Trying to enroll a Windows 10 PC in Extended Security Updates and getting "Something went wrong. We can't enroll you in Extended Security Updates right now"? You're not alone, and the fix is usually one of three things: missing updates, the wrong account type, or a region block.

First, the part most people missed: Microsoft quietly extended the free consumer ESU program. Coverage now runs through October 12, 2027, a full extra year beyond the original deadline, and you can enroll any time before the program ends. The details are on the official Extended Security Updates page.

Quick Fix

ESU enrollment has strict prerequisites, and the generic "something went wrong" error is almost always one of them failing silently. Work through these in order.

1. Confirm you're on Windows 10 22H2. ESU only supports version 22H2 on Home, Pro, Pro Education, and Workstations editions. Check with:

winver

2. Install every pending update. The enrollment wizard itself ships through Windows Update, and an outdated servicing stack breaks it. Go to Settings, Windows Update, and keep clicking Check for updates until nothing is left, then reboot.

3. Sign in with a Microsoft account that has administrator rights. Local accounts and child accounts can't enroll. The ESU license ties to the Microsoft account, and one license covers up to 10 devices.

4. Retry enrollment. Settings, Windows Update, then click Enroll now. You can enroll free by syncing your PC settings, redeem 1,000 Microsoft Rewards points, or pay a one-time $30.

If Enrollment Still Fails

A few less common blockers show up on machines that meet all the prerequisites.

Region banner. If you see a message that enrollment is temporarily unavailable in your region, that block is on Microsoft's side. Confirm your region is set correctly in Settings, Time and Language, then retry later.

Domain-joined or previously managed PCs. The consumer wizard refuses machines it thinks belong to a business. If the PC was ever joined to a company domain or MDM, remove the work or school account under Settings, Accounts, Access work or school, then retry.

Firewall or DNS filtering. Enrollment talks to Microsoft activation servers. If you run a network-wide ad blocker or strict firewall, try enrollment from a different network to rule it out.

What ESU Actually Covers

ESU delivers security updates only. No new features, no non-security bug fixes, no general support. It buys time, not a future. If the hardware supports Windows 11, upgrading is still the better move, and if Microsoft's CPU and TPM checks are the only thing stopping you, see our bypass guide below.

Official Microsoft ESU enrollment page

Bypass Windows 11 TPM and CPU Requirements

Windows 11 OOBE: Bypass Microsoft Online Account

5 Best Windows Debloat and Cleanup Tools

Still running a fleet of Windows 10 machines and not sure whether to enroll or upgrade? Contact Rain City Techworks.