Windows 10 ESU Year 1 Ends: What to Do Now

Windows 10 ESU Year 1 coverage ends on 13 October 2026. ESU stands for Extended Security Updates. It is Microsoft's paid way to keep Windows 10 PCs patched after normal support ended on 14 October 2025. Malaysian businesses still on Windows 10 need a clear plan now.

What is Windows 10 ESU (Extended Security Updates)?

Think of a security update as a repair for a weak lock. Normally these repairs come with Windows at no extra charge. For Windows 10, the free repairs stopped. ESU lets a business keep receiving them by paying for each PC, each year.

ESU gives enrolled PCs critical and important security updates. It does not add new features. It also does not include general technical support.

Commercial ESU applies to Windows 10 Pro, Enterprise and Education. Each device must run version 22H2. Without ESU, PCs stop receiving security and reliability fixes. Known flaws then stay open, and attackers look for exactly those flaws.

Windows 10 ESU cost and key dates

Commercial ESU costs $61 USD per device for Year 1. Microsoft says the price doubles every year. Coverage lasts for up to three years after end of support. You cannot buy partial periods, such as six months.

Year 1 ends on 13 October 2026. Teams that want continuous cover must decide now. Teams that do not enrol will carry the risk on every Windows 10 PC.

ESU is priced per device, so an accurate device list comes first. Include laptops used by remote staff and PCs in branch offices. Missing even a few devices can leave quiet gaps in your patching.

Your three options after Year 1

Option 1: Upgrade to Windows 11

This is the long-term fix. Windows 11 needs a 64-bit processor of 1 GHz or faster with two or more cores. It also needs 4 GB of RAM and 64 GB of storage. The PC must support UEFI with Secure Boot, and it needs TPM 2.0.

Older PCs may fail the TPM or processor check. Test them before you plan any upgrade.

Option 2: Buy ESU as a bridge

ESU buys time for PCs that cannot upgrade yet. It is a stop-gap, not a destination. The price doubles each year, so the bridge gets more costly the longer you stay on it.

Option 3: Replace the device

Some PCs are too old to upgrade. For these, replacement may cost less than two or three years of rising ESU fees. Compare the numbers per device before you decide.

Protect the PCs you cannot retire yet

Patches fix known flaws. They do not watch for attacks in progress. Any PC that stays on Windows 10 needs extra monitoring while it remains in service. Where you can, limit who signs in to these PCs and keep them away from your most sensitive systems.

Use this checklist with your IT team:

• List every Windows 10 device and its owner.
• Check that each device runs version 22H2.
• Test each device against the Windows 11 requirements.
• Decide per device: upgrade, ESU bridge or replace.
• Confirm endpoint monitoring covers every PC that stays on Windows 10.

How Primary Guard helps

Primary Guard deploys and manages the nPro.ai endpoint and security operations platform for businesses in Malaysia and across ASEAN. It combines EDR, XDR, SIEM and endpoint management, and it runs from a single lightweight agent. Primary Guard states that the platform offers up to 40% lower licensing cost and 24/7 incident response. You can also explore our EDR and SIEM service and our managed SOC, which describes 24/7 cover.

Not sure which PCs can move to Windows 11, or how exposed the rest are? Primary Guard offers a free assessment. Contact us to start the conversation.

Frequently asked questions

Can we skip Year 1 and buy ESU for Year 2 only?

No. Microsoft says ESU is cumulative, so buying in Year 2 means paying for Year 1 too. With $61 for Year 1 and double that for Year 2, the total would be about $183 per device.

Can Windows 10 Home PCs in the office use business ESU?

Commercial ESU covers the Pro, Enterprise and Education editions. Microsoft's consumer ESU is for personal devices and is not open to organisation-managed devices. Home PCs used for work therefore need their own plan.

When does Windows 10 ESU stop for good?

Year 2 ends on 12 October 2027. Year 3 ends on 10 October 2028. No ESU is available after that, so plan your move well before then.

Key takeaway

Windows 10 ESU is a bridge, not a fix. Year 1 ends on 13 October 2026, so list your devices, test them for Windows 11, and keep monitoring on every PC that stays behind.

Sources

Microsoft Learn – Windows 10 ESU (accessed Oct 2026) | Microsoft Lifecycle – ESU FAQ (accessed Oct 2026) | Microsoft – Windows 11 specifications (accessed Oct 2026) | Microsoft – Windows 10 end of support (accessed Oct 2026)

Prices and dates in this article come from Microsoft's published information as of October 2026 and may change. Please check Microsoft for the latest details before you decide.