Broken wizard forces Microsoft to issue out-of-band Windows 10 patch

Microsoft released an emergency out-of-band update on November 11 to fix a malfunctioning enrollment wizard that prevented eligible Windows 10 users from accessing Extended Security Updates (ESU).

Despite months promoting the ESU program as the solution for Windows 10 devices after end-of-support from October 14, Microsoft failed to ensure its enrollment system actually worked. For affected users, the broken wizard meant security updates would stop flowing entirely - a critical failure requiring an urgent fix.

So it came to pass, that on the first Patch Tuesday after free support for Windows 10 ended, Microsoft released KB5071959 for consumer Windows 10 devices not enrolled in the ESU program. Whoopsie.

Microsoft has made several concessions to Windows 10 consumers over the past year. In September, it offered a free year of ESU updates to users in the European Economic Area (EEA). It also allowed users to qualify by syncing settings to Microsoft's cloud or spending 1,000 Microsoft reward points. Otherwise, consumers were asked to pay $30 annually for twelve more months support.

Affected users must now install the emergency update, re-enroll their device, and then the Windows 10 November 2025 security update should be available.

Microsoft's Windows 10 ESU program has not had an auspicious start. The enrollment failure follows earlier ESU issues. After the October security update, some enrolled devices incorrectly displayed out-of-support warnings.

In that instance, devices still received updates despite the issue, and Microsoft later released a fix (KB5068781) to silence the message.

However, the enrollment wizard failure is far more serious - it completely blocks security updates rather than merely displaying incorrect warnings, hence the out-of-band update.

Despite knowing Windows 10 support would end, Microsoft failed to properly test the enrollment system it spent months promoting. ®