Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.comp.microsoft.windows > #2862 > unrolled thread

Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements

Started byMarion <marionf@fact.com>
First post2025-10-16 23:36 +0000
Last post2025-10-19 18:19 +0000
Articles 8 on this page of 28 — 9 participants

Back to article view | Back to alt.comp.microsoft.windows

Contents

  Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-16 23:36 +0000
    Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-17 01:33 +0000
      Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-17 02:46 +0000
      Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements "Carlos E.R." <robin_listas@es.invalid> - 2025-10-17 13:08 +0200
        Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-18 00:11 +0000
          Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Java Jive <java@evij.com.invalid> - 2025-10-19 03:13 +0100
            Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-19 02:23 +0000
              Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Hank Rogers <Hank@nospam.invalid> - 2025-10-18 22:49 -0500
                Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Paul <nospam@needed.invalid> - 2025-10-19 02:44 -0400
                  Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Hank Rogers <invalid@nospam.com> - 2025-10-19 08:12 +0000
                  Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-19 16:36 +0000
                    Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Paul <nospam@needed.invalid> - 2025-10-20 00:08 -0400
                      Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-20 05:44 +0000
                Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-19 15:15 +0000
                Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Steve Witkoff <Steve.Witkoff@invalid.invalid> - 2025-10-19 17:08 +0000
                  Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionb@fact.com> - 2025-10-23 10:17 -0600
      Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Paul <nospam@needed.invalid> - 2025-10-17 07:54 -0400
        Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-18 20:21 +0000
          Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-18 21:27 +0000
    Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-18 22:11 +0000
      Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-19 01:38 +0000
      Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements "Carlos E.R." <robin_listas@es.invalid> - 2025-10-19 14:26 +0200
        Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Frank Slootweg <this@ddress.is.invalid> - 2025-10-19 12:56 +0000
          Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements "Carlos E.R." <robin_listas@es.invalid> - 2025-10-19 15:13 +0200
            Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-19 16:48 +0000
              Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements "Carlos E.R." <robin_listas@es.invalid> - 2025-10-19 20:42 +0200
          Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Marion <marionf@fact.com> - 2025-10-19 16:50 +0000
            Re: Tutorial: How to set up Windows 10 free ESU using absolute bare minimum requirements Frank Slootweg <this@ddress.is.invalid> - 2025-10-19 18:19 +0000

Page 2 of 2 — ← Prev page 1 [2]

#2878

FromMarion <marionf@fact.com>
Date2025-10-19 01:38 +0000
Message-ID<10d1fds$bi2$1@nnrp.usenet.blueworldhosting.com>
In reply to#2875
UPDATE:

There seems to be no dearth of programs reputed to ESU enroll sans MSA.
Below is my experience today running what appears to be a canonical one.
 <https://github.com/abbodi1406/ConsumerESU/archive/refs/heads/master.zip>

Of the half-dozen or so presented, this seems to be the most promising.
 *Consumer ESU Enrollment*
 <https://github.com/Toysoft/ConsumerESU>
 "Windows Powershell script to enroll in Windows 10 Consumer 
  Extended Security Updates (ESU) program via the free Backup option, 
  with or without Microsoft Account.
  The free EnrollUsingBackupV1 function does not actually need 
  enabled Backup or online account."
  <https://codeload.github.com/Toysoft/ConsumerESU/zip/refs/heads/master>
  Name: ConsumerESU-master.zip
  Size: 8806 bytes (8 KiB)
  SHA256: 0D695EA85CE6F3C626EA2983A3103124D50C19DF963A4646C328956D5541BB59

The zip consists of four files:
  Consumer_ESU_Enrollment.ps1
  Consumer_ESU_Enrollment_run.cmd
  LICENSE
  README.md

But note that Microsoft is known to have blocked loopholes as of October 8, 
2025; this code hasn't had an update for "2 months" (i.e., prior to that).

Nonetheless, since I'm a risk taker & experimenter, I ran the cmd above.
 C:\> ConsumerESU-master>Consumer_ESU_Enrollment_run.cmd
      Evaluate ESU Eligibility state ...
      Eligibility Status: Eligible
      Eligibility Result: SUCCESS
      Obtain MSA Token ...
      Obtained token for Local user account
      Run Consumer ESU Enrollment ...
      Operation Failed: 0x80080259
      Evaluate ESU Eligibility state ...
      Eligibility Status: Eligible
      Eligibility Result: SUCCESS

Apparently my system passed Eligibility check as it said "Eligible / 
SUCCESS" which means the prerequisites (Windows 10 22H2, correct CU, 
Consumer ESU feature flag) are in place.

