Subsequent to successful enrollment in Windows 10 ESU, unable to download nor install KB5087544 Security update.

L 0 Reputation points
2026-06-05T09:23:33.7666667+00:00

Enrolled successfully in Win. 10 ESU program on Mar. 28/26 but have not been able to download & install KB5087544 Security update. I've attempted at least 3 times since May 17 to have this update installed, but the first two times it failed and the third time its basically disappeared from even being on a list of "yet-to-be-installed" updates.

Please note that on 3/28/26 successfully installed 2026-03 Cumulative Update for Windows 10 Version 22H2 for x64 systems (KB5078885). On May 20/26 Cumulative Update for .NET Framework 3.5 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 (KB5088863) was successfully installed, but that is the ONLY update that has worked, despite the fact that I know there are more updates that are available.

I've subsequently ran the additional troubleshooter via Windows Update for troubleshooter in Windows 10, but the "automatic" security updates that normally appear regularly as "available" lists nothing as being outstanding or available for downloading.

Windows for home | Windows 10 | Windows update

1 answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-06-05T09:23:56.73+00:00

    Based on the provided information, the behavior is consistent with general Extended Security Update (ESU) and Windows Update issues where:

    • ESU enrollment is successful, but
    • Individual ESU security updates fail to install or disappear from the available-updates list.

    From the ESU troubleshooting guidance, the following checks and actions are supported:

    1. Confirm ESU eligibility and activation Even though enrollment completed, ESU updates can fail or revert if the ESU key is not correctly installed and activated, or if the edition is not supported. Follow the documented ESU checks:
      1. Open an elevated Command Prompt.
      2. Run one of:
        • slmgr /dlv (for Windows 7 only, but for ESU scenarios the general pattern is the same), or
        • slmgr /dlv <Activation ID> or
        • slmgr /dlv all
      3. In the output, verify that the ESU key is shown as licensed.
      4. If the ESU key is missing or not licensed, install and activate it:
        • slmgr /ipk <ESU key>
        • slmgr /ato <Activation ID>
      If the ESU key is not installed/activated or the edition is not supported, ESU security updates can fail with messages such as “Some updates were not installed” or “Failure to configure Windows updates. Reverting changes. Do not turn off your computer,” and show as Failed in Update History. This is explicitly documented for ESU security-only updates and applies generally to ESU updates.
    2. Verify the Servicing Stack Update (SSU) and prerequisites ESU updates can also fail if required servicing stack or prerequisite updates are missing. The ESU troubleshooting guidance for similar errors states:
      • If the Windows Modules Installer (servicing stack) is not updated, ESU packages can fail with messages that it must be updated first.
      • The fix is to ensure the required SSU package is installed:
        1. Go to Control Panel → Programs → Programs and Features → View installed updates.
        2. Confirm that the latest Servicing Stack Update with AI changes (or the SSU listed as a prerequisite in the ESU guidance) is installed.
        3. If it is missing, install the SSU from the Microsoft Update Catalog (per the ESU documentation) and restart the device.
    3. Interpret “Failure to configure… Reverting changes” / failed ESU updates For ESU security-only updates (examples KB5023759, KB5025277, KB5026426, KB5031441), Microsoft documents that after restart you might see:

      “Failure to configure Windows updates. Reverting Changes. Do not turn off your computer,” and the update might show as Failed in Update History.

      This is expected when:
      • The device is running an edition that is not supported for ESU, or
      • An ESU MAK add-on key is not installed and activated, or
      • ESU prerequisites are missing.
      The recommended next steps in those cases are:
      • Confirm the edition is ESU-supported (per the ESU eligibility documentation).
      • Confirm the ESU key is installed and activated (as in step 1 above).
      • Confirm all prerequisites listed for the ESU updates are installed.
      While the KB number in the question is different, the documented pattern for ESU security updates is the same: if ESU licensing or prerequisites are not correct, the update fails and may revert.
    4. If updates continue to fail or disappear If ESU key and prerequisites are confirmed and the issue persists, the ESU troubleshooting guidance recommends collecting logs and contacting Microsoft Support:
      • Copy C:\Windows\Logs\CBS\CBS.log from the affected device.
      • Contact Microsoft Support and provide the CBS log for deeper analysis.
      This is the documented escalation path when ESU updates continue to fail after confirming licensing and prerequisites.
    5. When Windows Update shows no outstanding updates The context also notes that in some ESU-related Windows 10 scenarios where the ESU enrollment UI or behavior is inconsistent, a clean reinstall of Windows 10 followed by checking for updates has resolved missing ESU enrollment/update issues for some users. In that example, after a clean install and removing extra user accounts, the ESU enrollment message and updates appeared normally when checking for updates. For persistent, unexplained ESU update failures where all other checks are correct, a repair/reinstall of Windows 10 followed by Windows Update is a documented resolution path in similar cases.

    Summary of supported steps:

    1. Verify ESU key is installed and licensed using slmgr commands.
    2. Confirm the Windows 10 edition is ESU-supported.
    3. Ensure the latest Servicing Stack Update and other ESU prerequisites are installed.
    4. If failures persist, collect CBS.log and contact Microsoft Support.
    5. As a last resort, a repair or clean reinstall of Windows 10 followed by Windows Update has resolved similar ESU enrollment/update issues.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.