Windows 7 Extended Security Updates (ESU)

Windows 7 support terminated.

Touch the future. #DigitalOrganization

Windows 7 Extended Security Updates (ESU)get critical security updates for Windows 7

On 14 January 2020, Microsoft will stop releasing free fixes for Windows 7, which is the end of the support date. However, Extended Security Updates program (ESU) provides a way to extend the delivery of "critical" and "crucial" Windows 7 patches to organizations that are having difficulty migrating from Windows 7.

The ESU program allows for the extension of patches for a maximum of three years, this support must be renewed by the organizations every year.


More about Windows 7 ESU

Extension of updates is ensured by the KMS service or the MAK key. Keep in mind that the ESU key is always only for one year. ESU is not a long-term solution, but you get time to prepare and move to a new operating system. Learn more about switching to Windows 10 here.

How to get ESU

Get the Windows 7 Extended Security Updates (ESU) today for € 65 / computer / year using the Microsoft CSP. Contact us using the form and our sales team will help you. The ESU price is set at € 65 for 2020 and will increase every year.

web image

Frequently asked questions about Windows 7 ESU

Windows 7 ESU includes security updates of critical and crucial issues defined by the Microsoft Security Response Center (MSRC) for a maximum of three years from 14 January 14 2020. After 14 January 2020, if your computer is running Windows 7 and you have not purchased Extended Security Updates, the computer will no longer receive security updates. Note:
There will be no ESU Offer or support extension for Office 2020.

ESU is available for Windows 7 Professional and Windows 7 Enterprise.

The ESU offer has been available at the Volume Licensing Service Center (VLSC) since April 1, 2019. Extended Security Updates will be available through the CSP from January 2020.

Although the support for Windows 7 terminates on January 14, 2020, organizations may purchase ESU at any time during the three years that the offer is available. If the organization is waiting and buying ESU for the first time in year two or year three, they will have to pay for the previous years. This is because the security updates offered by the ESU program are cumulative. As mentioned, organizations may purchase ESU anywhere. However, these organizations should be aware that after the end of support in January 2020, organizations will no longer receive regular bug fixes and updates. Additionally, Microsoft Support will not be able to provide support.

Customers who own Windows 7 for Education (EDU) may purchase the ESU commercial offer from CSP starting Monday, December 2, 2019. KPCS CZ is a certified provider of solutions for education (EDU).

No. Because we do not require ESU on any device, we have no minimum purchase requirements.

No. However, VL customers who have subscription licenses for Windows Enterprise SA or Windows Enterprise E3 receive favorable prices.


No. ESU is outside the scope of the MPSA and Open agreements.

No. ESU is outside the scope of the MPSA and Open agreements.

Support for Windows XP and Windows Vista terminated, and no further support is available. We encourage customers to move to Windows 10 to take advantage of Microsoft 365.

Yes, the updates will include support for the .NET Framework 4.5.2-4.8 (as of January 2020) and the .NET Framework 3.5 Service Pack 1 (SP1).


Microsoft Security Essentials (MSE) will continue to receive signature updates after 14 January 2020. However, the MSE platform will no longer be updated. More [on MSE information](

Regardless of ESU status, SCEP definitions and engine updates will continue in Windows 7, in accordance with the applicable lifecycle policies for the mentioned versions of SCEP. - All versions of SCEP provide anti-spyware and anti-virus updates to version 4.10.209. - The current SCEP branch will be the only endpoint protection product to offer AV updates (until January 2023) after the 2012 version reaches the end of support in July 2022.

No. Customers who purchase directly from Microsoft (such as VL customers or a direct CSP partner) may request assistance with Windows 7 through an active support agreement, such as Software Assurance or Premier / Unified support.

No. If customers have Windows 7 but do not purchase ESU, they cannot log these tickets, even if they have support plans.

We know there are customers who have deployed Windows 7 Ultimate. The commercial customers who have Windows 7 Ultimate may purchase Windows 7 ESU for the use with these devices.

Yes. The number of activations available will depend on the number of licenses the customer has purchased and the terms and conditions of that customer's specific license agreement.

To install and activate Windows 7 ESU, download KB4516033 (10 September 2019) a KB4516048 (24 September 2019). For instructions on installing and activating the Windows 7 ESU and other purchase information, see How to obtain Extended Security Updates for eligible windows devices. Note: Installing MAK keys adds the possibility to receive Extended Security Updates. It does not replace the current product activation key (for example, OEM, KMS) or reactivate the system. Organizations will need to install a new MAK key for each year that Extended Security Updates have been deployed.


Updates will be delivered through all common update delivery processes, including current SCCM, WU, WUfB, and WSUS branches. The update will be programmed to search for MAK activation at the endpoint and will only be installed on these systems along with the MAK key. Learn more about Extended Security Updates and Configuration Administrator.

Customers can determine the remaining MAK key activations using VAMT: 1. Start VAMT. 2. In the left pane, select the Product Key node. 3. In the middle pane, locate the Add-on MAK key. The number of activations remaining appears in the Remaining Activations colomn.