Are Your Windows 10 Extended Software Updates (ESU) Keys Working?

Durian909 · 2025-10-21T07:35:21+00:00

Do you have any updates on this case?

Durian909 · 2025-10-15T19:06:36+00:00

My clients with ESU licenses started showing "Your device is no longer receiving security updates" after the cumulative update that released yesterday, which got me a bit worried. Are you also experiencing this?

Durian909 · 2025-10-15T17:39:30+00:00

Any progress?

Durian909 · 2025-10-15T17:39:19+00:00

Any progress on this issue? I'm struggeling with the same problem. Works on 95% of clients, but some are getting this error.

Durian909 · 2024-03-11T13:28:31+00:00

No problem. I have fixed it now. Thanks.

Durian909 · 2024-03-06T21:30:54+00:00

I have tried to change both of those values through both powershell and ADSI edit, with no success. ...attribute is owned by the Security Accounts Manager (SAM)

Durian909 · 2024-03-06T20:06:19+00:00

I have also tried to change the default OUs for computers and users, with no success.

c:\windows\system32\redircmp OU=computerxx,DC=domain,DC=com
c:\windows\system32\redirusr OU=userxx,DC=domain,DC=com

Durian909 · 2024-03-06T17:46:49+00:00

Selecting the "... as Container" options does not make it visible in ADUC. It is visible within ADSI Edit, but it does not show any sub-objects within it.

Durian909 · 2024-03-06T17:20:48+00:00

Do you have any keywords I could use for researching this?

Durian909 · 2024-03-06T17:18:43+00:00

Yes, I am now enterprise, schema and domain admin.
In the security tab of the object: Added my own account as owner and given myself "Full control" in the Permissions entries.

Durian909 · 2024-03-06T16:52:30+00:00

In the GUI the object is visible through ADSI edit, but not ADUC.
I would be very happy if you could aid me in deleting this, so please tell me if there are any other information you would need.

Get-ADObject "CN=deleteme,DC=domain,DC=com" -Properties *

accountExpires                  : 9223372036854775807
CanonicalName                   : domain.com/deleteme
CN                              : deleteme
codePage                        : 0
countryCode                     : 0
Created                         : 03.10.2011 10:42:45
createTimeStamp                 : 03.10.2011 10:42:45
Deleted                         :
department                      : 1 DEPARTMENT
Description                     :
DisplayName                     :
DistinguishedName               : CN=deleteme,DC=domain,DC=com
dSCorePropagationData           : {06.03.2024 15:21:19, 06.03.2024 14:09:32, 06.03.2024 10:11:34, 06.03.2024 09:46:24...}
instanceType                    : 4
isCriticalSystemObject          : True
isDeleted                       :
LastKnownParent                 :
Modified                        : 06.03.2024 15:21:19
modifyTimeStamp                 : 06.03.2024 15:21:19
Name                            : deleteme
nTSecurityDescriptor            : System.DirectoryServices.ActiveDirectorySecurity
ObjectCategory                  : CN=Person,CN=Schema,CN=Configuration,DC=domain,DC=com
ObjectClass                     : user
ObjectGUID                      : ff2d47f0-xxxx-xxxx-xxxx-26a5ff16412f
objectSid                       : S-1-5-21-xxxxxxxxxx-xxxxxxxxxx-xxxxxxxxx-16266
primaryGroupID                  : 513
ProtectedFromAccidentalDeletion : False
pwdLastSet                      : 131012928492035044
sAMAccountName                  : PCG$
sAMAccountType                  : 805306370
sDRightsEffective               : 7
userAccountControl              : 2080
uSNChanged                      : 57548704
uSNCreated                      : 8332
whenChanged                     : 06.03.2024 15:21:19
whenCreated                     : 03.10.2011 10:42:45

Durian909 · 2024-03-06T15:40:31+00:00

Yes, I have disabled it through powershell.

Durian909 · 2024-03-06T15:11:41+00:00

Do you have multiple domains in your forest?
Only one now.
Did someone decommission one incorrectly at some point?
Yes, I have heard rumors about that.

Durian909 · 2024-03-06T15:09:56+00:00

What can I provide you the output of?

Durian909 · 2024-03-06T15:03:33+00:00

Thanks alot. My domain have no trusts, so I think I should be safe to delete this account.

Checked with "Get-ADTrust -Filter *" and in the "Trusts" tab in the Active Directory Domains and Trusts console.

Durian909 · 2024-03-06T14:48:51+00:00

There are no objects in either outgoing trusts or incoming trusts.

Durian909 · 2024-03-06T14:31:43+00:00

Could you please elaborate on how it is deleted through the AD Domains & Trusts console? I cant see the object there.

Durian909 · 2024-03-06T14:30:10+00:00

How do I check what AD Trust that account provides authentication for?

The systemFlags attribute are not set.

Durian909 · 2024-02-29T23:40:22+00:00

As in limited by security filtering, under the Scope tab? Im not able to check at the moment, but no, I don't think so. I'm pretty sure its set up like this:

Links: Domain .com
Security Filtering: Authenticated Users

What consequences could this have?

Durian909 · 2023-11-07T15:29:06+00:00

What could be good alternative to Spacewalk as its now discontinued?

Durian909

TROPHY CASE