Windows 10: Out-of-Band Update Fixes Issues with First ESU Update

In November, the first monthly security update after the official Windows 10 support end date was released, available as part of the Extended Security Updates. However, this did not go smoothly, prompting Microsoft to release another out-of-band update.

In the Windows Message Center, Microsoft explains that some Windows 10 22H2 installations in the commercial sector, which are enrolled in Extended Security Updates (ESU), are experiencing issues installing the November security update. On November Patch Day, a week ago, Microsoft released the update with the KB number KB5068781 for Windows 10, which closes various security vulnerabilities in the operating system.

During installation, in the observed cases, the error message “0x800f0922 (CBS_E_INSTALLERS_FAILED)” may appear, and the process may fail. “The issue is limited to machines whose Windows operating system licenses were activated via Windows Subscription Activation in the Microsoft 365 Admin Center,” Microsoft further explains. “Affected organizations can resolve the issue by installing the update KB5072653 'Extended Security Updates (ESU) Licensing Preparation Package for Windows 10', which was released on November 17th,” the Redmond-based company elaborates. “After installing the preparation package (KB5072653), you will be able to deploy the November 2025 security update (KB5068781).”

Not the first issues with Extended Windows 10 Support

For organizations performing compliance checks using .cab files, Microsoft will soon provide a new “Scan Cab.” The problem now reported with the installation of the November security update is not the first hiccup with the extended support for Windows 10.

Last week, Microsoft had already released an out-of-band update for Windows 10 22H2. It resolves an issue on computers with Windows Home and Pro licenses. Previously, the setup process for extended support could fail. On computers where this was the case, Microsoft is therefore offering the out-of-band update KB5071959, after which the support extension can be set up for one year.

(dmk)