My PC will not update to Microsoft's Extended Support Program

Question

My PC will not update to Microsoft's Extended Support Program

Scott Dickson 25

When I try to Enroll in the Extended Support Program, it says that it encountered a problem and try again later. However, it keeps saying that. I am running Microsoft Home, 22H2 Build.

0 comments

Answer accepted by question author

Alvise Cervellati 6,630 Independent Advisor

Hi Scott, Welcome in Community

The ESU eligibility check relies heavily on the Connected User Experiences and Telemetry service.

Run the following from an elevated Command Prompt or PowerShell as administrator:

sc.exe config DiagTrack start= auto

sc.exe start DiagTrack

Now trigger the silent evaluation executable:

cmd /c ClipESUConsumer.exe -evaluateEligibility

Then check if the evaluation succeeded by querying the registry:

reg.exe query "HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\ConsumerESU"

You are looking for ESUEligibility to equal 0x2 and ESUEligibilityResult to equal 0x1. If those match, go back to Windows Update and try enrolling again.

Let me know how it goes

Elvis

Scott Dickson 25 Reputation points

2026-06-26T13:31:41.9366667+00:00

ELvis, thanks for the help. This was the output from the last command.

ESUEligibility REG_DWORD 0x1

ESUEligibilityResult REG_DWORD 0x4

Scott
Alvise Cervellati 6,630 Reputation points Independent Advisor

2026-06-26T14:54:38.2566667+00:00

Ok, Windows thinks your PC is managed by an organization, so it is actively hiding the Consumer ESU offer.

Even on Windows Home, if you have ever signed into a work or school account (for Office 365, Teams, or an employer portal) and left the default "Allow my organization to manage my device" box checked, Windows leaves behind Mobile Device Management (MDM) or Workplace Join artifacts.

Do you remember if you have ever done this?
Scott Dickson 25 Reputation points

2026-06-26T15:41:39.3766667+00:00

I think I did this awhile ago. How do I turn it off?
Alvise Cervellati 6,630 Reputation points Independent Advisor

2026-06-26T19:08:52.98+00:00

Ok, we can start with these steps:

Press WIN + X and open terminal as admin, now type

dsregcmd /debug /leave

Now press Win + R, type certlm.msc, and press Enter to open the Local Machine certificate manager, expand Personal in the left pane and click on Certificates and look for any certificates named MS-Organization-Access or MS-Organization-P2P-Access and delete them.

Click Start, type Task Scheduler, and open it, expand the folders on the left: Task Scheduler Library > Microsoft > Windows > EnterpriseMgmt, if you see any folders with long alphanumeric GUID names (e.g., {12345678-...}), delete those folders entirely. If EnterpriseMgmt is empty, you can close Task Scheduler.

Restart windows and again from terminal as admin type

cmd /c ClipESUConsumer.exe -evaluateEligibility

reg.exe query "HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\ConsumerESU"

and let me know the result
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Scott Dickson 25 Reputation points

2026-06-26T19:41:01.0366667+00:00

Same response as before. However, there was a folder in Task Scheduler Library > Microsoft > Windows > EnterpriseMgmt with a whole bunch of FFFFFFs in it. I was able to delete the tasks but, when I went to delete the folder, it said my user account couldn't delete the folder. I went back and ran Task Scheduler as admin and it still wouldn't delete the folder. Does that help?
Alvise Cervellati 6,630 Reputation points Independent Advisor

2026-06-26T19:59:01.0833333+00:00

mmm ok, from terminal as admin type:

takeown /F "C:\Windows\System32\Tasks\Microsoft\Windows\EnterpriseMgmt" /A /R /D Y

icacls "C:\Windows\System32\Tasks\Microsoft\Windows\EnterpriseMgmt" /grant Administrators:F /T

rd /s /q "C:\Windows\System32\Tasks\Microsoft\Windows\EnterpriseMgmt"

Then, purge the registry cache with this command:

reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\EnterpriseMgmt" /f

Restart windows and run again the evaluation with this command:

cmd /c ClipESUConsumer.exe -evaluateEligibility

reg.exe query "HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\ConsumerESU"
Scott Dickson 25 Reputation points

2026-06-27T13:15:46.92+00:00

I got an "ERROR: Access is denied" when I tried the reg delete command.
Scott Dickson 25 Reputation points

2026-06-27T13:45:09.9733333+00:00

I went into RegEdit and deleted the FFFF...folder from the Registry and the Task Scheduler, including the ENterpriseMgmt folder. I got the results you stated in your first post and the Enroll Now button appeared. Thank you!
Alvise Cervellati 6,630 Reputation points Independent Advisor

2026-06-27T15:31:25.11+00:00

If all is resolved, feel free to mark the answer for this thread. Otherwise, please let me know if there's anything else I can help you with.

