Fixing the Missing Extended Security Updates Enrollment Option on Windows 10 Before Support Ends

Fixing the Missing Extended Security Updates Enrollment Option on Windows 10 Before Support Ends
  • Some users are currently unable to find the Extended Security Updates enrollment option on Windows 10.

The ability to enroll in the Extended Security Updates (ESU) program should be accessible via the “Windows Update” settings on Windows 10. If you’re not seeing this option, don’t worry—there are several troubleshooting steps to help you resolve this issue.

Microsoft will officially end support for Windows 10 on October 14, 2025. This cessation means the discontinuation of security patches, maintenance updates, and technical support. For those who are not ready to transition to Windows 11, Microsoft has introduced the ESU program, which extends crucial security updates until October 13, 2026.

Unfortunately, many users still face difficulties accessing the enrollment option. If this resonates with you, please follow the troubleshooting measures outlined below.

Bear in mind that Microsoft has indicated the rollout of the enrollment option is gradual. Therefore, it may take some time for it to appear on every eligible device, with the expectation that it will be visible by the support end date.

Although it’s advisable to enroll as soon as possible, you can finalize the enrollment process anytime, either before or after support for the operating system concludes.

In this guide, we’ll delve into various troubleshooting methods to help you rectify the absence of the enrollment option for Windows 10 ESU.

Requirements for Windows 10 ESU Enrollment

To successfully enroll in the Extended Security Updates program, ensure that your computer meets the following criteria:

  • Edition: Must be Windows 10 Home, Professional, Pro Education, or Workstation.
  • Version: Must run on Windows 10 22H2 with the latest updates installed.
  • Profile: The Microsoft account must be set up as an administrator.

For users operating a local account, there will be a prompt directing you to sign in with a Microsoft account, as a lower-privileged account cannot enroll in this program.

It’s important to note that the ESU program is not accessible for other Windows editions or devices connected to Active Directory, Mobile Device Management (MDM), or operating in Kiosk mode.

How to Fix the Missing Windows 10 ESU Enrollment Option

If you’re missing the notification that states “Windows 10 support ends in October 2025” with the “Enroll now” option, consider the following solutions:

1. Install the Latest Updates

Microsoft is rolling out the ESU for Windows 11 22H2 devices, which requires that the latest cumulative update is installed. As of now, this means you should have the September 2025 Security Update or later.

To check for and install the latest updates on Windows 10, do the following:

  1. Open Settings.
  2. Select Update & Security.
  3. Click on Windows Update.
  4. Enable the toggle for “Get the latest updates as soon as they’re available”.
  5. Press the “Check for updates” button to download any available updates.
  7. (Optional) Click the “Download and install” option to apply a preview update.
    8. Quick note: A preview update is optional and contains non-security patches scheduled for the next Patch Tuesday. You are not required to download these during the preview period.
  8. Select Restart now when prompted.

Completing these steps should trigger any available updates to download and install automatically.

Stay updated with the latest guides and information by subscribing to my newsletter.

Subscribe

2. Sign in with a Microsoft Account

To enroll, Microsoft mandates that you utilize a Windows 10 administrator account linked to a Microsoft account, as the Extended Security Updates activation must be associated with this account. This is essential since ESU is technically a paid service, albeit accessible without cost for users.

You can enroll up to ten devices using the same Microsoft account. If you’re currently using a local account, it’s possible that the enrollment option isn’t visible because you must link your Microsoft account to complete the process.

To transition your local account to a Microsoft account, follow these steps:

  1. Open Settings.
  2. Select Accounts.
  3. Go to Your Info.
  4. Click on “Sign in with a Microsoft account instead” under the Local account setting.
  6. Confirm your Microsoft account email address.
  7. Press Next.
  8. Enter your account password and click Sign in.
  9. Verify the local account password.
  10. Option 1: Click “Skip for now” to bypass the Windows Hello setup.
  11. Option 2: Click Next to set up a new PIN.
  12. Create the new PIN and click OK.

After completing these steps, restart your computer and revisit the Windows Update settings for the “Enroll now” option.

3. Issues with Compatible Windows 11 PCs

Some users have noted that even PCs compatible with Windows 11 do not show the ESU enrollment option. However, I have one such device that meets all the criteria and still displays the option.

If you find the option is absent, you can try temporarily disabling TPM 2.0 in the Unified Extensible Firmware Interface (UEFI) firmware. This may help trigger the Extended Security Updates enrollment settings.

To disable TPM 2.0, follow these steps:

  1. Open Settings.
  2. Select Update & Security.
  3. Go to Recovery.
  4. Click Restart now within the “Advanced startup” section.
  6. Click on Troubleshoot.
  7. Go to Advanced options.
  8. Click on “UEFI Firmware settings”.
  10. Click on the Restart button.
  11. Navigate to the Advanced Security or Trusted Computing menu.
  12. Select the TPM 2.0 option and change it to Disabled.

Keep in mind that clues related to this setting may appear under different names such as Security Device or Security Device Support.

If your motherboard does not contain a TPM chip and you’re using an AMD architecture, the security features are likely integrated into the processor. This feature would then show up as “fTPM” (firmware TPM 2.0), “AMD PSP fTPM”, or “AMD fTPM switch.”

For Intel-based systems, TPM 2.0 will generally be presented as “Intel Platform Trust Technology” or “Intel PTT.”

After executing these steps, revisit the “Windows Update” settings to check for the presence of the enrollment option.

4. Force Windows 11 ESU Enrollment Manually

If you’ve followed the above methods and the enrollment option remains out of reach, you might need to force it to appear manually. This involves ensuring that the “Connected User Experiences and Telemetry” service is running and making modifications to the Registry.

To enable the enrollment option manually, carry out the following steps:

  1. Open Start.
  2. Search for Command Prompt or Terminal, right-click, and then choose Run as administrator.
  3. Input the following command to set the Connected User Experiences and Telemetry service to automatically start, and press Enter:

    4. sc.exe config DiagTrack start= auto

  4. Type this command to enable the DiagTrack service:

    5. sc.exe start DiagTrack

  5. Add the next Registry key using this command:

    6. reg.exe add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides"/v 4011992206 /t REG_DWORD /d 2 /f

  7. Restart your computer.
  8. Open Start again.
  9. Search for Command Prompt or Terminal, right-click, and choose Run as administrator.
  10. Enter this command to facilitate Extended Security Updates enrollment:

    11. cmd /c ClipESUConsumer.exe -evaluateEligibility reg.exe query "HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\ConsumerESU"

  12. Finally, restart your computer.

After executing these steps, check the “Windows Update” settings for the “Enroll now” option for the Windows 10 ESU program.

Source & Images

Related Articles:

Download Windows 11 25H2 with Media Creation Tool
Fortnite Introduces Photo Mode for Capturing Selfies with Opponents Amid Intense Matches

Leave a Reply

Your email address will not be published. Required fields are marked *