[DISCUSSION] Windows 10 ESU License: All options, Activation, and Troubleshooting

Discussion in 'Windows 10' started by Enthousiast, Sep 11, 2025.

  1. joshlynn

    joshlynn MDL Novice

    Sep 22, 2018
    9
    7
    0
    Anyone noticed how Windows Defender became "aggressive" towards MAS script collection?
    In October it didn't detect anything, at the beginning of November it classified MAS_AIO as low priority
    PUA, but from two days ago I have to disable it even to extract the archives, as all the files are now high risk "Hacktools".:rolleyes:
     
  2. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream
    Staff Member

    Dec 21, 2012
    8,041
    10,268
    270
    Just run MAS 3.8 again, and use point "[5] Check Activation Status"
    It must mention the following:
    Code:
    [Client-ESU-Year1]
    [Client-ESU-Year2]
    [Client-ESU-Year3]
    [Client-ESU-Year6]
    and the status of each must be:
    Code:
    License Status: Licensed
    
        The product is permanently activated.
    .
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream
    Staff Member

    Dec 21, 2012
    8,041
    10,268
    270
    It's now [5], I guess since the KMS38 removal.

    mas38.png
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. joshlynn

    joshlynn MDL Novice

    Sep 22, 2018
    9
    7
    0
    I just use slmgr.vbs with options /dli, then /dlv and /xpr (although /dli is sufficient).
    Isn't that equivalent?
     
  5. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream
    Staff Member

    Dec 21, 2012
    8,041
    10,268
    270
    #245 Carlos Detweiller, Nov 16, 2025
    Last edited: Nov 16, 2025
    Of course, but using MAS is easier for the non-tech people.

    Getting a complete list with all possible licenses can also be acquired, however, it might overflow the default vbscript window, and so you should use cscript.exe //nologo instead.

    Code:
    cscript.exe //nologo c:\windows\system32\slmgr.vbs /dli all
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. onepic

    onepic MDL Junior Member

    Oct 7, 2011
    87
    14
    0
    #246 onepic, Nov 16, 2025
    Last edited: Nov 16, 2025
    Hi there. Without using TS Forge (option 3 then 2), and if i set manualy following entryes:

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ESU]
    "Win10ConsumerESUAY"=dword:00000009
    "Win10ConsumerESUStatus"=dword:00000003
    "Win10CommercialKeybasedESUEligible"=dword:00000001
    "Win10CommercialW365ESUEligible"=dword:00000001
    "Win10CommercialAzureESUEligible"=dword:00000001

    and

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\ConsumerESU]
    "ESUEligibility"=dword:00000003
    "ESUEligibilityResult"=dword:00000012

    What i need to change more to get update KB5068781 fully installed because it's stuck on 94% and after a while computer reboot and uninstall it.

    Thank you in advance!
     
  7. ASGL

    ASGL MDL Novice

    Jan 18, 2020
    9
    4
    0
    The error I get is 0x800f0922. The file system is fine (I ran both chkdsk and sfc) and there is enough free space. After I installed (twice) MAS 3.8, I still get the message that I cannot access security updates. Pushing the button brings no results. When I try to install kb5068781 manually everything seems to work fine, I restart the PC, the updating process continues, but then I get the message that something went wrong. The system is Win 10 IoT Enterprise 64bit, non-LTSC edition.
    Can anybody suggest what steps I should take?
     
  8. rayman95

    rayman95 MDL Senior Member

    Oct 3, 2018
    402
    267
    10
    yes..M$ want to eradicate it..
     
  9. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    18,562
    99,681
    340
    You can't install ESU with registry values
    https://forums.mydigitallife.net/th...nd-troubleshooting.89665/page-12#post-1897035

    Start by posting licensing details for ESU
    https://forums.mydigitallife.net/th...nd-troubleshooting.89665/page-12#post-1897066
     
  10. ASGL

    ASGL MDL Novice

    Jan 18, 2020
    9
    4
    0
    #250 ASGL, Nov 17, 2025
    Last edited by a moderator: Nov 17, 2025
    This is what I see:
    Code:
    ============================================================
    ===                   Windows Status                     ===
    ============================================================
    
    Name: Windows(R), Client-IoT-ESU-Year3 add-on
    Description: Windows(R) Operating System, VOLUME_MAK channel
    Activation ID: 4dac5a0c-5709-4595-a32c-14a56a4a6b31
    Extended PID: 03612-05155-177-257490-03-1033-19045.0000-3202025
    Product Key Channel: Volume:MAK
    Partial Product Key: YBM84
    License Status: Licensed
    
