Hotpatching goes default in Windows Autopatch
Briefly

Hotpatching goes default in Windows Autopatch
"The feature installs security updates without requiring a restart, meaning changes take effect immediately. The process does require one baseline update with a restart to kick things off. However, after that, hotpatch updates install silently, with no reboot needed. That said, every quarterly baseline update still demands a restart."
"Windows Autopatch manages the rollout of updates across an organization. It uses "testing rings" - sample device groups - to roll out updates progressively and halt or reverse them if problems emerge."
"Enabling hotpatch by default from May 2026 won't override existing policies. Microsoft states that "Windows Autopatch respects your configuration of quality update policies," meaning update deferrals and ring settings still apply."
Microsoft is making hotpatch security updates the default setting for Windows Autopatch beginning May 2026, with opt-out controls available from April 1. Hotpatch updates install security patches without requiring system restarts, allowing changes to take effect immediately, though an initial baseline update with a restart is needed. Windows Autopatch manages organizational update rollouts using testing rings to progressively deploy updates and halt them if problems occur. The change respects existing quality update policies, deferrals, and ring settings. Devices running Windows 11 24H2 or later with eligible licenses will automatically receive hotpatch updates. Administrators can opt out at the tenant level or via group policies if they need more time or prefer traditional patching methods.
Read at Theregister
Unable to calculate read time
[
|
]