Windows 10 ESU Won’t Enroll: Fixes for the Enrollment Error
Quick Answer
“We can’t enroll you in Extended Security Updates” – the five causes (22H2 updates, Microsoft account, antivirus, activation, region) and the fix for each.
- • Enrollment closes October 13, 2026 — fixed devices keep security updates to October 13, 2027.
- • Prerequisite: Windows 10 22H2 with the latest cumulative update installed and a reboot.
- • Enrollment requires a Microsoft administrator account — local accounts must be switched first.
- • Third-party antivirus and unactivated installs are the two silent blockers.
01What the enrollment error actually looks like
Three variants, one root family. Variant A: the Enroll now button in Settings > Update & Security > Windows Update simply does nothing when clicked. Variant B: the wizard opens and fails with “We can’t enroll you in Extended Security Updates right now. Try again later.” Variant C: there is no ESU card at all — the section is missing from Windows Update entirely.
All three trace back to the same five preconditions Microsoft’s enrollment flow checks before it will even talk to you: build version, update currency, account type, activation state, and a clean network path. The fixes below run from most to least common.
02Fix 1 — get on 22H2 and install every pending update
ESU enrollment requires Windows 10 22H2 with the October 2025 cumulative update or later. On a stale install the Enroll button is either missing (variant C) or dead (variant A) because the enrollment code simply is not in the build yet.
Fix: Settings > Update & Security > Windows Update > Check for updates — install everything offered, including the 22H2 enablement package if offered, then reboot and check again. Machines that have been offline for months sometimes need two passes: check, install, reboot, check again until Windows Update reports “you’re up to date”.
03Fix 2 — switch to a Microsoft administrator account
Enrollment is account-bound: a local account cannot enroll. If Settings > Accounts shows “local account”, go to Your info > Sign in with a Microsoft account instead and complete the switch — and make sure that account is an administrator on the device (Settings > Accounts > Family & other users confirms the role).
Already on a Microsoft account and still failing? Sign out, sign back in (refreshes the licensing token), and confirm the same account is signed into account.microsoft.com — the enrollment check talks to the licensing service against that identity.
04Fix 3 — antivirus, activation and region checks
Third-party antivirus: several confirmed cases on the Microsoft Q&A and TenForums trace to security suites intercepting the enrollment call — disable (or uninstall) the third-party AV temporarily, retry, then re-enable. Activation: the PC must be activated — an unactivated Windows 10 is not offered ESU. Region and time: a wrong system clock breaks the licensing token handshake; set time to automatic.
05The deadline and what enrollment actually buys
Consumer enrollment closes October 13, 2026 — today. After enrollment, the PC receives security updates through October 13, 2027. The three consumer tracks: free if you sync settings/backup to OneDrive, free with 1,000 Microsoft Rewards points, or a $30 one-time license. The mechanics of each track, step by step, are in our Windows 10 ESU enrollment guide.
If the machine cannot be fixed in time, the fallbacks are real: upgrade to Windows 11 if the hardware qualifies (see our Windows 10 vs Windows 11 breakdown), or accept an unpatched PC offline. ESU does not cover Office — that clock is separate.
06Still stuck? The 60-second diagnostic order
Run the checklist in this exact order — it resolves virtually every reported case: 1. 22H2 + fully updated + rebooted. 2. Microsoft administrator account signed in. 3. Windows activated. 4. Third-party AV off. 5. System clock automatic. 6. Retry from Windows Update, not from a bookmarked link. If it still fails, the Microsoft Q&A thread collects the remaining edge cases (managed devices and Education SKU installs enroll through IT, not Settings).
FAQ
Can I still enroll after October 13, 2026?
No — for consumers, enrollment closes on October 13, 2026. Enrolled devices keep receiving updates through October 13, 2027. Business ESU has separate terms and enrolls through IT.
Does ESU work with a local account?
No. Consumer enrollment requires signing into Windows with a Microsoft administrator account. Switch the PC from a local account to a Microsoft account first, then retry enrollment.
Do I have to pay for ESU?
Not necessarily. The consumer program has three tracks: free when you sync settings/backups through OneDrive, free with 1,000 Microsoft Rewards points, or a $30 one-time license. All three cover the same security updates.
Does Windows ESU also cover Office 2016/2019/2021?
No — ESU is Windows-only. Office has its own support clock, and Office 2021’s ended on October 13, 2026 as well. Check the Office-specific guides for what still works and the upgrade options.
External References
- • Microsoft Learn — Windows 10 Extended Security Updates program
- • Microsoft Q&A — fixing the ESU enrollment error
- • Kapil Arya (MVP) — ESU enrollment error fix walkthrough
- • TenForums — Enroll button appear/disappear cases
- • Microsoft Support — Windows 10 consumer ESU program FAQ
KeyStarter is a Microsoft legitimate reseller/Distributor. This article was compiled with AI assistance for research and drafting and has been editorially reviewed. Prices shown at checkout reflect dealer quotes, not Microsoft official pricing.