From 00b232c1ed58f71e74c262a9ebe7be982b8b801c Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 9 Jun 2025 09:03:18 -0700 Subject: [PATCH 1/8] esu-virt-10214500 --- windows/whats-new/enable-extended-security-updates.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index af03388d2c..9360cc6d94 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -49,6 +49,14 @@ To enable ESU for Windows 10, you must meet the following prerequisites: - [Volume licensing access](/microsoft-365/commerce/licenses/vl-sign-in) in the [Microsoft 365 admin center](https://admin.microsoft.com) +## Cloud and virtualization scenario considerations + +Some cloud and virtualization scenarios have specific considerations for enabling ESU. In some cases, ESU is already enabled for you and in others, you may need to take additional steps. The following list summarizes these scenarios: + +- **Windows 365 Cloud PCs**: Devices that access Windows 11 Cloud PCs via [Windows 365](/windows-365/overview) are automatically entitled to ESU if a valid Windows 365 license exists. No manual activation is required. +- **Azure Virtual Desktop** (AVD): Windows 10 VMs hosted in [Azure Virtual Desktop](/azure/virtual-desktop/overview) or Azure IaaS are automatically entitled to ESU. No keys or additional configuration needed. +- Other virtualization platforms (such as Nutanix, Citrix): These platforms require manual ESU key activation. Contact your Microsoft account team to obtain a key. Activation can be managed with the Volume Activation Management Tool or with a script. + ## Get the product keys for activating Extended Security Update (ESU) licenses If you bought ESU licenses, you can activate them with Multiple Activation Keys (MAK) that you get from the Microsoft 365 admin center. To find the ESU license MAK, use the following steps: From 19bf2561ce208c6894f58ba85a66047ee20a3d88 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 11 Jun 2025 15:01:31 -0700 Subject: [PATCH 2/8] edits --- .../whats-new/enable-extended-security-updates.md | 15 +++++++++++---- 1 file changed, 11 insertions(+), 4 deletions(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 9360cc6d94..94905e4696 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -8,7 +8,7 @@ author: mestew manager: bpardi ms.localizationpriority: medium ms.topic: article -ms.date: 05/21/2025 +ms.date: 06/12/2025 ms.collection: - highpri - tier2 @@ -53,9 +53,16 @@ To enable ESU for Windows 10, you must meet the following prerequisites: Some cloud and virtualization scenarios have specific considerations for enabling ESU. In some cases, ESU is already enabled for you and in others, you may need to take additional steps. The following list summarizes these scenarios: -- **Windows 365 Cloud PCs**: Devices that access Windows 11 Cloud PCs via [Windows 365](/windows-365/overview) are automatically entitled to ESU if a valid Windows 365 license exists. No manual activation is required. -- **Azure Virtual Desktop** (AVD): Windows 10 VMs hosted in [Azure Virtual Desktop](/azure/virtual-desktop/overview) or Azure IaaS are automatically entitled to ESU. No keys or additional configuration needed. -- Other virtualization platforms (such as Nutanix, Citrix): These platforms require manual ESU key activation. Contact your Microsoft account team to obtain a key. Activation can be managed with the Volume Activation Management Tool or with a script. +- Extended Security Updates (ESU) are available at no additional cost for Windows 10 virtual machines in the following Microsoft-hosted or Azure-integrated environments. No additional configuration or keys are needed in the following environments: + - [Azure Virtual Desktop](/azure/virtual-desktop/overview) + - [Azure virtual machines](/azure/virtual-machines/overview) + - [Azure Dedicated Host](/azure/virtual-machines/dedicated-hosts) + - [Azure Local](/azure/azure-local/overview) (Azure Local is the new name for Azure Stack HCI) + - [Azure Stack Hub](/azure-stack/operator/azure-stack-overview) + - [Azure Stack Edge](/azure/databox-online/) + +- **Windows 365 Cloud PCs**: Windows 10 endpoints accessing Windows 11 Cloud PCs via [Windows 365](/windows-365/overview) are automatically entitled to ESU for up to three years, so long as the valid Windows 365 license remains active. +- **Other virtualization platforms** (such as Nutanix or Citrix): These platforms require manual ESU key activation. Contact your Microsoft account team to obtain a 5x5 key. Activation can be managed with the Volume Activation Management Tool or with a script. ## Get the product keys for activating Extended Security Update (ESU) licenses From