As Windows 10 approaches its Extended Security Updates (ESU) support phase, many users and IT administrators are encountering an issue: the absence of the “Enroll Now” button that enables subscription to Microsoft’s ESU program. The ESU allows devices running unsupported versions of Windows to continue receiving critical security updates, especially vital for business continuity and compliance. This missing option can be frustrating, but understanding its causes and step-by-step solutions can save precious time and ensure that devices remain protected.
Why Is the “Enroll Now” Option Missing?
The “Enroll Now” option might be missing from a Windows 10 device for several reasons. Common causes include:
- Outdated Windows updates: The system may not be running the latest cumulative or servicing stack updates.
- Incorrect Windows edition: ESU enrollment is available only for specific Windows editions like Enterprise, Education, and some Pro versions.
- Disabled Windows Update components: Background services necessary for ESU may be turned off or misconfigured.
- Missing prerequisites: Certain updates and licenses must be installed prior to enrolling in ESU.
Before diving into complex troubleshooting, first ensure that the system has an active internet connection and that Windows Update services are running.
Step-by-Step Guide to Restore the “Enroll Now” Option
Below are the recommended steps to fix the missing “Enroll Now” option and ensure your Windows 10 device is eligible for ESU:
1. Check Windows Edition and Version
ESU is only available for specific versions of Windows 10. To check your system version and edition:
- Press Windows + R and type winver, then press Enter.
- A window will display your current version and edition.
Your version should be Windows 10 Enterprise, Education, or Pro, and the version should ideally be 1809 or later.
[h-img]windows version dialog, windows 10 system info, edition check[/ai-img]
2. Install Prerequisite Updates
Before ESU enrollment is available, your system must have certain Service Stack Updates (SSUs) and Cumulative Updates (CUs). Here’s how to install them:
- Open Settings → Update & Security → Windows Update.
- Select Check for updates and install any pending critical or cumulative updates.
- Manually download required updates from the Microsoft Update Catalog if automatic updates are not available.
3. Verify Required Services Are Running
Several background services must be enabled and running for the ESU program to function:
- Windows Update (wuauserv)
- Background Intelligent Transfer Service (BITS)
- Windows Installer
To check these services:
- Press Windows + R, type services.msc, and press Enter.
- Scroll through the list and ensure the services listed above are set to Automatic or Manual (Triggered Start).
- If not started, right-click the service and click Start.
[h-img]windows services, update services, start service[/ai-img]
4. Apply ESU Licensing Prerequisites
Microsoft requires specific license scripts or activation keys to be applied to a system before ESU becomes available. For Volume Licensing customers:
- Log into the Volume Licensing Service Center (VLSC).
- Download and install the ESU Activation Scripts.
- Run the scripts via Command Prompt as Administrator.
You can also use the Slmgr.vbs command to install the ESU product key manually:
slmgr /ipk Your-ESU-Key-Here5. Restart the System
After completing the above steps, restart the system to allow changes to take effect. Upon reboot, open Settings → Update & Security. The missing “Enroll Now” button should now appear.
Alternative Methods to Enroll in ESU
If the standard process fails, organizations can use other tools and techniques to force the enrollment:
Using PowerShell CMDlets
Microsoft provides PowerShell tools for ESU activation. Run the following as Administrator:
Install-Module -Name PSWindowsUpdate
Get-WindowsUpdate
Install-WindowsUpdate -AcceptAll -AutoRebootGroup Policy Configuration
ESU behavior can also be influenced through Group Policy Editor:
- Open gpedit.msc.
- Navigate to Computer Configuration → Administrative Templates → Windows Components → Windows Update.
- Enable all relevant settings that could impact update visibility or delivery.
Windows Security Baseline Tools
Microsoft Security Compliance Toolkit includes tools that assist in enforcing baseline configurations, including those related to ESU eligibility.
Preventing This Issue in the Future
To avoid encountering a missing “Enroll Now” button in the future, Microsoft recommends the following practices:
- Keep systems updated: Maintain steady update cycles across all machines.
- Monitor ESU eligibility: Periodically verify that devices retain ESU licensing status.
- Centralize ESU management: Use Microsoft Endpoint Manager (Intune) or SCCM to manage multiple devices effectively.
Conclusion
The “Enroll Now” button for Windows 10 ESU is a crucial feature for enterprises and extended users needing to stay secured beyond mainstream support. When it goes missing, it can halt security updates and potentially put systems at risk. By ensuring prerequisites are in place, services are running, and updates are applied, the option can be restored efficiently. Taking a proactive approach to system maintenance is the best line of defense to avoid this issue in the long run.
Frequently Asked Questions (FAQs)
-
Q: Can I use ESU on Windows 10 Home edition?
A: No. ESU is only available for Windows 10 Professional, Enterprise, and Education editions. -
Q: Is ESU available for free?
A: No. ESU is a paid subscription offered to organizations and some end users through volume licensing or CSPs. -
Q: How long will Windows 10 ESU be available?
A: Microsoft typically offers ESU for up to three years after end of support, but availability may vary. -
Q: Do I need an internet connection for ESU activation?
A: Yes. The system must connect to Microsoft activation servers to validate the ESU subscription. -
Q: Can I manage ESU devices using SCCM or Intune?
A: Yes. Microsoft Endpoint Configuration Manager (SCCM) and Intune support ESU management across devices.