Windows 10 ESU for Small Business: Cost, Enrollment, and the October 2026 Price Jump

This post contains affiliate links. If you purchase through our links we may earn a small commission at no extra cost to you.

If you still have Windows 10 machines running, you have a decision to make in the next eight weeks — and it is not the one most articles describe.

October 13, 2026 is not an enrollment deadline. Nobody gets locked out. What happens on that date is that the price of Extended Security Updates doubles, and because ESU is cumulative, waiting does not save you a dollar. It just buys you less coverage for the same money.

Here is what ESU actually costs, how a small business buys it (there is no “buy now” button, which trips up almost everyone), the free paths that genuinely exist, and the honest math on paying versus replacing.

Where things stand

Windows 10 reached end of support on October 14, 2025. Security updates, feature updates, and technical support all ended that day, for every edition except LTSC, which runs on its own separate lifecycle and is not covered by this program. Version 22H2 was the final release.

That was ten months ago. If you have Windows 10 machines that are not enrolled in ESU, they have not received a security patch since.

What commercial ESU costs

Three years, priced per device, doubling annually:

• Year 1 — $61/device, covering through October 13, 2026
• Year 2 — $122/device, October 14, 2026 through October 12, 2027
• Year 3 — $244/device, through October 10, 2028

Three-year total: $427 per device. There is a hard stop on October 10, 2028. No year four exists and none has been hinted at.

Eligible editions are Windows 10 Enterprise, Education, and Pro in commercial use, all on version 22H2. Annual SKUs only — no partial years — with a minimum purchase of one license.

The cumulative rule is the part that matters

Microsoft’s documentation is explicit: you may only acquire Year 2 and Year 3 licenses if you have also acquired the licenses for the prior years. You cannot skip Year 1 and buy only Year 2.

Work through what that means today. If you enroll a machine right now, you pay $61 for about two months of Year 1 coverage. If you wait until November, you pay $183 — Year 1 plus Year 2 — for coverage that runs to October 2027, and the $61 you spent on Year 1 buys you nothing at all, because that year has already ended.

So the choice is not “pay now or pay later.” It is “pay now and get 14 months, or pay the same amount later and get 12.” Waiting is strictly worse.

The consumer program, and why it probably does not apply to you

There is a consumer ESU program, and it is genuinely cheap: free if you enable Windows Backup to a Microsoft account, free for 1,000 Microsoft Rewards points, or $30 one-time. One license covers up to ten devices on the same account.

Microsoft quietly extended it in June 2026 — coverage now runs to October 12, 2027, not October 2026 as originally announced. Anyone already enrolled was extended automatically. If you read an article saying consumer ESU ends this October, it is stale.

Here is the catch for business use. The consumer route excludes devices that are Active Directory domain-joined, Microsoft Entra-joined, MDM or Intune-managed, in kiosk mode, or already ESU-licensed. Entra-registered personal devices still qualify.

Which produces a genuinely awkward situation worth naming out loud: a ten-person shop running unmanaged workgroup PCs on local accounts can technically use the $30 consumer route. The moment you do the right thing and domain-join or Intune-enroll those machines, you are in commercial ESU at $61 rising to $244. Managing your fleet properly costs you the cheap option. That is the actual tradeoff, and nobody at Microsoft is going to say it out loud.

How a small business actually buys it

There is no self-service purchase. This is the single most common point of confusion, and Microsoft’s own guidance to a fifteen-machine company was blunt: you cannot purchase these licenses directly from Microsoft’s website; you must go through a Cloud Solution Provider.

The sequence:

1. Confirm every target device is on version 22H2. Nothing else is eligible.
2. Install the prerequisites, in order — KB5066791 or a later cumulative, then KB5072653, the ESU Licensing Preparation Package. The order matters.
3. Buy through a CSP partner or Volume Licensing. Ask for it by name: “Windows 10 Extended Security Updates, Year N, for X devices, delivered as a Multiple Activation Key.” ESU is sold as perpetual SKUs, one per year, not as a subscription.
4. Retrieve the key in the Microsoft 365 admin center: Billing → Your Products → Volume licensing → Contracts → find the ESU License ID → More actions → View product keys. You need the Product Key Reader or VL Administrator role.
5. Activate on each device from an elevated prompt: slmgr.vbs /ipk <ESU MAK>, then slmgr.vbs /ato <Activation ID>, then slmgr.vbs /dlv to confirm License Status reads Licensed.

The Activation IDs are year-specific and a wrong one fails quietly:

• Year 1: f520e45e-7413-4a34-a497-d2765967d094
• Year 2: 1043add5-23b1-4afb-9a0f-64343c8f3f8d
• Year 3: 83d49986-add3-41d7-ba33-87c7bfb5c0fb

Each year needs a new key and a new Activation ID. Put “re-key ESU” on the calendar for October 14, 2026, because nothing will remind you.

The free path that actually exists

ESU is included at no additional cost for Windows 10 running on Windows 365 Cloud PCs, Azure Virtual Desktop, Azure VMs, Azure Local, and several related platforms.

More interesting for a small business: a physical Windows 10 endpoint gets ESU free if the signed-in user holds Windows 365 Enterprise with a Cloud PC assigned, or Windows 365 Flex in Dedicated mode. Conditions: the device must be Entra joined or Entra hybrid joined, the user must sign in with the same account at least once every 22 days, and it covers up to ten physical devices per eligible user. No key needed — licenses backfill automatically to the admin center.

Two things people get wrong here. Windows 365 Business does not confer this benefit — only Enterprise and Flex. And Azure Virtual Desktop covers the hosted VMs, not your physical laptops.

