--- title: "Windows 10 patches now cost US$427 a PC over three years; 40 PCs, US$17,080" summary: "What Microsoft's Extended Security Updates cost per Windows 10 PC over their three years, and why a patch policy starts with which OS versions still get patches, as of September 2026." url: https://www.thetechbag.com/blog/patch-management-101-from-chaos-control format: Note desk: "Endpoints & devices" published: 2026-03-17 facts_checked: 2026-09-30 author: TechBag (The TechBag Journal) tags: ["patch management","Windows 10","Extended Security Updates","Windows 11","Microsoft","CERT-In","RBI","DPDP"] cover: https://www.thetechbag.com/blog/covers/patch-management-101-from-chaos-control.png --- # Windows 10 patches now cost US$427 a PC over three years; 40 PCs, US$17,080 *What Microsoft's Extended Security Updates cost per Windows 10 PC over their three years, and why a patch policy starts with which OS versions still get patches, as of September 2026.* Note · Endpoints & devices · By TechBag · Published 2026-03-17 · Facts checked 2026-09-30 · Canonical: https://www.thetechbag.com/blog/patch-management-101-from-chaos-control Since 14 October 2025 a Windows 10 PC receives security fixes only if somebody pays for them. Microsoft’s Extended Security Updates cost US$61 a device for the first year, the price doubles every year, and the programme stops after three.[1] Kept on Windows 10 for the full term, one PC costs US$427 in patch subscriptions before anyone has installed anything. US$427 to keep one Windows 10 PC getting security fixes for all three ESU years US$61, then US$122, then US$244; the programme stops after year three. The 2024 version of this piece drew a line between a patch and an OS update, and treated the second as the bigger, optional job. Microsoft draws the line differently: monthly quality updates, which carry the security fixes, go only to a version of Windows that is still in support.[2] So the first question in any patch policy is not how fast you deploy, but whether the machine is on a version that still gets patches at all. ## What a Windows 10 PC costs to keep patched **Figure: One Windows 10 PC costs US$61 to patch for a year, US$183 for two and US$427 for three** *Windows 10 ESU list price per device for organisations, US$, years one to three from November 2025* | | Price that year | Running total | | --- | --- | --- | | Year one | 61 | 61 | | Year two | 122 | 183 | | Year three | 244 | 427 | Source: Microsoft Learn, Extended Security Updates program for Windows 10; TechBag arithmetic for the running total · as of 30 September 2026 · Commercial volume licensing; consumer ESU excluded TechBag countHow we added it up Microsoft sells ESU by the year, never part of one, and the years are cumulative: an organisation that joins in year two pays for year one too.[1] So a PC enrolled now and kept through next year costs US$183, whenever the cheque is written. The 2024 piece imagined a finance team on 40 Windows PCs; at these prices that team pays US$2,440 for year one, US$7,320 for two years and US$17,080 for all three. ## What the money buys, and what it does not ESU delivers Critical and Important security updates and nothing else: no new features, no non-security fixes, no general technical support, and only for PCs on Windows 10 version 22H2.[1] It is free for Windows 10 virtual machines on Windows 365, Azure Virtual Desktop and Azure VMs, which is Microsoft telling you where it would rather the workload went. It also does nothing for Chrome, Zoom, Java or Acrobat Reader on the same machine; those still need your patch tool. The upgrade path has its own clock. Each Windows 11 version is serviced for 24 months on Home and Pro and 36 months on Enterprise and Education, and Microsoft’s rule is to move to the latest version before the current one reaches end of servicing.[2] On Pro, that is a fleet-wide feature update roughly every two years, scheduled like any other patch. Our view Our view: ESU is a bridge, priced so that the bridge gets dearer the longer you stand on it; year three costs four times year one. Use it for the PCs that cannot take Windows 11 this year, put a replacement date against every one of them, and keep the patch policy honest by listing out-of-support versions as findings, not exceptions. **Buying in India.** ESU is sold through Microsoft volume licensing, so an Indian organisation buys it from a licensing partner in INR against the USD list, with 18% GST on the invoice. The regulation that bites is CERT-In’s Directions of 28 April 2022: incidents reported within six hours and logs kept for 180 days, whichever version of Windows the incident started on.[3] Banks have a sharper version in RBI’s Cybersecurity, Technology Risk and Resilience Framework Directions of 31 July 2026, which require a vulnerability assessment every six months on internet-facing systems.[4] And the DPDP Rules, notified on 13 November 2025, bring the reasonable-security-safeguards duty into force on 13 May 2027.[5] The 2022 shortlist of patch tools, re-checked, is in our [patch tools piece](https://www.thetechbag.com/blog/patch-management-benefits-best-tools). How we did this Figures as of 30 September 2026 ESU prices, terms and the free virtual-machine entitlements are from Microsoft’s ESU page for organisations; the servicing windows are from Microsoft’s Windows lifecycle FAQ. The running totals and the 40-PC example are TechBag arithmetic on the list price. Excluded: the consumer ESU programme, any discount for cloud-based update management (not confirmed on Microsoft’s page), partner margins and the INR exchange rate, which a reseller sets on the day of the quote. The RBI Directions are cited through a practitioner summary; the RBI PDF was not fetched. Spotted an error? Write to us; corrections are published at the foot of the piece. Sources 1. [Microsoft Learn, Extended Security Updates (ESU) program for Windows 10 (US$61 year one, doubling, three years, cumulative)](https://learn.microsoft.com/en-us/windows/whats-new/extended-security-updates) — page dated 17 November 2025 2. [Microsoft Learn, Lifecycle FAQ: Windows (quality updates only on supported versions; Windows 11 servicing 24 and 36 months)](https://learn.microsoft.com/en-us/lifecycle/faq/windows) — page dated 5 December 2023 3. [CERT-In, Directions under section 70B(6) of the IT Act (six-hour reporting, 180-day logs)](https://www.cert-in.org.in/Directions70B.jsp) — 28 April 2022 4. [RBI, Cybersecurity, Technology Risk and Resilience Framework Directions, 2026, via practitioner summary](https://taxguru.in/rbi/rbi-issues-commercial-banks-cybersecurity-technology-risk-resilience-framework-directions-2026.html) — 31 July 2026 RBI PDF not fetched. 5. [MeitY, Digital Personal Data Protection Act, 2023 and DPDP Rules, 2025](https://www.meity.gov.in/data-protection-framework) — notified 13 November 2025 Related on TechBag: the [RMM and patch management guide](https://www.thetechbag.com/browse/endpoint-management/rmm-patch) compares the patch tools on price and third-party coverage, and the [Microsoft Intune page](https://www.thetechbag.com/microsoft/microsoft-intune) covers the console most Windows 11 upgrades will be pushed from. **Disclosure.** TechBag is a software reseller: it earns a margin when a reader buys through it, including from vendors named here. The analysis is TechBag’s own; no vendor paid for or saw this piece before publication. Facts are labelled reported, TechBag count or our view. Go deeper on TechBag - [RMM & patch management guide](https://www.thetechbag.com/browse/endpoint-management/rmm-patch) — the patch tools compared on price and third-party coverage - [Microsoft Intune](https://www.thetechbag.com/microsoft/microsoft-intune) — the console most Windows 11 upgrades are pushed from