dcab75049486be7c8c3b9e07bfcefec18387c55d Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Thu, 12 Jun 2025 08:27:59 -0700 Subject: [PATCH 3/8] edit --- windows/whats-new/enable-extended-security-updates.md | 1 + 1 file changed, 1 insertion(+) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 94905e4696..85be8e1ed4 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -54,6 +54,7 @@ To enable ESU for Windows 10, you must meet the following prerequisites: Some cloud and virtualization scenarios have specific considerations for enabling ESU. In some cases, ESU is already enabled for you and in others, you may need to take additional steps. The following list summarizes these scenarios: - Extended Security Updates (ESU) are available at no additional cost for Windows 10 virtual machines in the following Microsoft-hosted or Azure-integrated environments. No additional configuration or keys are needed in the following environments: + - [Azure Virtual Desktop](/azure/virtual-desktop/overview) - [Azure virtual machines](/azure/virtual-machines/overview) - [Azure Dedicated Host](/azure/virtual-machines/dedicated-hosts) From 58d4e2a847acfa0b2c5c8543ec827e0ce057a5d1 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Mon, 23 Jun 2025 16:00:41 -0700 Subject: [PATCH 4/8] edits --- .../enable-extended-security-updates.md | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 85be8e1ed4..d46c301f99 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -26,9 +26,13 @@ The [Windows 10 Extended Security Updates (ESU) program](extended-security-updat To enable ESU for Windows 10, you must meet the following prerequisites: -**Client operating system:** - Windows 10, version 22H2 with [KB5046613](https://support.microsoft.com/help/5046613), or a later update installed - Administrative privileges on the device +- The Windows 10 device is either Microsoft Entra joined or Microsoft Entra hybrid joined. + - Devices that are only Entra registered aren't eligible for commercial ESU access. + >[!NOTE] + > Personal or BYOD devices that are not managed by the organization and are only Entra registered will not qualify for this entitlement. These devices should be enrolled via the Consumer ESU program. + **Endpoints for client activation:** - `https://go.microsoft.com/` @@ -62,7 +66,15 @@ Some cloud and virtualization scenarios have specific considerations for enablin - [Azure Stack Hub](/azure-stack/operator/azure-stack-overview) - [Azure Stack Edge](/azure/databox-online/) -- **Windows 365 Cloud PCs**: Windows 10 endpoints accessing Windows 11 Cloud PCs via [Windows 365](/windows-365/overview) are automatically entitled to ESU for up to three years, so long as the valid Windows 365 license remains active. +- **Windows 365 Cloud PCs**: Windows 10 devices accessing Cloud PCs via [Windows 365](/windows-365/overview) are automatically entitled to ESU for the duration of the ESU offer if the user has an active Windows 365 license assigned, provided the following conditions are met: +- The Windows 10 device is either Microsoft Entra joined or Entra hybrid joined. + - Devices that are only Entra registered are not eligible for commercial ESU access. +- The user must sign in to the Windows 10 device using their Microsoft Entra ID account at least once every 22 days. + - If this 22-day window lapses without sign-in, the device will lose ESU access until the user signs in again. + - The ESU license is valid for 30 days once issued, and the system attempts to renew it starting at day 22 to avoid service interruption. + >[!NOTE] + > Personal or BYOD devices that are not managed by the organization and are only Entra registered will not qualify for this entitlement. These devices should be enrolled via the Consumer ESU program. + - **Other virtualization platforms** (such as Nutanix or Citrix): These platforms require manual ESU key activation. Contact your Microsoft account team to obtain a 5x5 key. Activation can be managed with the Volume Activation Management Tool or with a script. ## Get the product keys for activating Extended Security Update (ESU) licenses From ab6e6aaff9e01fda1dcfdea3c10a572ea00d5cf2 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 24 Jun 2025 07:13:10 -0700 Subject: [PATCH 5/8] edits --- windows/whats-new/enable-extended-security-updates.md | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index d46c301f99..f5a41683b8 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -8,7 +8,7 @@ author: mestew manager: bpardi ms.localizationpriority: medium ms.topic: article -ms.date: 06/12/2025 +ms.date: 06/24/2025 ms.collection: - highpri - tier2 @@ -67,13 +67,11 @@ Some cloud and virtualization scenarios have specific considerations