Microsoft has added a year to the expiration date for its Windows 10 Extended Security Updates (ESU) program. This gives consumers, businesses and organizations another year of critical security patches on their Windows 10 devices. In turn, that provides much-needed breathing room for transitioning to Windows 11 or newer platforms, ensuring users remain protected against emerging threats. As Windows 10 ESU gets another year of life, those running Windows 10 get another year to figure out “What’s next?”

The lead-in graphic for this post shows the MS ESU Explainer that pops up inside that OS when you visit Settings > Update & Security, then click the link that reads “Learn more about Extended Security Updates.” As far as I can tell, MS just extended that date this week. FWIW, other published sources (e.g. WinAero, Windows Latest, Windows Central, etc.) agree.

What Windows 10 ESU Gets Another Year Means

Extended Security Updates (ESU) is a program Microsoft offers to organizations that need to keep Windows 10 systems secure beyond the official end-of-support date. Officially, Windows 10 support ended on October 14, 2025. Even so, ESU allows customers to receive critical and important security updates for some time after that date. This “expiration date” just got extended, as you can see in the lead-in screencap.

This program is especially valuable for businesses with legacy applications or hardware that are not yet compatible with Windows 11. It helps them avoid security risks while they plan and execute their migration strategies.

Why the Extension Matters

The extension of Windows 10 ESU for another year reflects the reality that many organizations face challenges upgrading their infrastructure. Whether due to budget constraints, application compatibility issues, or operational complexities, migrating to a new operating system is rarely straightforward.

By extending ESU, Microsoft acknowledges these hurdles and offers a safety net. This additional year of support means organizations can continue receiving vital security patches, reducing the risk of vulnerabilities that could be exploited by cyber attackers.

What’s Included in the Extended Support?

The ESU program focuses on delivering security updates classified as critical or important by Microsoft. These updates address vulnerabilities that could allow remote code execution, privilege escalation, or denial of service attacks.

However, ESU does not include feature updates or non-security fixes. Organizations still need to plan for a full upgrade to a supported operating system to benefit from new features and improvements.

How to Get Windows 10 ESU

Eligible customers can purchase ESU licenses through Microsoft’s Volume Licensing programs or authorized resellers. The pricing typically increases each year, reflecting the diminishing support window. Individual users may also qualify for ESU, either by activating Windows Backup to sync files and settings via OneDrive, or by redeeming 1,000 MS Reward points.

To activate ESU, organizations must install specific activation keys and ensure their systems are up to date with the latest servicing stack updates. Microsoft provides detailed guidance and tools to help with this process. Individual users typically upgrade directly through WU, without having to reactivate Windows 10 licenses.

Planning Your Migration

While the ESU extension offers more time, it’s not a permanent solution. Users should use this period to accelerate their migration plans to Windows 11 or other supported platforms.

For IT-driven organizations, key steps include:

• Assessing Compatibility: Evaluate applications and hardware for Windows 11 readiness.
• Testing: Pilot Windows 11 deployments in controlled environments.
• Training: Prepare IT staff and end-users for the new operating system.
• Deployment: Roll out Windows 11 in phases to minimize disruption.

For SOHO and individual users, migration will usually mean disposing of older PCs not able to meet Windows 11 hardware requirements. Replacing those typically involves purchasing a new or used PC or laptop with Windows 11 pre-installed. Optionally, they may (or may not) use a program such as PC Mover to transfer their apps, files, and settings to the new OS.

One Year Adds Time, But Cures No Ills

The additional year for Windows 10 ESU is a welcome relief for many organizations still navigating the complexities of OS migration. It ensures continued protection against security threats while providing a buffer to plan and execute a smooth transition.

However, relying on ESU indefinitely is not advisable. The best strategy is to leverage this extension as a bridge toward a fully supported and modern operating system environment.

By staying informed and proactive, IT teams can safeguard their infrastructure and keep their organizations secure in an ever-evolving threat landscape. Individual consumers gain time to save up for a new PC or laptop, and plan their migration strategy, too.

Patience isn’t a virtue many tech shoppers cultivate. But here’s the thing: waiting just one product cycle can put serious money back in your pocket. Buying one generation back is one of the smartest, most underappreciated moves in the PC-buying playbook. You get hardware that was cutting-edge twelve months ago, at prices that make last year’s flagship look like a budget pick.

Case in point: a June 19 Windows Central story entitled “Dell’s stunning XPS 13 drops to under $1,000, packing a massive 32GB of RAM.” Careful reading and a little thought reveals that with the newer, faster, more efficient CPUs now out in the market, a markdown seems the right way to clear out this older inventory.

