Most Windows 10 machines where the ESU option is missing or dead are perfectly eligible. Microsoft rolled the enrollment experience out in stages, leaned on a few specific cumulative updates to make it work, and shipped at least two bugs serious enough to need out-of-band patches. Hardware has almost nothing to do with it.
So when Windows 10 ESU enrollment is greyed out, what to check before you assume your PC is ineligible comes down to one question first: which symptom are you actually looking at? Three different problems get lumped together under “it doesn’t work”, and they have three separate fixes. Working out which one you’ve got saves you an evening of following advice written for somebody else’s problem.
Which of these three is happening to you
Open Settings, then Update & Security, then Windows Update, and scroll down. What you see there decides everything that follows.
- There’s no ESU section at all. No message about extended security updates, no Enroll now link, nothing. This is an eligibility or prerequisites problem.
- The link is there but clicking it does nothing. A blank box flashes up and vanishes, or you get an error saying something went wrong, or that enrollment is temporarily unavailable in your region. This is a known bug and there’s a patch for it.
- The wizard opens but says you’ll need the internet for this. This one is usually not your fault and often not your PC’s fault either.
Nothing there at all
Start with the version, because this catches more machines than everything else combined. Press Windows and R together, type winver, hit enter. You want to see version 22H2 and a build number starting 19045. Anything older and the option will never appear, because consumer ESU is restricted to 22H2 and there’s no way around that.
If you’re on 22H2 already, the next culprit is missing updates. The enrollment experience depends on specific cumulative and servicing stack updates being in place, and the August 2025 cumulative KB5063709 is the one most commonly missing on machines where the link never appears. There’s also a chain to it: you need KB5066791 or newer installed before Windows will offer KB5072653, the ESU licensing preparation package, which is what actually makes the option surface. Run Check for updates, install everything offered, restart, and look again.
Then check what you’re signed in as. The free enrollment routes need a Microsoft account, not a local account, and that account needs administrator rights on the machine. Child accounts under Family Safety don’t qualify at all, which quietly rules out a lot of PCs set up for kids.
Still nothing after all that? It may simply not have reached you yet. Microsoft staged the rollout rather than switching it on everywhere at once, and machines that qualify have waited weeks. Restarting the Windows Update service and the Background Intelligent Transfer Service from services.msc sometimes nudges Windows into re-evaluating your eligibility, which is a harmless thing to try before you give up.
The link is there but the wizard dies
This is the one that drove people genuinely mad through late 2025, and it isn’t your antivirus, your firewall or anything you did.
Microsoft confirmed two separate bugs in the consumer ESU enrollment process. One threw a “something went wrong” error when people tried to sign up. The other told users in perfectly supported markets that enrollment was temporarily unavailable in their region. A third symptom, the wizard opening as a blank box and closing itself a second later, comes from the same family of problems.
The fix is KB5071959, an out-of-band update Microsoft shipped on 11 November 2025 specifically to unblock this. It only appears in Windows Update on machines that can’t sign up, so if you don’t see it offered, that’s a hint your problem is something else. If you do see it, install it and restart before trying again. You can also pull it manually from the Microsoft Update Catalog if Windows Update isn’t offering it, matching the download to your version and architecture, which for most people means 22H2 x64.
There’s a companion update worth knowing about too. KB5068781, released the same day, fixes problems that hit during and after enrollment on machines that had already got through.
“You’ll need the internet for this”
Frustrating message, because you’re obviously online or you wouldn’t be reading Windows Update.
This one has turned up on machines where everything else was configured correctly, including devices where the enrollment option was working normally beforehand, which points at Microsoft’s own cloud services rather than anything local. The advice that keeps working is dull but effective: leave it a few hours and try again. People who hit Retry the next morning have found it goes through with no other changes.
Don’t spend your evening reinstalling network drivers over this one.
Check you’re not already enrolled
Genuinely worth doing before any of the above, because a number of people have spent hours troubleshooting a machine that was already covered.
Windows has shown an incorrect banner saying the version has reached end of support on PCs that were properly enrolled in ESU. Microsoft issued server-side corrections and updated packages for it, but the display bug convinced plenty of people their enrollment had failed when it hadn’t. If the Enroll now link has disappeared and you can’t remember whether you completed the process, that’s what a successful enrollment looks like. The option goes away once it’s done.
The things that genuinely do disqualify a PC
Some machines really are ineligible, and no amount of troubleshooting changes that.
Consumer ESU covers Windows 10 Home, Pro, Pro Education and Workstations. Enterprise and Education editions aren’t included, which is a common problem with second-hand machines that came out of an office. Devices joined to a work domain or to Microsoft Entra, anything enrolled in MDM, and anything running in kiosk mode are all excluded by design and are pushed toward the business programme instead, which costs $61 per device in its first year and climbs after that.
If a PC was previously joined to a domain and has since been taken off, leftover configuration can still flag it as managed. That’s the one genuinely ambiguous case, and it’s worth checking under Settings, Accounts, Access work or school to see whether anything is still attached.
A word on the registry hacks
Search this problem and you’ll quickly find guides offering registry edits to force the consumer ESU flag on, along with third-party scripts passed around on forums that claim to enable enrollment on any machine.
Some people report success with them. I’d still leave them alone unless you’ve exhausted everything above, partly because editing the registry on a machine you depend on carries real risk of making things worse, and partly because running scripts from forum posts on a PC that holds your bank details is a poor trade for saving a bit of time. The official fixes cover the overwhelming majority of cases, and the ones they don’t cover are usually genuine ineligibility that a registry edit only papers over.
Don’t leave this sitting
Enrollment stays open until 12 October 2027, which is when the programme ends after Microsoft quietly extended it by a year in June. That sounds like plenty of time and it’s exactly the sort of thing people forget about until it’s expired.
An unpatched Windows machine sitting on the internet is a genuinely poor idea given how many people got caught out last year, and the alternative is buying a new laptop in a market where RAM alone went up 328 per cent in a year. Spending twenty minutes on a stubborn enrollment link is a much better use of your money than replacing a machine that still works fine.
