Feuerfest

Just the private blog of a Linux sysadmin

Enrollment into Windows 10 Extended Security Updates (ESU) not working? Try this script

For a few weeks I tried to enroll my Windows 10 gaming PC into the Extended Security Update (ESU) program. Nothing worked. I could click on the register link in Windows Update, provide my username and password for the Microsoft account and then: Nothing.

A blank window appears for the fraction of a second, my mouse cursor turns into a loading wheel for ~5 seconds and that's it.

Windows Update kept showing me that I won't receive security updates along with the link to register.

I tried various things.. Logging into the Microsoft Store app. Enabling "Find my device". Turn on Geolocation. Set various registry keys. Restarting services. Deinstalling Microsoft patches of which some people claimed interfered with the enrollment. The one thing I just didn't want, was to convert the logon method to log on with my Microsoft account. I wanted to keep my local account.

And this evening I finally managed to get my PC enrolled.

The following discussion under this question in the Microsoft Q&A forums contained the link to a GitHub repository and the user claimed this script fixed it for him.

Onwards to GitHub it is! Visiting https://github.com/abbodi1406/ConsumerESU I was amazed that it's a simple PowerShell or CMD-Script. This means I could take a quick glance over the code. Naturally I'm a bit paranoid running some script somebody on the Internet wrote. But the script is harmless. Yes it does many things with various services, set some config values and send a few HTTPS-Requests. All of these are fine though, targeting Microsoft servers and are there to acquire needed information (Enrollment Tokens, etc.) for the Enrollment to succeed.

And what should I say? Executing the PowerShell script with the -Local option finally did the trick.

PS C:\Users\USERNAME\Downloads\ConsumerESU> .\Consumer_ESU_Enrollment.ps1 -Local

Enable Consumer ESU feature ...

Disable EEA_REGION_POLICY_CHECK features ...

Evaluate ESU Eligibility state ...
Eligibility Status:  2 Eligible
Eligibility Result:  1 SUCCESS

Obtain Authorization Local Token ...
Obtained token for Local user account

Request Consumer ESU License ...
Operation result: Success

Evaluate ESU Eligibility state ...
Eligibility Status:  3 DeviceEnrolled
Eligibility Result:  1 SUCCESS
PS C:\Users\USERNAME\Downloads\ConsumerESU>

Now the register link in Windows update is gone along with the warning that I am not receiving security updates anymore. The download for the current cumulative updates started shortly after a search for new updates.

Thank you abbodi1406!

Tag: Windows