Why Buying One Generation Back Makes Sense

When a manufacturer ships a new laptop model, retailers have a problem: they’re sitting on inventory of the outgoing model. They need it gone. Fast. So prices drop — sometimes dramatically — to clear shelf space and warehouse stock.

Here’s the kicker: the old hardware didn’t suddenly get worse. The processor that impressed everyone last year still handles your spreadsheets, video calls, and browser tabs just fine. Performance gaps between consecutive generations are usually modest — often 10–15%. That’s not worth full MSRP. But a 25–40% discount? Now we’re talking.

Retailers, manufacturers, and third-party sellers all play this game. The window is finite, though. Once inventory clears, deals disappear.

Real Savings, Real Hardware

Don’t take my word for it. Here are four real examples of what buying one generation back actually looks like in dollar terms:

• Dell XPS 13 (9345) with Snapdragon X Elite: Dropped from $1,399.99 to $999.99 — that’s a full $400 in savings — after newer XPS models landed on shelves.
• Dell Inspiron 15 (13th-gen Core i5, 2K touchscreen): Fell from $849.99 to $549.99 at Best Buy — $300 off — as 14th- and 15th-gen Inspirons took over the lineup.
• HP OmniBook 3 (Snapdragon X, 14-inch, 16 GB RAM): Slid from $949.99 to $549.99 — a whopping $400 discount — following the launch of the updated OmniBook 5 and 7 models.
• Lenovo Yoga Slim 7x (Gen 9, Snapdragon X Elite, 14.5″ 3K OLED): dropped from $1,300 to $800 at Best Buy — a $500 savings — as the 2026 Gen 11 (Snapdragon X2 Elite) arrived to replace it.

Those aren’t rounding errors. That’s real money. On the XPS 13 and Slim 7X alone, you’d save $900 combined. Buy both and you’ve basically gotten one laptop free.

Where to Hunt for Such Deals

You have to know where to look. The best hunting grounds are the Dell or Lenovo Outlet stores, HP’s certified refurbished storefront, and Best Buy’s clearance section (online and in-store). Open-box listings at major etailers are also worth bookmarking.

Timing matters. The best deals on buying one generation back typically surface right when a successor model is formally announced or begins shipping. That’s your signal. Manufacturers and retailers want the old stock gone before the new wave arrives.

Bookmark those clearance pages right now. Set price alerts on the models you’ve been eyeing. Then act fast when the drop hits. Wny? Because quantities on outgoing inventory are always limited, and once it’s gone, it’s gone. Buying one generation back rewards the prepared shopper, not the hesitant one. A little patience up front means a lot less money out the door at checkout.

Here in Windows-World, we must grab our savings while the discounts persist. He or she who hesitates is lost. Get your budget together and keep you eye on the “new new” PCs, so you can cash in on the “old new” PCs!

Although I’m resigned to living without secure boot on the B550-based desktops here at Chez Tittel, that doesn’t stop me from trying other fixes from time to time. Indeed, I discovered a great thread about secure boot keys at ElevenForum, and learned more about what’s going on under the hood. Along the way, I gave myself a terrific scare as I saw more secure boot oddities accumulate. Here’s what happened…

Registry Key Change Helps Secure Boot Oddities Accumulate

One must provide Windows with a a couple of instrux to ask the OS to update secure boot key certificates, to wit:

Set-ItemProperty -Path “HKLM:\SYSTEM\CurrentControlSet\Control\SecureBoot” -Name “AvailableUpdates” -Value 0x40

Start-ScheduledTask -TaskName “\Microsoft\Windows\PI\Secure-Boot-Update”

One is then instructed to reboot Windows twice to get those instructions to work as they’re intended to. What it doesn’t say is that strange things might happen before the first reboot occurs.

Black Screen, No UEFI — No Nothin!

I about had heart failure when I rebooted my PC this morning and the Flo6 came up black with no normal boot sequence. No Asrock logo, no instructions to hit Del or F1 to load EFI, no F11 for boot menu. There’s not much one can do to fix a Windows PC that won’t do anything, short of taking it into a shop.

So I turned off the power supply, then hit the power button for 10 seconds to make sure all the capacitors got discharged. Then I took a break and walked away from the machine for 10 minutes. Then I powered on again. Phew! This time, the Asrock logo appeared, and it booted into Windows 11.  To my great relief, the second reboot was no big deal, and I was glad.

Here in Windows-World, you can make big changes without incurring at least some risk. This morning, I wondered if I’d bitten off more than I could chew. I even wondered if I’d bricked the Flo6. Thank goodness, I had not. I’ll take that as a win, even though you can see in the lead-in graphic that 2023 keys remain absent on this PC. Go figure!