Detecting Windows 10 Extended Security Updates (ESU) with JDisc Discovery!
As Windows 10 approaches the end of its official support lifecycle, many organizations face a critical decision: Upgrade to Windows 11 or opt for Windows 10 Extended Security Updates (ESU). With so many businesses still relying on Windows 10 due to application compatibility, hardware limitations, or logistical challenges, the ESU program is becoming an essential part of IT strategies.
At JDisc, we understand the importance of security visibility in your IT landscape. That’s why we’re adding a new feature in our upcoming JDisc Discovery Build 5249 that helps to detect if Windows 10 computers receive Extended Security Updates (ESUs).
Why Windows 10 Extended Security Updates (ESU) Detection Matters
Microsoft’s Windows 10 Extended Security Updates provide critical patches for Windows 10 systems after the official support ends (October 14, 2025). While this extends the life of older systems, it introduces a new layer of complexity: tracking which computers are actually covered under the ESU program.
Without visibility, IT teams are left guessing – and that opens the door to security risks and compliance issues.
What’s New in JDisc Discovery?
The new ESU detection capability brings valuable insight to your reports by identifying a device’s Extended Security Updates status directly at the operating system level.
You will see the Extended Security Updates attribute set to the values shown below.
- ESU Y1 (Nov. 11, 2025–Oct. 12, 2026)
- ESU Y2 (Oct. 13, 2026–Oct. 12, 2027)
- ESU Y3 (Oct. 13, 2027–Oct. 10, 2028)
if you have purchased and activated ESU for the designated period.
You can also add the Extended Security Updates attribute to any custom report (alongside the End-of-Life attributes), making it easy to see – at a glance – which Windows 10 systems are covered under the ESU program.
This enhancement is particularly beneficial for IT departments, security teams, and managed service providers who need a reliable way to monitor ESU coverage across large and diverse environments.
How It Works
JDisc Discovery analyzes every Windows 10 system on your network and automatically checks for signs that Extended Security Updates (ESU) are being applied. No special configuration is required – standard Windows discovery via the WMI protocol is all it takes. Once identified, the ESU status is stored in the device inventory, allowing you to easily use it in reports, filters, and custom analyses.
It’s automated, it’s powerful, and it’s one more reason to trust JDisc Discovery for clear IT asset visibility. I hope you enjoy and benefit from this new feature. Please let me know if there are any other operating systems that support Extended Security Updates or similar maintenance features that you would like JDisc Discovery to support.
Cheers Thomas
