
This guide will show you how to continue receiving critical security updates for Windows 10 for free until October 2026. The method involves creating a secondary Microsoft account used only to enrol your PC and check for updates, while you continue to use your local account for daily activities.
Key Benefit: Your personal files and data remain private on your local account, while your entire system receives necessary security patches.
Initial Setup & One-Time Enrolment
Prerequisite: Check Your Windows Version
You MUST be using Windows 10 Version 22H2. To check: Go to Settings > Update & Security > Windows Update and install all available updates.
Step 1: Create and Configure Your "Update" Account
1. Add a New Microsoft Account: Go to Settings > Accounts > Family & other users. Click "Add someone else to this PC". Follow the prompts to add a Microsoft account (you can use an existing email or create a new one).
2. Make it an Administrator: In the "Other users" list, click on the new account you just added. Click "Change account type". Change it from "Standard User" to Administrator. Click OK.
3. Sign in for the First Time: Click the Start Menu, then click your account icon (or name) at the top. Select the new Microsoft account from the list to switch to it. Follow the on-screen prompts to set up a PIN for quick future access.
Step 2: Modify the Registry to Enable ESU
1. Open Registry Editor: Press the Windows Key + R on your keyboard. Type regedit and press Enter.
2. Navigate to the Correct Location: In the Registry Editor, go to this exact address: HKEY_CURRENT_USER\Software\Microsoft\WindowsNT\CurrentVersion\Windows
3. Create a New Registry Key: Right-click on the Windows folder in the left-hand pane. Select New > Key. Name this new key: ConsumerESU and press Enter.
4. Create the First Value: Right-click on the new ConsumerESU key you just created. Select New > DWORD (32-bit) Value. Name it: ESUEligibility. Double-click it, set its "Value data" to 2 and click OK.
5. Create the Second Value: Right-click on the ConsumerESU key again. Select New > DWORD (32-bit) Value. Name it: ESUEligibilityResult. Double-click it, set its "Value data" to 1 and click OK.
6. Close the Registry Editor.
Step 3: Enrol in the Extended Security Updates
1. Go to Settings > Update & Security. 2. You should now see a new option for enrolling in Extended Security Updates. 3. Click "Enroll Now" or similar. 4. A wizard will open. Click Next and then Enroll. 5. You should see a confirmation message that your device is enrolled through October 2026.
Step 4: Return to Your Daily Account
Sign out of the Microsoft account. Log back into your original local account. Your PC is now successfully enrolled. The security warning on your local account can be ignored.
Ongoing Maintenance: How to Check for and Install Updates
Windows Updates are installed for the entire computer, but to trigger them, you must be signed into the Microsoft account. Recommended: perform these steps every two-four weeks.
1. Switch User: Sign into the Microsoft Account you created for ESU. 2. Check for Updates: Go to Settings > Update & Security > Windows Update. 3. Click "Check for updates" and allow all updates to download and install. 4. Restart if required. 5. Switch Back: Once the system is up to date, sign out and return to your local account.
Key Points & Benefits
Privacy: Your local account's files, browser history, and activity are not synced to Microsoft.
Cost: This method allows you to receive ESU for free, avoiding any potential fees.
System-Wide Protection: Security updates protect the entire operating system, benefiting all user accounts on the PC.
Compliance: Signing in with the Microsoft account periodically meets Microsoft's requirement to maintain update eligibility.
Got a similar problem?
Bring it in — we'll diagnose it and quote before any work begins.