for enablin - [Azure Stack Edge](/azure/databox-online/) - **Windows 365 Cloud PCs**: Windows 10 devices accessing Cloud PCs via [Windows 365](/windows-365/overview) are automatically entitled to ESU for the duration of the ESU offer if the user has an active Windows 365 license assigned, provided the following conditions are met: -- The Windows 10 device is either Microsoft Entra joined or Entra hybrid joined. - - Devices that are only Entra registered are not eligible for commercial ESU access. +- The Windows 10 device meets the [prerequisites](#prerequisites) - The user must sign in to the Windows 10 device using their Microsoft Entra ID account at least once every 22 days. - If this 22-day window lapses without sign-in, the device will lose ESU access until the user signs in again. - The ESU license is valid for 30 days once issued, and the system attempts to renew it starting at day 22 to avoid service interruption. - >[!NOTE] - > Personal or BYOD devices that are not managed by the organization and are only Entra registered will not qualify for this entitlement. These devices should be enrolled via the Consumer ESU program. + - **Other virtualization platforms** (such as Nutanix or Citrix): These platforms require manual ESU key activation. Contact your Microsoft account team to obtain a 5x5 key. Activation can be managed with the Volume Activation Management Tool or with a script. From a3e5d50ff6674031c6ecd7a776b3e0d79412b29f Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Tue, 24 Jun 2025 07:42:30 -0700 Subject: [PATCH 6/8] edits --- windows/whats-new/enable-extended-security-updates.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index f5a41683b8..9439444c2a 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -67,10 +67,10 @@ Some cloud and virtualization scenarios have specific considerations for enablin - [Azure Stack Edge](/azure/databox-online/) - **Windows 365 Cloud PCs**: Windows 10 devices accessing Cloud PCs via [Windows 365](/windows-365/overview) are automatically entitled to ESU for the duration of the ESU offer if the user has an active Windows 365 license assigned, provided the following conditions are met: -- The Windows 10 device meets the [prerequisites](#prerequisites) -- The user must sign in to the Windows 10 device using their Microsoft Entra ID account at least once every 22 days. - - If this 22-day window lapses without sign-in, the device will lose ESU access until the user signs in again. - - The ESU license is valid for 30 days once issued, and the system attempts to renew it starting at day 22 to avoid service interruption. + - The Windows 10 device meets the [prerequisites](#prerequisites) + - The user must sign in to the Windows 10 device using their Microsoft Entra ID account at least once every 22 days. + - If this 22-day window lapses without sign-in, the device will lose ESU access until the user signs in again. + - The ESU license is valid for 30 days once issued, and the system attempts to renew it starting at day 22 to avoid service interruption. - **Other virtualization platforms** (such as Nutanix or Citrix): These platforms require manual ESU key activation. Contact your Microsoft account team to obtain a 5x5 key. Activation can be managed with the Volume Activation Management Tool or with a script. From 20e811dfe4a7183a71c1ba5d2dc319801189f6e8 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 25 Jun 2025 11:44:50 -0700 Subject: [PATCH 7/8] edits --- windows/whats-new/enable-extended-security-updates.md | 8 ++++---- windows/whats-new/extended-security-updates.md | 4 ++-- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 9439444c2a..542fefbc24 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -8,7 +8,7 @@ author: mestew manager: bpardi ms.localizationpriority: medium ms.topic: article -ms.date: 06/24/2025 +ms.date: 06/25/2025 ms.collection: - highpri - tier2 @@ -18,7 +18,7 @@ appliesto: # Enable Extended Security Updates (ESU) -> **Looking for consumer information?** For individuals or Windows 10 Home customers, more information about Extended Security Updates for Windows 10 is available in the frequently asked questions section of the [End of support for Windows 10](https://www.microsoft.com/windows/end-of-support) page. +> **Looking for consumer information?