MC1185309 Low
Windows Autopatch for the US government: How to get started
Summary AI-generated
Windows Autopatch will be available for US government organizations in Microsoft 365 Government starting November 2025, enabling automated update management for GCC devices.
Suggested actions AI-generated
- Review prerequisites for Windows Autopatch
- Create and assign Autopatch groups in Intune
- Configure update policies and schedules
- Enroll devices for hotpatch updates
- Monitor update compliance reports
- Set up role-based access control
- Configure network for Autopatch
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1278941 Broader Windows Autopatch availability to Microsoft 365 Government Community Cloud (GCC)
- MC1242687 Prepare devices for successful updates with Windows Autopatch update readiness
- MC1248388 Plan for Change: Windows Autopatch is enabling hotpatch updates by default
- MC1247859 Windows Autopatch is enabling hotpatch updates by default
- MC1465692 More control for Windows Autopatch updates: quality updates, .NET Framework, and quick machine recovery
Original post from Microsoft
The power of automated Windows update management is coming to government SKUs. This cloud-based service has now been approved to be added to the Azure FedRAMP High Provisional Authorization to Operate. If you manage Government Community Cloud (GCC) devices, this service became part of Microsoft 365 Government this month.
When will this happen:
Windows Autopatch is available to US government organizations starting November 2025.
How this will affect your organization:
This is what Windows Autopatch allows you to accomplish for your GCC devices:
- Control over which content is approved for deployment to which devices
- Automation of a safe rollout process
- Faster security with hotpatching
- Pausing or expediting monthly quality updates or drivers
- Simplified update compliance reporting
- Policy management and reporting through the Microsoft Intune admin center
What you need to do to prepare:
Review additional information for prerequisites and complete details. Here’s one way to get started:
- Go to the Microsoft Intune admin center.
- In the left pane, select Tenant administration and then navigate to Windows Autopatch > Autopatch groups.
- Create a Windows Autopatch group and assign devices, automating a few things:
- Distribute devices for gradual rollout into a set of Microsoft Entra groups.
- Configure a safe rollout schedule using update rings.
- (Optional) Configure content approval using feature and driver update policies.
- (Optional) Configure update settings for Microsoft 365 Apps and Microsoft Edge.
- Enroll devices to receive hotpatch updates, getting them secure faster.
- That’s it! Just monitor the reports to ensure that you’re hitting your update compliance targets.
Additional information:
- Read the announcement at Windows Autopatch for the US government: How to get started.
- Double-check that your devices meet the prerequisites for Windows Autopatch.
- Configure role-based access control to manage access to your organization’s resources.
- Configure your network.