Short answer: If the Windows 10 ESU “Enroll now” link is not showing in Windows Update, your PC is almost always missing one of Microsoft’s prerequisites. It must run Windows 10 version 22H2 in the Home, Pro, Pro Education or Workstations edition, have the latest updates installed, and you must use an administrator account that is not a Microsoft child account. Microsoft also does not offer enrollment on PCs that are domain-joined, joined to Microsoft Entra, enrolled in device management, in kiosk mode, or already licensed for ESU. If the wizard appears but fails, install the out-of-band update KB5071959, which Microsoft released to fix exactly that.
Windows 10 ESU not showing? Where the Enroll now link should appear
Microsoft’s instructions are short: go to Settings > Update & Security > Windows Update. “If your device meets the prerequisites, you’ll see a link to enroll in ESU.” There is no separate app to download and no enrollment website to visit. The link lives on the Windows Update page and nowhere else.
So when the link is missing, Windows has decided the PC does not meet a prerequisite. Work through the checks below in order. The first three fix most cases.
Check 1: Windows 10 version 22H2 and a covered edition
The consumer ESU program covers only Windows 10, version 22H2, in these editions: Home, Professional, Pro Education and Workstations.
- Press
Windows + R, typewinverand press Enter. The window shows the version, for example “Version 22H2.” - For the edition, open Settings > System > About and look under Windows specifications.
If it says 21H2 or older: install the pending updates in Windows Update until the PC reaches 22H2. The consumer program does not cover older versions.
If the edition is Enterprise, Education or an LTSC version: these are not on Microsoft’s consumer list. Those PCs use Microsoft’s commercial ESU program, which an IT administrator sets up. See Microsoft’s Enable Extended Security Updates guide.
Check 2: install every update, including the ESU preparation packages
Microsoft requires “the latest Windows update installed.” In practice, the enrollment code arrives through updates, so a PC that is behind will not show the link.
- Go to Settings > Update & Security > Windows Update and select Check for updates.
- Install everything offered, including optional updates if they are listed, and restart.
- Check again. Repeat until Windows Update reports no more updates.
Two Microsoft support articles name specific packages:
- Microsoft’s consumer ESU page lists “the Windows 10 ESU Licensing Preparation Package, KB126256” as required.
- Microsoft’s support article for KB5072653, titled “Extended Security Updates (ESU) Licensing Preparation Package for Windows 10,” says it must be installed after the October 2025 security update, KB5066791, and that the device restarts automatically afterwards. It says Windows Update installs it automatically once KB5066791 is present.
The two pages use different KB numbers for what they both call the licensing preparation package. You do not need to pick one: both arrive through Windows Update, so installing every offered update covers either. If you manage updates manually, check your update history for KB5072653 under View update history.
Check 3: the right account
Microsoft sets three account rules:
- Administrator. “The Microsoft account used to sign in to the device must be an administrator account.” A standard user account will not see a working enrollment.
- Microsoft account. The ESU license is tied to the Microsoft account used to enroll. If you sign in to Windows with a local account, Windows prompts you to sign in to a Microsoft account during enrollment. You cannot enroll without one.
- Not a child account. “The Microsoft account can’t be a child account.”
To see your account type, open Settings > Accounts > Your info. It says “Administrator” under your name if you have admin rights.
A child’s PC
Microsoft’s FAQ says that if a child’s device shows a message that it can’t be enrolled, “it likely means they don’t have the necessary permissions.” A parent has to enroll it from their own user account on that PC. If you are not a user on it, your child must first add you and set your account as an administrator. Then switch to your account and enroll.
Check 4: work, school and managed PCs
The consumer program “can’t be used in commercial scenarios.” Microsoft does not offer enrollment for:
- Devices in kiosk mode.
- Devices joined to an Active Directory domain or to Microsoft Entra.
- Devices enrolled in a mobile device management (MDM) solution.
- Devices that already have an ESU license.
One exception: devices that are only Microsoft Entra registered can use the consumer program.
To check, open Settings > Accounts > Access work or school. A connected work or school account can mean the PC is joined or managed. A PC your employer or school issued should get ESU through that organization, not the consumer route. On your own PC, only remove a work or school connection if you are sure you no longer need it; doing so can remove access to that organization’s apps and data.
Microsoft adds a related rule. If a PC enrolled in the consumer program later becomes a commercial device in one of these ways, its consumer enrollment “will be suspended until it is no longer being used as a Commercial device.”