The script successfully generated a token for my local account (so the 
"EnrollUsingBackupV1" path is working as intended).

But the failure code 0x80080259 s a deployment/enrollment failure that 
usually indicates the script pretended to enroll but the server-side 
validation blocked it such that the local token was accepted syntactically 
but not honored by the ESU licensing servers, likely because the backend 
service rejected the enrollment request (probably because Microsoft patched 
the loophole on Oct 8, 2025).

This verifies the eligibility key.
 C:\> reg.exe query "HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\ConsumerESU"
       HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\ConsumerESU
        ESUEligibility    REG_DWORD    0x2
        ESUEligibilityResult    REG_DWORD    0x1
  ESUEligibility = 0x2 This is the eligibility state flag.
   0x0 -> Not eligible
   0x1 -> Eligible but not yet enrolled
   0x2 -> Eligible and enrollment attempted/active

Locally, Windows now believes my PC is eligible & enrolled for Consumer ESU.
However, the backend rejected the enrollment request (0x80080259).

Delving deeper, this sets the hidden Consumer ESU feature override.
 C:\> reg.exe add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" /v 4011992206 /t REG_DWORD /d 2 /f
      The operation completed successfully.

This script reputedly forces Windows to reconcile the new feature flag.
 $TN = "ReconcileFeatures"; $TP = "\Microsoft\Windows\Flighting\FeatureConfig\"
 $null = Enable-ScheduledTask $TN $TP
 Start-ScheduledTask $TN $TP
 while ( (Get-ScheduledTask $TN $TP).State.value__ -eq 4) {Start-Sleep -Seconds 1}
 "Task Completed"
 
 $TN = "UsageDataFlushing"; $TP = "\Microsoft\Windows\Flighting\FeatureConfig\"
 $null = Enable-ScheduledTask $TN $TP
 Start-ScheduledTask $TN $TP
 while ( (Get-ScheduledTask $TN $TP).State.value__ -eq 4) {Start-Sleep -Seconds 1}
 "Task Completed"

I created this batch file to run that powershell script:
  @echo off
  :: RunConsumerESU.cmd 20251018 
  :: Batch file to auto-elevate and run Consumer_ESU_Enrollment.ps1
  :: This is version 1.0
  :: Check for admin rights
  net session >nul 2>&1
  if %errorLevel% neq 0 (
      echo Requesting administrative privileges...
      powershell -Command "Start-Process '%~f0' -Verb RunAs"
      exit /b
  )
  :: Path to the PowerShell script (same folder as this .cmd)
  set SCRIPT_PATH=%~dp0Consumer_ESU_Enrollment.ps1
  :: Run the script with ExecutionPolicy bypass
  powershell -NoProfile -ExecutionPolicy Bypass -File "%SCRIPT_PATH%"
  pause
  REM end of RunConsumerESU.cmd

That batch script runs this Run-ConsumerESU powershell script.
 # Run-ConsumerESU.ps1 20251018 
 # Forces Windows to reconcile the hidden Consumer ESU feature flags
 # This is version 1.0
 function Run-ESUTask {
     param([string]$TaskName)
     $TaskPath = "\Microsoft\Windows\Flighting\FeatureConfig\"
     # Enable and start the scheduled task quietly
     Enable-ScheduledTask -TaskName $TaskName -TaskPath $TaskPath | Out-Null
     Start-ScheduledTask -TaskName $TaskName -TaskPath $TaskPath
     # Wait until the task finishes
     while ((Get-ScheduledTask -TaskName $TaskName -TaskPath $TaskPath).State -eq 'Running') {
         Start-Sleep -Seconds 1
     }
     Write-Host "$TaskName completed." -ForegroundColor Green
 }
 # Run both required tasks
 Run-ESUTask -TaskName "ReconcileFeatures"
 Run-ESUTask -TaskName "UsageDataFlushing"
 Write-Host "All Consumer ESU feature tasks completed." -ForegroundColor Cyan
 # end of Run-ConsumerESU.ps1
 
The output of that sequence was the following:
 C:\> RunConsumerESU.cmd
      Evaluate ESU Eligibility state ...
      Eligibility Status: Eligible
      Eligibility Result: SUCCESS

      Obtain MSA Token ...
      Obtained token for Local user account

      Run Consumer ESU Enrollment ...
      Operation Failed: 0x80080259

      Evaluate ESU Eligibility state ...
      Eligibility Status: Eligible
      Eligibility Result: SUCCESS
      Press any key to continue . . .

