessment: complete inventory of workstations, hardware and software compatibility checks
- Planning and testing: pilot group setup to validate the migration in a controlled environment
- Phased deployment: multi-step migration to minimize disruptions and secure each stage
- Post-migration support: user training, configuration optimization, and ongoing performance monitoring
Our approach turns what could feel like a constraint—the end of Windows 10 support—into an opportunity to strengthen your IT security, compliance, and governance.
Plan Your Windows 11 Migration with ited
Contact our expert