Check 5: your region
Microsoft says consumer ESU “enrollment options and timing may vary by region, such as in the European Economic Area (EEA).” Its FAQ also includes the question “If the consumer ESU program isn’t available in my area, what can I do to stay protected?” Microsoft’s answer is to check whether the PC can upgrade to Windows 11, or to look at new Windows 11 PCs.
In the EEA, the options differ from the rest of the world. Staying signed in with the enrolling Microsoft account keeps ESU at no additional cost; a one-time purchase lets you keep a local account. Our Windows 10 ESU guide sets out each region’s routes and prices.
When the wizard appears but fails: KB5071959
Some PCs saw the link, started enrollment and then hit an error. Microsoft released an out-of-band update on November 11, 2025, KB5071959 (OS Build 19045.6466), for this case. Its notes say it “addresses an issue in the Windows 10 Consumer Extended Security Update (ESU) enrollment process, where the enrollment wizard may fail during enrollment.”
Microsoft says the update “is offered to consumer devices that are not enrolled” in ESU. To get it:
- Go to Settings > Update & Security > Windows Update and select Check for updates.
- Install KB5071959 if it is offered, and restart.
- Return to Windows Update and run the enrollment wizard again.
Microsoft notes you must have the latest servicing stack update installed, or Windows Update may not offer the fix until you do. Installing all offered updates in order handles that.
How to confirm you’re enrolled
Microsoft says you can check “anytime by navigating to Settings > Update & Security > Windows Update.” The page shows your enrollment status. If you paid, the order also appears in your Microsoft account order history.
Enrollment covers the whole PC. Once any user on a Windows 10 PC enrolls, every other user on that PC is protected too. One license covers up to 10 devices on the same Microsoft account.
What we won’t recommend
- Scripts or tools that claim to “force” ESU. Microsoft offers enrollment only through Windows Update, and two of its routes cost nothing. We don’t cover unofficial ways to receive ESU updates.
- “ESU keys” from third-party sellers. The consumer program is tied to your Microsoft account and enrolled from Windows Update.
- Staying unpatched while you troubleshoot. Microsoft says devices “will be more vulnerable and susceptible to viruses and malware before enrollment.” If you cannot enroll at all, see whether the PC can move to Windows 11: our PC Health Check guide shows which failures are fixable. If it cannot, our guide to alternatives for older PCs compares Linux Mint, Zorin OS and ChromeOS Flex.
Questions
Why don’t I see “Enroll now” in Windows Update?
A prerequisite is missing: the PC is not on 22H2, updates are pending, the account is not an administrator or is a child account, or the PC is joined to a work or school domain, managed, or in kiosk mode.
Is there a website where I can enroll instead?
Microsoft’s instructions describe enrollment only from Settings > Update & Security > Windows Update. Be wary of any site that asks you to download an “ESU enroller.”
I installed all updates and still see nothing. What now?
Restart and check for updates again, since some packages install only after a previous one. Then check your account type and Settings > Accounts > Access work or school.
The wizard says something went wrong. How do I fix it?
Install KB5071959 from Windows Update and try again. Microsoft released it to fix enrollment wizard failures.
Can I enroll with a local account?
No. Microsoft says you need to sign in to a Microsoft account to enroll. In the EEA, the paid route lets you keep using a local account afterwards.
Can I enroll a Windows 10 Enterprise or LTSC PC?
Not through the consumer program. Those editions are not on its list; organizations use Microsoft’s commercial ESU.
Is it too late to enroll?
No. Microsoft says you can enroll any time until the program ends on October 12, 2027, and you receive the updates released since October 14, 2025.
Does enrolling stop me upgrading to Windows 11 later?
No. Microsoft says enrolling “does not prevent you from upgrading your PC to Windows 11 if it meets the hardware eligibility requirements.”
Sources
- Windows 10 Consumer Extended Security Updates (ESU), Microsoft (US page, checked September 26, 2026)
- Windows 10 Consumer Extended Security Updates (ESU), Microsoft (Ireland/EEA page)
- November 11, 2025, KB5071959 (OS Build 19045.6466) Out-of-band, Microsoft Support
- KB5072653: ESU Licensing Preparation Package for Windows 10, Microsoft Support
- Extended Security Updates (ESU) program for Windows 10, Microsoft Learn
- Enable Extended Security Updates (ESU), Microsoft Learn
- Install Windows updates, Microsoft Support
