Microsoft provides tips for extended support for commercial Windows 10

By now, it should be widely known: Microsoft officially ended support for Windows 10 on October 14, 2025. Private users in the EU will receive one year of free extended support (Extended Security Updates, ESU) after much back and forth if they sign up for it. IT managers in organizations also need to take action so that Windows 10 devices continue to receive security updates. Microsoft is now providing tips and guidance for this.

Private users can sign up for the ESU program since recently for the ESU program. However, no free option is provided in the commercial sector, which is why Microsoft has now published guidance in the Windows IT Pro Blog, which is intended to help admins prepare for the rollout of ESUs.

Prerequisites for ESU Activations

To activate a “Multiple Activation Key” (MAK) from the Windows 10 ESU purchase, the machines must meet some prerequisites. First, Windows 10 must be updated to version 22H2. The minimum update level must be the update to the level of the October 2025 patch day (KB5066791, build numbers 19044.6456 or 19045.6456, respectively, and newer). Microsoft also lists a whole series of URLs that must be reachable as activation endpoints for the machines.

Admins can find the MAK belonging to the ESU license in the Microsoft 365 Admin Center under “Billing,” “Your Products,” and “Volume Licensing.” There, you will find the “View contracts” option, where the ESU purchase should also be located. “View product keys” then displays the available MAKs.

To distribute the ESU licenses to the devices, “slmgr.vbs” is used. This can be done with management tools such as Microsoft Intune or the Microsoft Configuration Manager. In addition, the Volume Activation Management Tool (VAMT) can be used for this, or a script can be run manually for the command line on affected computers. ESU keys can also be activated by phone.

At the administrative command prompt, the command slmgr.vbs /dlv displays the name of the ESU program and the license status. After activation, it should show “Licensed.”

Microsoft also explains how admins can activate extended support in cloud PCs (Windows 365). For PCs with Windows 10 used to access them, Microsoft automatically provides the support extension. These must be managed in Microsoft Entra or with Entra hybrid, and users must log in to the physical device with the same Entra ID that they use to access Windows 365 Cloud PCs – once every 22 days. Azure Virtual Desktops receive extended security updates without any further action and at no additional cost. Other virtualization platforms on Microsoft Azure may require manual ESU activations, Microsoft concludes its guidance.

(dmk)