Hotpatching now enabled by default for new Windows quality update policies
Newly created Windows quality update policies now have hotpatch updates enabled by default to streamline policy creation. When will this happen: This feature is now available for all Windows Autopatch users. How this will affect your organization: Organizations using Windows Autopatch will benefit from faster security compliance and reduced downtime for devices running supported Windows editions. What you need to do to prepare: Create your new Windows Autopatch quality update policies today, with hotpatch enabled by default, to ensure your organization starts receiving hotpatches as early as August 2025. For new policies, hotpatch updates will be enabled by default. Just review and deploy them as usual. To create a new quality update policy, follow the steps here: Go to the Microsoft Intune admin center. Navigate to Devices > Windows updates > Quality updates. Select Create, and select Windows quality update policy. Under the Basics section, enter a name for your new policy and select Next. Under the Settings section, “When available, apply without restarting the device (“Hotpatch”) will be set to Allow. Select the appropriate Scope tags or leave as Default. Then, select Next. Assign the devices to the policy and select Next. Review the policy and select Create. To enable hotpatch updates on your existing quality update policies, follow the steps here: Go to the Microsoft Intune admin center. Navigate to Devices > Windows updates > Quality updates. Select the quality update policy you wish to modify. A new screen with its properties will appear. Select Edit in the “Settings” section. Under “Automatic update deployment” settings, locate the option “When available, apply without restarting the device (“hotpatch”).” Toggle it to Allow. Additional information: Learn about hotpatch updates for Windows 11. Learn how to enroll devices to receive hotpatch updates. Read Windows Autopatch documentation. Message ID: MC1107364
The post Hotpatching now enabled by default for new Windows quality update policies appeared first on M365 Admin.
Published on:
Learn moreWe can help you with Hotpatching now enabled by default for new Windows quality update policies
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Microsoft Entra ID: Risk-based anti-bot verification (CAPTCHA) for SMS and voice multi-factor authentication
Starting mid-November 2026, Microsoft Entra ID will add risk-based CAPTCHA verification for SMS and voice MFA to prevent automated fraud. Some...
[Outlook for iOS and Android] Copilot Chat in Outlook UX improvements
Copilot Chat in Outlook for iOS and Android is being updated with a refreshed, consistent design across Microsoft 365 apps, improved chat inte...
Microsoft Word: Retirement of legacy compatibility settings
Microsoft Word will retire legacy compatibility settings for documents in Compatibility Mode starting December 2026 (Windows) and early 2027 (...
Power Platform – Information regarding the end of support for SharePoint temporary authentication URLs
Starting April 1, 2027, SharePoint temporary authentication URLs will be retired. Power Apps and Automate functionality that relies on these U...
Windows Office Hours: November 19, 2026
If you are an IT admin with questions about managing and updating Windows, we want to help. Every third Thursday of the month, we host a live ...
Scheduled prompts in Microsoft 365 Copilot are moving to native Copilot scheduling and the Tasks view
Microsoft 365 Copilot is moving scheduled prompts from Power Platform to native Copilot scheduling, enabling automatic execution of one-time o...
Prevent issues with NetApp SMB shares: Learn about new Windows Server security requirements
Microsoft introduced additional security requirements for LDAP authentication on Active Directory domain controllers starting with the October...
60-day reminder: Hardening changes for ReFS volumes on removable media
Microsoft is making hardening changes to the Resilient File System (ReFS). The changes improve the security posture of Windows by adding visib...
Microsoft 365 Copilot: Copilot Workspaces is replacing standalone agent selection with agentic chat
Microsoft 365 Copilot Workspaces will replace standalone agent selection (Researcher, Analyst, Designer) with an agentic chat that applies ski...
Microsoft Teams: Updated recording and transcript access setting behavior for town halls and webinars
Microsoft Teams is updating the “Who has access to the recording or transcript” option for Events App town halls and webinars. It ...