This tells us:
 a. My system meets the local prerequisites 
    (Windows 10 22H2, correct CU, Consumer ESU feature flag enabled)
 b. The script successfully generated a backup enrollment token 
    (without requiring a Microsoft account)
 c. Operation Failed: 0x80080259 means the local token was accepted 
    syntactically, but the server refused to honor it such that the
    enrollment request was rejected by Microsoft's backend service.
 d. The registry and local checks still say eligible, but that 
    doesn't mean I'm actually enrolled. It just means the feature 
    flag is active on my machine.

Win+R > control update > Check for updates
 2025-10 Cumulative Update for Windows 10 Version 22H2 for x64-based Systems (KB5066791)
 Successfully installed on ‎10/‎15/‎2025
 <https://support.microsoft.com/help/5066791>
 October 14, 2025—KB5066791 (OS Builds 19044.6456 and 19045.6456)

I ran my script to monitor Windows Update activity (previously posted).
It showed no updates occurring. 
 PS\> Get-WindowsUpdateLog
 C:\> gvim %USERPROFILE%\Desktop\WindowsUpdate.log

It's a huge file, with the latest date at the bottom. 
But I think I need to wait until there's an update to be had.

Does anyone know if there's a Win10 update already since the 15th?

[toc] | [prev] | [next] | [standalone]

#2886

From"Carlos E.R." <robin_listas@es.invalid>
Date2025-10-19 14:26 +0200
Message-ID<g12fslx2t7.ln2@Telcontar.valinor>
In reply to#2875
On 2025-10-19 00:11, Marion wrote:
> Carlos E.R. wrote:
>> You forget that there was a discussion here of a script that enabled W10
>> support for a year without an MSA, IIRC.
> 
> I researched that topic and found out that it appears to be a hoax.
> But I could be wrong if you can refer me to the exact script you speak of.


There are several posts and threads, but, for example, I saved this one:

From: Paul <nospam@needed.invalid>
Newsgroups: alt.comp.os.windows-10
Subject: Re: End of support for security updates
Date: Fri, 19 Sep 2025 15:48:09 -0400
Organization: A noiseless patient Spider
Lines: 49
Message-ID: <10akc1r$n2au$1@dont-email.me>


I can not vouch personally for the method, as I updated my VM to W11.


-- 
Cheers, Carlos.
ES🇪🇸, EU🇪🇺;

[toc] | [prev] | [next] | [standalone]

#2887

FromFrank Slootweg <this@ddress.is.invalid>
Date2025-10-19 12:56 +0000
Message-ID<10d2u5o.t5o.1@ID-201911.user.individual.net>
In reply to#2886
Carlos E.R. <robin_listas@es.invalid> wrote:
> On 2025-10-19 00:11, Marion wrote:
> > Carlos E.R. wrote:
> >> You forget that there was a discussion here of a script that enabled W10
> >> support for a year without an MSA, IIRC.
> > 
> > I researched that topic and found out that it appears to be a hoax.
> > But I could be wrong if you can refer me to the exact script you speak of.
> 
> There are several posts and threads, but, for example, I saved this one:

  Spoilsport! :-(
  
> From: Paul <nospam@needed.invalid>
> Newsgroups: alt.comp.os.windows-10
> Subject: Re: End of support for security updates
> Date: Fri, 19 Sep 2025 15:48:09 -0400
> Organization: A noiseless patient Spider
> Lines: 49
> Message-ID: <10akc1r$n2au$1@dont-email.me>
> 
> 
> I can not vouch personally for the method, as I updated my VM to W11.

  As many others, including I, posted, it works fine, except of course
for 'Marion', who's ifdef-ed out.

[toc] | [prev] | [next] | [standalone]

#2888

From"Carlos E.R." <robin_listas@es.invalid>
Date2025-10-19 15:13 +0200
Message-ID<eo4fslxt0i.ln2@Telcontar.valinor>
In reply to#2887
On 2025-10-19 14:56, Frank Slootweg wrote:
> Carlos E.R. <robin_listas@es.invalid> wrote:
>> On 2025-10-19 00:11, Marion wrote:
>>> Carlos E.R. wrote:
>>>> You forget that there was a discussion here of a script that enabled W10
>>>> support for a year without an MSA, IIRC.
>>>
>>> I researched that topic and found out that it appears to be a hoax.
>>> But I could be wrong if you can refer me to the exact script you speak of.
>>
>> There are several posts and threads, but, for example, I saved this one:
> 
>    Spoilsport! :-(

Sorry. I saw your post later. And he was not going to stop.

