Microsoft has introduced a new option for Windows 10 home users to enroll in the Extended Security Updates (ESU) program using Microsoft Rewards points, providing a temporary reprieve for those hesitant to migrate to Windows 11. This move comes as Windows 10 approaches its end-of-support date on October 14, 2025, with ESU offering critical security patches for up to three additional years (until 2028). The program, previously targeted at enterprises, now accommodates individual users through a points-based redemption system or a $30 annual fee1.
ESU Program Structure and Requirements
The ESU program is designed to provide security updates exclusively, with no feature additions or design changes. To qualify, devices must run Windows 10 version 22H2, the final feature update for the operating system. Organizations can enroll through Volume Licensing or Cloud Solution Providers (CSPs), with pricing starting at $61 per device for the first year and doubling annually2. Home users have two pathways: redeeming 1,000 Microsoft Rewards points or paying the $30 annual fee, with regional pricing variations expected. Azure virtual machines, Windows 365, and Azure Virtual Desktop users receive ESU at no additional cost3.
Technical Implications for Security Teams
The expansion of ESU to home users introduces new considerations for enterprise security. Unpatched home devices often serve as entry points for network breaches, and this program may reduce that risk for organizations with remote workers. However, the limited scope of ESU—providing only security updates without technical support unless paired with a Microsoft support plan—means vulnerabilities in deprecated components may persist. System administrators should note that ESU enrollment for organizations begins in November 2024, with updates commencing in November 2025, creating a one-month gap post end-of-support4.
| User Type | Enrollment Method | Cost (Year 1) | Update Coverage |
|---|---|---|---|
| Home Users | Microsoft Rewards (1,000 pts) or $30/year | Free or $30 | Security updates only |
| Enterprises | Volume Licensing/CSP | $61/device | Security updates + optional support |
| Azure VMs | Automatic | Free | Full ESU coverage |
Migration Alternatives and Strategic Considerations
For organizations weighing ESU against other options, Microsoft recommends upgrading eligible devices to Windows 11 or migrating to Windows 365 Cloud PCs, which include three years of free ESU. The Redmond-based company has clarified that ESU licenses purchased in advance will only activate after the October 2025 deadline, requiring careful planning for large deployments5. Security teams should assess their endpoint landscape, as devices incompatible with Windows 11 may need ESU while newer hardware should transition to the supported OS to maintain access to feature updates and full support.
Key dates for ESU implementation include:
- November 2024: Organizational enrollment opens
- October 14, 2025: Windows 10 end-of-support
- November 2025: First ESU updates released
Conclusion
The Microsoft Rewards integration for Windows 10 ESU provides a stopgap for home users, but enterprises should view this as a temporary measure rather than a long-term strategy. With the per-device cost doubling each year and no new features forthcoming, organizations are better served by accelerating Windows 11 adoption where possible. Security teams should inventory all Windows 10 devices by mid-2025 to determine which require ESU enrollment and which can be upgraded or replaced.
References
- “Windows 10 Extended Security Updates program guide,” Microsoft Docs, 2025.
- “Microsoft Windows 10 Extended Security Updates available using reward points,” BleepingComputer, 2025.
- “How to get Windows 10 Extended Security Updates for free: 2 options,” ZDNet, 2025.
- “Windows 10 ESU enrollment for organizations,” Petri, 2025.
- “Considering Windows 10 Extended Security Update vs. Windows 11 migration,” Reddit/k12sysadmin, 2025.
