Windows 10 22H2 — ESU prep package (KB5126256) stuck on "Pending install"

edwar leo 0 Reputation points
2026-09-09T11:44:24.0066667+00:00

User's image

I'm running Windows 10 Version 22H2 (x64) and Windows Update is showing that my device is no longer receiving security updates. Two items are listed as "Pending install" and won't complete:

  • 2026-09 Extended Security Updates (ESU) Licensing Preparation Package for Windows 10 Version 22H2 for x64-based systems (KB5126256)
  • Windows Malicious Software Removal Tool x64 - v5.145 (KB890830)

Clicking "Install now" doesn't seem to resolve it the updates stay pending. I also see the "Enroll in Extended Security Updates" option on the same page.

What I've tried so far: [add anything you've already attempted, e.g. restarting, running Windows Update troubleshooter, checking disk space]

Could someone help me understand:

  1. Why these updates are stuck on "Pending install"
  2. Whether I need to complete ESU enrollment before these will install successfully
  3. Any steps to get Windows Update fully working again

Thanks in advance.I'm running Windows 10 Version 22H2 (x64) and Windows Update is showing that my device is no longer receiving security updates. Two items are listed as "Pending install" and won't complete:

  • 2026-09 Extended Security Updates (ESU) Licensing Preparation Package for Windows 10 Version 22H2 for x64-based systems (KB5126256)
  • Windows Malicious Software Removal Tool x64 - v5.145 (KB890830)

Clicking "Install now" doesn't seem to resolve it — the updates stay pending. I also see the "Enroll in Extended Security Updates" option on the same page.

What I've tried so far: [add anything you've already attempted, e.g. restarting, running Windows Update troubleshooter, checking disk space]

Could someone help me understand:

  1. Why these updates are stuck on "Pending install"
  2. Whether I need to complete ESU enrollment before these will install successfully
  3. Any steps to get Windows Update fully working again

Thanks in advance.

Windows for home | Windows 10 | Windows update

2 answers

Sort by: Oldest
Most helpful Newest Oldest

  1. AI answer

    2026-09-09T11:44:50.6566667+00:00

    KB5126256 being listed is expected on Windows 10 22H2 after end of support. It is a licensing prerequisite for Windows 10 ESU enrollment, not the enrollment itself, and it does not provide ongoing security updates by itself.

    For this package to install successfully, the device must already have:

    1. Windows 10, version 22H2
    2. A security update released on or after October 14, 2025 installed
    3. Then KB5126256 installed after that security update

    Also, KB5126256 does not enroll the device in ESU. After it is installed, the device still must complete ESU enrollment to receive eligible security updates.

    Based on the documented behavior, the clearest path is:

    1. Open Settings > Update & Security > Windows Update.
    2. Select Check for updates.
    3. Make sure the device installs a Windows 10 security update released on or after October 14, 2025.
    4. Let Windows Update install KB5126256 afterward. This package is downloaded and installed automatically from Windows Update when the required security update is already installed.
    5. Restart the device. KB5126256 is documented to restart the device automatically after installation.
    6. After KB5126256 is installed, complete the Enroll in Extended Security Updates process. Installing KB5126256 alone does not activate ESU coverage.

    If KB5126256 still does not move past pending state:

    1. Confirm the device is really on Windows 10 22H2 x64.
    2. If trying a standalone installer, make sure the package matches the correct edition and architecture. A mismatched package can show as not applicable.
    3. If Windows Update does not install it automatically, use the Microsoft Update Catalog package for KB5126256.
    4. If installation still fails, collect C:\Windows\Logs\CBS\CBS.log and contact Microsoft Support.

    About the “device is no longer receiving security updates” message: that message can appear because Windows 10 support ended on October 14, 2025. ESU-enrolled devices continue to receive eligible security updates, and there was also a known issue where an incorrect end-of-support message could appear; that issue was resolved in a later update.

    The context does not provide a documented cause for KB890830 specifically remaining pending, so the supported guidance here is to first get the required post-October 14, 2025 security update installed, then KB5126256, then complete ESU enrollment.

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    2 people found this answer helpful.
  2. Carl-L 21,400 Reputation points Microsoft External Staff Moderator
    2026-09-11T07:27:32.05+00:00

    Hello edwar leo,

    Welcome to Microsoft Q&A forum.

    May I know if the AI assistant suggestion works for you? It is right, you will need complete the enrollment in ESU program to download ESU updates.

    If you still can't update after enrolling, please try to go to the Microsoft Update Catalog and download the KB number and install it manually.

    I'm waiting for your reply.

    Was this answer helpful?

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.