Win 10 ESU report

[mcclureco]

Is there a report that can be run to check if a Windows 10 computer has the new ESU subscription installed and activated?

[AlinBalan]

I also need a report for this ESU activation (case 00650147)

i need somehow to see it in the cloud version where there are connected multiple local LS servers

[jberwald · Accepted solution]

Here is a script for you to run on your machines. I am going to run it at the same time as I activate the ESU key. It will create a custom registry entry with the information you need. 

POWERSHELL:

# Detect ESU activation and write registry flag for Lansweeper
$ESU = Get-CimInstance -ClassName SoftwareLicensingProduct |
       Where-Object { $_.LicenseStatus -eq 1 -and $_.Name -like "*ESU*" }

if ($ESU) {
    # Create custom registry path
    $RegPath = "HKLM:\Software\Company\ESUStatus"
    if (-not (Test-Path $RegPath)) {
        New-Item -Path $RegPath -Force | Out-Null
    }

    # Write ESU details
    Set-ItemProperty -Path $RegPath -Name "Activated" -Value 1 -Type DWord
    Set-ItemProperty -Path $RegPath -Name "ESUName" -Value $ESU.Name
}
else {
    # Optional: mark as not activated
    $RegPath = "HKLM:\Software\Company\ESUStatus"
    if (-not (Test-Path $RegPath)) {
        New-Item -Path $RegPath -Force | Out-Null
    }
    Set-ItemProperty -Path $RegPath -Name "Activated" -Value 0 -Type DWord
}

[Katgroup]

This is a good workaround. We have submitted a feature request to our product team to add this to WMI scanning. To add weight to the request, you can open a case, and we will collect some additional feedback:

• https://community.lansweeper.com/t5/manage-cases/bd-p/manage-cases?pageView=case-create

[DavidPK]

HI

In classic, use custom registry scanning

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ESU. The ConsumerESU key contains the ESUEligibility and ESUEligibilityResult values, while the SoftwareProtectionPlatform key contains the EnableESUSubscriptionCheck value.

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\ESU
  • EnableESUSubscriptionCheck: Should be set to 1 for ESU to be active.
  • Win10CommercialW365ESUEligible: Should be 1 for Windows 365 ESU eligibility.

[jberwald]

Sorry DavidPK,

Those reg keys are not authoritative. The only documented and supported programmatic approach according to Microsoft is checking ESU with WMI. 

Microsoft does not publish any official registry-based method for confirming ESU activation in enterprise environments. 

ESU activation is handled by the Software Protection Platform which stores license data in encrypted tokens not in a simple registry Dword. All of Microsoft's official deployment guides use WMI or slmgr.vbs never registry checks. 

Please help us identify a way for us to report on ESU for Enterprise windows 10 in lansweeper. 

[Katgroup]

The registry keys are correct, but only applicable to Windows 365 ESU:

• Enable Windows 10 Extended Security Updates (ESU) for clients accessing cloud and virtual machines |...