Windows 10 22H2 — ESU prep package (KB5126256) stuck on "Pending install"

edwar leo 0 Reputation points
2026-09-09T11:44:24.0066667+00:00

User's image

I'm running Windows 10 Version 22H2 (x64) and Windows Update is showing that my device is no longer receiving security updates. Two items are listed as "Pending install" and won't complete:

  • 2026-09 Extended Security Updates (ESU) Licensing Preparation Package for Windows 10 Version 22H2 for x64-based systems (KB5126256)
  • Windows Malicious Software Removal Tool x64 - v5.145 (KB890830)

Clicking "Install now" doesn't seem to resolve it the updates stay pending. I also see the "Enroll in Extended Security Updates" option on the same page.

What I've tried so far: [add anything you've already attempted, e.g. restarting, running Windows Update troubleshooter, checking disk space]

Could someone help me understand:

  1. Why these updates are stuck on "Pending install"
  2. Whether I need to complete ESU enrollment before these will install successfully
  3. Any steps to get Windows Update fully working again

Thanks in advance.I'm running Windows 10 Version 22H2 (x64) and Windows Update is showing that my device is no longer receiving security updates. Two items are listed as "Pending install" and won't complete:

  • 2026-09 Extended Security Updates (ESU) Licensing Preparation Package for Windows 10 Version 22H2 for x64-based systems (KB5126256)
  • Windows Malicious Software Removal Tool x64 - v5.145 (KB890830)

Clicking "Install now" doesn't seem to resolve it — the updates stay pending. I also see the "Enroll in Extended Security Updates" option on the same page.

What I've tried so far: [add anything you've already attempted, e.g. restarting, running Windows Update troubleshooter, checking disk space]

Could someone help me understand:

  1. Why these updates are stuck on "Pending install"
  2. Whether I need to complete ESU enrollment before these will install successfully
  3. Any steps to get Windows Update fully working again

Thanks in advance.

Windows development | Windows Driver Kit (WDK)

1 answer

Sort by: Most helpful
Most helpful Newest Oldest

  1. AI answer

    2026-09-09T11:44:50.6566667+00:00

    KB5126256 being listed is expected on Windows 10 22H2 after end of support. It is a licensing prerequisite for Windows 10 ESU enrollment, not the enrollment itself, and it does not provide ongoing security updates by itself.

    For this package to install successfully, the device must already have:

    1. Windows 10, version 22H2
    2. A security update released on or after October 14, 2025 installed
    3. Then KB5126256 installed after that security update

    Also, KB5126256 does not enroll the device in ESU. After it is installed, the device still must complete ESU enrollment to receive eligible security updates.

    Based on the documented behavior, the clearest path is:

    1. Open Settings > Update & Security > Windows Update.
    2. Select Check for updates.
    3. Make sure the device installs a Windows 10 security update released on or after October 14, 2025.
    4. Let Windows Update install KB5126256 afterward. This package is downloaded and installed automatically from Windows Update when the required security update is already installed.
    5. Restart the device. KB5126256 is documented to restart the device automatically after installation.
    6. After KB5126256 is installed, complete the Enroll in Extended Security Updates process. Installing KB5126256 alone does not activate ESU coverage.

    If KB5126256 still does not move past pending state:

    1. Confirm the device is really on Windows 10 22H2 x64.
    2. If trying a standalone installer, make sure the package matches the correct edition and architecture. A mismatched package can show as not applicable.
    3. If Windows Update does not install it automatically, use the Microsoft Update Catalog package for KB5126256.
    4. If installation still fails, collect C:\Windows\Logs\CBS\CBS.log and contact Microsoft Support.

    About the “device is no longer receiving security updates” message: that message can appear because Windows 10 support ended on October 14, 2025. ESU-enrolled devices continue to receive eligible security updates, and there was also a known issue where an incorrect end-of-support message could appear; that issue was resolved in a later update.

    The context does not provide a documented cause for KB890830 specifically remaining pending, so the supported guidance here is to first get the required post-October 14, 2025 security update installed, then KB5126256, then complete ESU enrollment.

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

    2 people found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.