MC1107364 – M365 Change Digest

One-line summary

New Windows quality update policies in Autopatch now enable hotpatch by default, improving security compliance and reducing downtime for supported devices.

Similar updates

Details

Body (from Message Center)

Newly created Windows quality update policies now have hotpatch updates enabled by default to streamline policy creation.

When will this happen:

This feature is now available for all Windows Autopatch users.

How this will affect your organization:

Organizations using Windows Autopatch will benefit from faster security compliance and reduced downtime for devices running supported Windows editions.

What you need to do to prepare:

Create your new Windows Autopatch quality update policies today, with hotpatch enabled by default, to ensure your organization starts receiving hotpatches as early as August 2025. For new policies, hotpatch updates will be enabled by default. Just review and deploy them as usual.

To create a new quality update policy, follow the steps here:

Go to the Microsoft Intune admin center.
Navigate to Devices > Windows updates > Quality updates.
Select Create, and select Windows quality update policy.
Under the Basics section, enter a name for your new policy and select Next.
Under the Settings section, "When available, apply without restarting the device ("Hotpatch") will be set to Allow.
Select the appropriate Scope tags or leave as Default. Then, select Next.
Assign the devices to the policy and select Next.
Review the policy and select Create.

To enable hotpatch updates on your existing quality update policies, follow the steps here:

Go to the Microsoft Intune admin center.
Navigate to Devices > Windows updates > Quality updates.
Select the quality update policy you wish to modify. A new screen with its properties will appear.
Select Edit in the “Settings” section.
Under “Automatic update deployment” settings, locate the option "When available, apply without restarting the device ("hotpatch")."
Toggle it to Allow.

Additional information:

Learn about hotpatch updates for Windows 11.
Learn how to enroll devices to receive hotpatch updates.
Read Windows Autopatch documentation.

Raw JSON (for debugging)

Expand/collapse the full payload below.

Show/hide raw

{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Review and deploy new quality update policies",
      "Enable hotpatch on existing policies if desired"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "New Windows quality update policies in Autopatch now enable hotpatch by default, improving security compliance and reducing downtime for supported devices.",
    "ai_topics": [
      "Windows",
      "Intune"
    ],
    "category": "stayInformed",
    "details_map": {},
    "id": "MC1107364",
    "importance": 0,
    "is_major_change": false,
    "last_modified": "2025-07-01T16:59:27Z",
    "ms_products": [
      "Windows"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Windows"
    ],
    "severity": "normal",
    "tags": [
      "Admin impact"
    ],
    "title": "Hotpatching now enabled by default for new Windows quality update policies"
  }
}