Elvis

1 additional answer

Your answer

Scott Dickson 25 Reputation points

2026-06-26T13:31:41.9366667+00:00

ELvis, thanks for the help. This was the output from the last command.

ESUEligibility REG_DWORD 0x1

ESUEligibilityResult REG_DWORD 0x4

Scott
Alvise Cervellati 6,630 Reputation points Independent Advisor

2026-06-26T14:54:38.2566667+00:00

Ok, Windows thinks your PC is managed by an organization, so it is actively hiding the Consumer ESU offer.

Even on Windows Home, if you have ever signed into a work or school account (for Office 365, Teams, or an employer portal) and left the default "Allow my organization to manage my device" box checked, Windows leaves behind Mobile Device Management (MDM) or Workplace Join artifacts.

Do you remember if you have ever done this?
Scott Dickson 25 Reputation points

2026-06-26T15:41:39.3766667+00:00

I think I did this awhile ago. How do I turn it off?
Alvise Cervellati 6,630 Reputation points Independent Advisor

2026-06-26T19:08:52.98+00:00

Ok, we can start with these steps:

Press WIN + X and open terminal as admin, now type

dsregcmd /debug /leave

Now press Win + R, type certlm.msc, and press Enter to open the Local Machine certificate manager, expand Personal in the left pane and click on Certificates and look for any certificates named MS-Organization-Access or MS-Organization-P2P-Access and delete them.

Click Start, type Task Scheduler, and open it, expand the folders on the left: Task Scheduler Library > Microsoft > Windows > EnterpriseMgmt, if you see any folders with long alphanumeric GUID names (e.g., {12345678-...}), delete those folders entirely. If EnterpriseMgmt is empty, you can close Task Scheduler.

Restart windows and again from terminal as admin type

cmd /c ClipESUConsumer.exe -evaluateEligibility

reg.exe query "HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\ConsumerESU"

and let me know the result
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Scott Dickson 25 Reputation points

2026-06-26T19:41:01.0366667+00:00

Same response as before. However, there was a folder in Task Scheduler Library > Microsoft > Windows > EnterpriseMgmt with a whole bunch of FFFFFFs in it. I was able to delete the tasks but, when I went to delete the folder, it said my user account couldn't delete the folder. I went back and ran Task Scheduler as admin and it still wouldn't delete the folder. Does that help?
Alvise Cervellati 6,630 Reputation points Independent Advisor

2026-06-26T19:59:01.0833333+00:00

mmm ok, from terminal as admin type:

takeown /F "C:\Windows\System32\Tasks\Microsoft\Windows\EnterpriseMgmt" /A /R /D Y

icacls "C:\Windows\System32\Tasks\Microsoft\Windows\EnterpriseMgmt" /grant Administrators:F /T

rd /s /q "C:\Windows\System32\Tasks\Microsoft\Windows\EnterpriseMgmt"

Then, purge the registry cache with this command:

reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\EnterpriseMgmt" /f

Restart windows and run again the evaluation with this command:

cmd /c ClipESUConsumer.exe -evaluateEligibility

reg.exe query "HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\ConsumerESU"
Scott Dickson 25 Reputation points

2026-06-27T13:15:46.92+00:00

I got an "ERROR: Access is denied" when I tried the reg delete command.
Scott Dickson 25 Reputation points

2026-06-27T13:45:09.9733333+00:00

I went into RegEdit and deleted the FFFF...folder from the Registry and the Task Scheduler, including the ENterpriseMgmt folder. I got the results you stated in your first post and the Enroll Now button appeared. Thank you!
Alvise Cervellati 6,630 Reputation points Independent Advisor

2026-06-27T15:31:25.11+00:00

If all is resolved, feel free to mark the answer for this thread. Otherwise, please let me know if there's anything else I can help you with.

Elvis

Answer 1

Steve Wilkinson 0

I don't even see the chance to use ESU. i really want to get it done, but no choice and my system is good enough for 11, so

use of ESU should be fine.

Steve

0 comments