** For individuals or Windows 10 Home customers, more information about Extended Security Updates for Windows 10 is available in the frequently asked questions section of the [End of support for Windows 10](https://www.microsoft.com/windows/end-of-support) page. For information on how to enroll in ESU, see [Windows 10 Consumer Extended Security Updates (ESU) program](https://support.microsoft.com/windows/33e17de9-36b3-43bb-874d-6c53d2e4bf42). The [Windows 10 Extended Security Updates (ESU) program](extended-security-updates.md) allows organizations to receive critical and important security updates for PCs enrolled in the paid subscription service. ESU extends the use of Windows 10 devices past the end of support date on October 14, 2025. This article provides instructions on how to enable the ESU keys in commercial environments. @@ -68,8 +68,8 @@ Some cloud and virtualization scenarios have specific considerations for enablin - **Windows 365 Cloud PCs**: Windows 10 devices accessing Cloud PCs via [Windows 365](/windows-365/overview) are automatically entitled to ESU for the duration of the ESU offer if the user has an active Windows 365 license assigned, provided the following conditions are met: - The Windows 10 device meets the [prerequisites](#prerequisites) - - The user must sign in to the Windows 10 device using their Microsoft Entra ID account at least once every 22 days. - - If this 22-day window lapses without sign-in, the device will lose ESU access until the user signs in again. + - The user must sign in to the Windows 10 device using their Microsoft Entra ID account at least once every 22 days to maintain ESU access. + - If this 22-day window lapses without sign-in, the device will no longer be entitled to new ESU updates until the user signs in again. - The ESU license is valid for 30 days once issued, and the system attempts to renew it starting at day 22 to avoid service interruption. diff --git a/windows/whats-new/extended-security-updates.md b/windows/whats-new/extended-security-updates.md index 46e5be5e94..09658090a2 100644 --- a/windows/whats-new/extended-security-updates.md +++ b/windows/whats-new/extended-security-updates.md @@ -8,7 +8,7 @@ author: mestew manager: bpardi ms.localizationpriority: medium ms.topic: article -ms.date: 05/21/2025 +ms.date: 06/25/2025 ms.collection: - highpri - tier2 @@ -18,7 +18,7 @@ appliesto: # Extended Security Updates (ESU) program for Windows 10 -> **Looking for consumer information?** For individuals or Windows 10 Home customers, more information about Extended Security Updates for Windows 10 is available in the frequently asked questions section of the [End of support for Windows 10](https://www.microsoft.com/windows/end-of-support) page. +> **Looking for consumer information?** For individuals or Windows 10 Home customers, more information about Extended Security Updates for Windows 10 is available in the frequently asked questions section of the [End of support for Windows 10](https://www.microsoft.com/windows/end-of-support) page. For information on how to enroll in ESU, see [Windows 10 Consumer Extended Security Updates (ESU) program](https://support.microsoft.com/windows/33e17de9-36b3-43bb-874d-6c53d2e4bf42). The Windows 10 Extended Security Updates (ESU) program gives customers the option to receive security updates for PCs enrolled in the program. ESU is a paid program that provides individuals and organizations of all sizes with the option to extend the use of Windows 10 devices past the end of support date in a more secure manner. For more information about the Windows 10 lifecycle, see the [Windows Lifecycle FAQ](/lifecycle/faq/windows). From c5de3fabdfadd8f07b1d70140a5e48f8ce813834 Mon Sep 17 00:00:00 2001 From: Meghan Stewart <33289333+mestew@users.noreply.github.com> Date: Wed, 25 Jun 2025 11:50:11 -0700 Subject: [PATCH 8/8] fix merge conflict --- windows/whats-new/enable-extended-security-updates.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/whats-new/enable-extended-security-updates.md b/windows/whats-new/enable-extended-security-updates.md index 9c83f24c2c..f864a85f9c 100644 --- a/windows/whats-new/enable-extended-security-updates.md +++ b/windows/whats-new/enable-extended-security-updates.md @@ -31,7 +31,7 @@ To enable ESU for Windows 10, you must meet the following prerequisites: - The Windows 10 device is either Microsoft Entra joined or Microsoft Entra hybrid joined. - Devices that are only Entra registered aren't eligible for commercial ESU access. >[!NOTE] - > Personal or BYOD devices that are not managed by the organization and are only Entra registered will not qualify for this entitlement. These devices should be enrolled via the Consumer ESU program. + > Personal or BYOD devices that are not managed by the organization and are only Entra registered will not qualify for this entitlement. These devices should be enrolled via the [Consumer ESU program](https://support.microsoft.com/windows/33e17de9-36b3-43bb-874d-6c53d2e4bf42). **Endpoints for client activation:**