Also worth stating plainly: buying Cloud PCs purely to dodge a $122 ESU fee is upside-down math. This path only makes sense if you wanted Windows 365 anyway.

What ESU does not get you

Security updates rated Critical or Important by Microsoft’s Security Response Center. That is the entire list.

No feature updates. No non-security bug fixes. No general technical support — Microsoft support covers ESU activation, ESU installation, and regressions caused by an ESU update, and nothing else. No driver support; that lives with Dell, HP, or Lenovo on their own lifecycles.

One thing you should not buy ESU for: Microsoft 365 Apps on Windows 10 receive security updates through October 10, 2028 whether or not you have ESU. App patching is not gated on ESU enrollment. If someone tries to sell you ESU on that basis, they are wrong. Feature updates for M365 Apps on Windows 10 do stop at version 2608, so those machines freeze there and receive security-only updates until 2028.

The replace-versus-extend math

Business-class laptops currently start around $970–$990 and realistically land at $950–$1,400 configured with 16GB and a 512GB SSD, plus $100–$300 per device in labor for imaging, migration, and app reinstall. Call it $1,100–$1,700 all-in per seat.

Against that, full three-year ESU at $427 is roughly 30–40% of a replacement — and it buys you zero performance, zero warranty, zero battery life, and leaves you holding a machine that will be five to eight years old in October 2028 with nowhere left to go.

Where ESU genuinely wins: as a bridge. Paying $183 per device to carry machines fourteen more months while you stagger a refresh across two budget cycles beats writing a check for $1,400 × N today. That is the defensible use.

Where it loses: as a destination. Spending $427 to reach October 2028 on hardware you will replace anyway means you spent a third of a new PC to defer, then bought the PC at 2028 prices.

Where it is close to mandatory: a machine tied to a legacy line-of-business application, instrumentation control, or a validated software stack that cannot move yet. Segment those, enroll them, and do not pretend it is a strategy.

The 2026 wrinkle that flips the usual advice

The standard instinct — wait, hardware gets cheaper — is wrong this year.

Memory prices have blown up. Gartner projected in February 2026 that PC prices would rise about 17% in 2026 versus 2025, with DRAM and SSD costs up roughly 130% by year end, memory climbing to 23% of a PC’s bill of materials, and business device lifetimes stretching about 15% longer as a result. IDC is considerably more conservative, forecasting a 4–6% increase, up to 8% in a pessimistic case.

Those two forecasts disagree by a wide margin, and you should weigh both rather than picking one. But they point the same direction: replacing sooner is likely cheaper than replacing later. That argues against stacking all three ESU years and hoping prices fall.

Which machines can move, and which cannot

Windows 11 needs TPM 2.0, Secure Boot with UEFI, 4GB RAM, 64GB storage, and a supported CPU — Intel 8th generation or newer, AMD Ryzen 2000-series or newer.

Before you write off anything, check two things. A large share of 2018–2020 business machines that “fail” have a firmware TPM (Intel PTT or AMD fTPM) that the manufacturer shipped switched off — run Get-Tpm and enable it in BIOS. And machines booting in legacy mode with an MBR disk can often be converted to GPT and moved to UEFI with Secure Boot. Between them, those two fixes recover more machines than anything else, and both are free.

What is not fixable is the CPU. Pre-8th-gen Intel or pre-Ryzen-2000 is a hardware decision, full stop. Our business laptop buying guide and desktop PC picks cover replacements, and if you are budgeting the refresh, IT budget planning walks through spreading it across cycles.

Shopping replacements now: business laptops with 16GB and a 512GB SSD and Windows 11 business desktops are the two categories worth pricing before the memory increases fully land.

Counting what you actually have

Every decision above depends on knowing exactly how many Windows 10 devices you have, what version they run, whether they are Win11-eligible, and who uses each one. Most small businesses discover mid-project that the count was wrong.

Build the list before you price anything. Our guide to managing company laptops covers the process; if you want a ready-made spreadsheet, the IT Asset & Inventory Tracker has the fields already laid out, and there is a free lite version if you just need somewhere to start.

Key takeaways

• October 13, 2026 is a price step, not a deadline. Year 2 costs $122 and enrollment stays open.
• ESU is cumulative — you cannot skip Year 1, so waiting costs the same and buys less.
• Three-year total is $427 per device, ending permanently October 10, 2028.
• Consumer ESU was extended to October 2027 but excludes domain-joined, Entra-joined, and MDM-managed devices.
• There is no self-service purchase — commercial ESU goes through a CSP partner or Volume Licensing, delivered as a MAK.
• Windows 365 Enterprise or Flex gives free ESU on physical endpoints. Windows 365 Business does not.
• Microsoft 365 Apps stay patched on Windows 10 through 2028 with or without ESU.
• PC prices are rising in 2026, which argues for replacing sooner rather than stacking ESU years.

Frequently asked questions

Can I just skip ESU and keep running Windows 10? Technically yes, and the machines will keep working. But they have received no security patches since October 2025, and that gap widens every month. For anything touching customer data, payment systems, or your network, that is a risk most cyber insurance policies and client contracts will not tolerate.

Does ESU cover Windows 10 LTSC? No. LTSC and LTSB editions run on separate lifecycles and are excluded from this program entirely.

What if I only need it for three machines? Minimum purchase is one license, so three is fine. Find a CSP partner through Microsoft’s partner directory — most will sell small quantities, though some have minimums. At three devices you are looking at $183 for Year 1 and Year 2 combined, which is almost certainly cheaper than replacing three machines this quarter.