>    
>> From: Paul <nospam@needed.invalid>
>> Newsgroups: alt.comp.os.windows-10
>> Subject: Re: End of support for security updates
>> Date: Fri, 19 Sep 2025 15:48:09 -0400
>> Organization: A noiseless patient Spider
>> Lines: 49
>> Message-ID: <10akc1r$n2au$1@dont-email.me>
>>
>>
>> I can not vouch personally for the method, as I updated my VM to W11.
> 
>    As many others, including I, posted, it works fine, except of course
> for 'Marion', who's ifdef-ed out.

Yep.

-- 
Cheers, Carlos.
ES🇪🇸, EU🇪🇺;

[toc] | [prev] | [next] | [standalone]

#2891

FromMarion <marionf@fact.com>
Date2025-10-19 16:48 +0000
Message-ID<10d34o2$l48$1@nnrp.usenet.blueworldhosting.com>
In reply to#2888
Carlos E.R. wrote:
>>    As many others, including I, posted, it works fine
> 
> Yep.

Hi Carlos,

While the Slootweg troll simply lies, generally you are not a brazen liar.
Hence I ask you if you're aware of this rather well-documented test?

 <https://i2pn2.pugleaf.net/groups/alt.comp.os.windows-10/articles/191468>

After you read that, and assuming you comprehended what it tested, would
you still reply "yep" in affirmation of the Slootweg troll's brazen lies?

Let us know if you agree with the Slootweg troll's brazen lies please.

[toc] | [prev] | [next] | [standalone]

#2895

From"Carlos E.R." <robin_listas@es.invalid>
Date2025-10-19 20:42 +0200
Message-ID<f1ofslxfhj.ln2@Telcontar.valinor>
In reply to#2891
On 2025-10-19 18:48, Marion wrote:
> Carlos E.R. wrote:
>>>     As many others, including I, posted, it works fine

I did not write that.

>>
>> Yep.
> 
> Hi Carlos,
> 
> While the Slootweg troll simply lies, generally you are not a brazen liar.
> Hence I ask you if you're aware of this rather well-documented test?
> 
>   <https://i2pn2.pugleaf.net/groups/alt.comp.os.windows-10/articles/191468>
> 
> After you read that, and assuming you comprehended what it tested, would
> you still reply "yep" in affirmation of the Slootweg troll's brazen lies?
> 
> Let us know if you agree with the Slootweg troll's brazen lies please.

I do not have any W10 system to test with. And you are using insults, 
which turns me off.

-- 
Cheers, Carlos.
ES🇪🇸, EU🇪🇺;

[toc] | [prev] | [next] | [standalone]

#2892

FromMarion <marionf@fact.com>
Date2025-10-19 16:50 +0000
Message-ID<10d34sj$lsj$1@nnrp.usenet.blueworldhosting.com>
In reply to#2887
Frank Slootweg wrote:
>> I can not vouch personally for the method, as I updated my VM to W11.
> 
>   As many others, including I, posted, it works fine, except of course

While the Slootweg troll lied that they still work, the fact is that the
Sloootweg troll lied as Microsoft closed that loophole on October 8th.

I posted a detailed step-by-step which the Slootweg troll is ignorant of.
 <https://i2pn2.pugleaf.net/groups/alt.comp.os.windows-10/articles/191468>

If the Slootweg troll feels that test is in error, then the Slootweg troll
needs to show the actual steps as otherwise the Slootweg troll lies again.

As intelligent well-educated & well-informed adults, we would hope that
Carlos does not affirm these lies out of the despicable Slootweg troll
-- 
Note directly to the unprepossessingly disgusting Slootweg troll.
Stop deprecating me every chance you get by the use of deceitful lies.

Simply respond to the fact for once in your life, you disgusting troll.

[toc] | [prev] | [next] | [standalone]

#2894

FromFrank Slootweg <this@ddress.is.invalid>
Date2025-10-19 18:19 +0000
Message-ID<10d3h3q.ej0.1@ID-201911.user.individual.net>
In reply to#2892
Marion <marionf@fact.com> wrote:
> Frank Slootweg wrote:
> >> I can not vouch personally for the method, as I updated my VM to W11.
> > 
> >   As many others, including I, posted, it works fine, except of course
> 
> While the Slootweg troll lied that they still work, the fact is that the
> Sloootweg troll lied as Microsoft closed that loophole on October 8th.

  Several posters have reported success well after that date. Guess why?

[More gratuitous insults deleted.]

[toc] | [prev] | [standalone]

Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | alt.comp.microsoft.windows

csiph-web