To confirm that a Windows 10 PC is actually protected by Extended Security Updates (ESU), perform two separate checks: first, confirm that the device is enrolled or licensed for the program; then confirm that a post-end-of-support security update appears in Windows Update history. Having only a preparation package installed does not prove enrollment.
What to check first
- Version: for Consumer ESU, the PC must run Windows 10 version 22H2 in an eligible edition such as Home, Pro, Pro Education, or Pro for Workstations.
- Updates: the system must be up to date before enrollment. In September 2026, Microsoft also released licensing preparation package KB5126256 for devices that are not yet enrolled.
- Enrollment or license: on personal PCs, status is checked in Windows Update; in commercial environments using an ESU key, Microsoft instructs administrators to verify the license with slmgr.vbs /dlv.
- Actual delivery: update history should show a cumulative security update intended for Windows 10 ESU.
Microsoft's current consumer program page states that regular Windows 10 support ended on October 14, 2025 and that PCs already enrolled remain covered automatically through October 12, 2027. The same page says enrollment remains available until that date as long as the device remains eligible. See the official Windows 10 Consumer ESU page.
1. Confirm that the PC is running Windows 10 22H2
Press Win + R, type winver, and check the version shown. For the consumer program, Microsoft requires Windows 10 version 22H2. Eligible editions include Home, Professional, Pro Education, and Workstations. The PC must also have the latest updates installed, and the Microsoft account used for enrollment must have administrator privileges and must not be a child account.
There is an important split between personal and business use. Consumer enrollment is not offered to devices in kiosk mode, joined to Active Directory or Microsoft Entra, or managed by MDM. Those scenarios must use the commercial ESU path. LTSB/LTSC editions have their own lifecycles and should not be treated as standard Windows 10 22H2.
2. On a personal PC, check enrollment status in Windows Update
In Windows 10, open Settings > Update & Security > Windows Update. Microsoft identifies this page as the place to check ESU enrollment status.
- If the page says the device is enrolled in ESU, the first condition is satisfied.
- If it still shows Enroll now or an equivalent option, enrollment has not been completed on that PC.
- If the device should be eligible but no enrollment option appears, install pending updates, restart, and recheck the edition, version 22H2, and the account type being used.
For consumers, the license is associated with the Microsoft account used to enroll. Microsoft says one consumer ESU license can be used on up to ten eligible devices. For this scenario, the Windows Update status is more useful than trying to interpret the normal Windows license with activation tools.
3. On a commercial PC, confirm ESU license activation
In commercial environments that use an ESU activation key, open an elevated Command Prompt and run slmgr.vbs /dlv. According to Microsoft documentation, the output should show the name of the corresponding ESU program and the license status as Licensed for that program.
This check belongs to the commercial activation path. It does not replace the Windows Update status check on a home PC enrolled through the consumer flow. For commercial requirements, activation, and troubleshooting, use Microsoft's Enable Windows 10 Extended Security Updates documentation.
4. Do not confuse the preparation package with enrollment
On September 8, 2026, Microsoft released KB5126256, an ESU licensing preparation package. It updates components required for a Windows 10 22H2 device that is not yet enrolled to join the program and supersedes earlier preparation packages.
The key point in Microsoft's own documentation is that installing KB5126256 does not enroll the device and does not, by itself, provide ESU security updates. After installing the package, the appropriate enrollment or activation process still has to be completed.
5. Confirm that security updates are actually arriving
After confirming enrollment, return to Settings > Update & Security > Windows Update, check for updates, and open update history. Under Quality Updates, look for the latest cumulative security update applicable to Windows 10 ESU.
As a concrete reference on September 15, 2026, the September monthly security update for Windows 10 22H2 ESU is KB5122878, released September 8, 2026, which brings Windows 10 22H2 to OS build 19045.7725. If the PC is enrolled, online, and not blocked by update policy, this is a useful reference for confirming that the monthly cycle is arriving.
There is also the KB5129236 out-of-band update, released September 14, 2026, build 19045.7727. Microsoft states that this package is available only from the Microsoft Update Catalog, not Windows Update. Therefore, the absence of KB5129236 from update history is not evidence that ESU is failing.
6. Signs that something is wrong
| Sign | What it suggests | Next check |
|---|---|---|
| Windows Update still shows “Enroll now” | Consumer enrollment was not completed on that PC | Confirm an administrator Microsoft account, version 22H2, and pending updates |
| KB5126256 is installed, but no ESU updates arrive | The PC may only be prepared, not enrolled | Complete Windows Update enrollment or commercial activation |
| In a commercial environment, slmgr.vbs /dlv does not show the ESU program as Licensed | The ESU key may not be correctly installed or activated | Review activation and connectivity to licensing services |
| The PC is enrolled, but the monthly update does not arrive | There may be a pending update, restart, policy, service, or Windows Update error | Run “Check for updates,” restart, and review error codes and update policies |
| The PC is in an edition or scenario outside Consumer ESU | The home enrollment flow does not apply | Use commercial documentation or the specific LTSC/LTSB lifecycle |
Final checklist
- Confirm Windows 10 22H2 and an edition compatible with the ESU path being used.
- Install all pending updates and restart.
- On a personal PC, open Windows Update and explicitly confirm ESU enrollment status.
- On a commercial PC activated with an ESU key, run slmgr.vbs /dlv and look for the ESU program with Licensed status.
- Open Windows Update history and verify that a recent ESU cumulative security update is installed.
- Use Microsoft's Windows 10 release information page to compare the month's OS build and KB number.
The most reliable diagnosis combines both signals: confirmed enrollment/license and an actually installed security update. Either one by itself is not enough to conclude that the PC is receiving the expected ESU protection.