        The product is permanently activated.
    ____________________________________________________________
    
    Name: Windows(R), Client-IoT-ESU-Year2 add-on
    Description: Windows(R) Operating System, VOLUME_MAK channel
    Activation ID: 7b76ee02-0a75-4f08-85d5-bd0feadad0c0
    Extended PID: 03612-05154-109-803920-03-1033-19045.0000-3202025
    Product Key Channel: Volume:MAK
    Partial Product Key: R64W3
    License Status: Licensed
    
        The product is permanently activated.
    ____________________________________________________________
    
    Name: Windows(R), Client-IoT-ESU-Year1 add-on
    Description: Windows(R) Operating System, VOLUME_MAK channel
    Activation ID: b8527af1-5389-447c-9a88-2d1691ea33d3
    Extended PID: 03612-05153-057-361283-03-1033-19045.0000-3202025
    Product Key Channel: Volume:MAK
    Partial Product Key: 2YYCP
    License Status: Licensed
    
        The product is permanently activated.
    ____________________________________________________________
    
    Name: Windows(R), Client-IoT-ESU-Year6 add-on
    Description: Windows(R) Operating System, VOLUME_MAK channel
    Activation ID: f69e2d51-3bbd-4ddf-8da7-a145e9dca597
    Extended PID: 03612-05191-047-212452-03-1033-19045.0000-3202025
    Product Key Channel: Volume:MAK
    Partial Product Key: CR8MK
    License Status: Licensed
    
        The product is permanently activated.
    ____________________________________________________________
    
    Name: Windows(R), IoTEnterprise edition
    Description: Windows(R) Operating System, OEM_COA_NSLP channel
    Activation ID: b68e61d2-68ca-4757-be45-0cc2f3e68eee
    Extended PID: 03612-04363-055-033013-02-1033-19045.0000-3332023
    Product Key Channel: OEM:NONSLP
    Partial Product Key: WHXV4
    License Status: Licensed
    
        The machine is permanently activated.
    ____________________________________________________________
    
    Client Licensing Check information:
        AppId=55c92734-d682-4d71-983e-d6ec3f16059f
        LastConsumptionReason=0x4004f401
        LastNotificationId=Cleanup
        LicenseState=SL_LICENSING_STATUS_LICENSED
        PartialProductKey=WHXV4
        ProductKeyType=OEM:NONSLP
        SkuId=b68e61d2-68ca-4757-be45-0cc2f3e68eee
        ruleId=379cccfb-d4e0-48fe-b0f2-0136097be147
        uxDifferentiator=OEM_COA_NSLP
        LastActivationHResult=0x00000000
        LastActivationTime=2023/11/30:00:21:25
        IsWindowsGenuine=SL_GEN_STATE_IS_GENUINE
        IsDigitalLicense=TRUE
        SubscriptionSupportedEdition=FALSE
        SubscriptionEnabled=FALSE
    ____________________________________________________________
    
    
    Press any key to Go back...
    
     
  11. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    18,562
    99,681
    340
    Do you still have "C:\Windows\Logs\CBS\CBS.log"? (or persistent logs)
    can you open it and search for
    Code:
    ESU:
     
  12. ASGL

    ASGL MDL Novice

    Jan 18, 2020
    9
    4
    0
    Thank you for your assistance. There is a C:\Windows\Logs\CBS\CBS.log file (1.096 KB) but it contains no "ESU:".
     
  13. onepic

    onepic MDL Junior Member

    Oct 7, 2011
    87
    14
    0
    Hope someone will write a script which will do ONLY ESU „activation” then, with one click and no other options available. Or it already exist? Thank you!
     
  14. joshlynn

    joshlynn MDL Novice

    Sep 22, 2018
    9
    7
    0
    Yeah, I was using cscript but didn't know about /nologo flag.:good3:
     
  15. logicwatch

    logicwatch MDL Senior Member

    Jan 26, 2011
    319
    37
    10
    Agree spotted this yesterday its become very aggressive in the last few days !!
     
  16. logicwatch

    logicwatch MDL Senior Member

    Jan 26, 2011
    319
    37
    10
    #259 logicwatch, Nov 17, 2025
    Last edited: Nov 21, 2025
     
  17. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    18,562
    99,681
    340
    Essentially, Client-ESU-Year3 addon is enough to cover 3 years, Year 1&2 are not necessary

    run ClipESU.exe after activating ESU addon(s), to update detection registry values