Edit

Share via


What is Windows Autopatch?

Important

In April 2025, Windows Autopatch removed feature activation and made Windows Autopatch features available support to Business Premium and A3+ licenses. These changes are rolling out over the next several weeks. If your experience looks different from the documentation, you didn’t receive the changes yet. Review Prerequisites and Features and capabilities to understand licensing and feature entitlement.

Windows Autopatch is a cloud service that automates Windows, Microsoft 365 Apps for enterprise, Microsoft Edge, and Microsoft Teams updates to improve security and productivity across your organization.

Unique to Windows Autopatch

Rather than maintaining complex digital infrastructure, businesses want to focus on what makes them unique and successful. Windows Autopatch offers a solution to some of the challenges facing businesses and their people today:

  • Close the security gap: Windows Autopatch keeps Microsoft Windows current, there are fewer vulnerabilities and threats to your devices.
  • Close the productivity gap: Windows Autopatch adopts features as they're made available. End users get the latest tools to amplify their collaboration and work.
  • Optimize your IT admin resources: Windows Autopatch automates routine endpoint updates. IT pros have more time to create value.
  • On-premises infrastructure: Transitioning to the world of software as a service (SaaS) allows you to minimize your investment in on-premises hardware since updates are delivered from the cloud.
  • Onboard new services: Windows Autopatch makes it easy to enroll and minimizes the time required from your IT Admins to get started.
  • Minimize end user disruption: Windows Autopatch releases updates in sequential deployment rings, and responding to reliability and compatibility signals, user disruptions due to updates are minimized.

Windows Autopatch helps you minimize the involvement of your scarce IT resources in the planning and deployment of updates for Windows, Microsoft 365 Apps, Microsoft Edge, or Teams. Windows Autopatch uses careful rollout sequences and communicates with you throughout the release so that IT Admins can focus on other activities and tasks.

Features and capabilities

The goal of Windows Autopatch is to deliver software updates to registered devices; the service frees up IT and minimizes disruptions to your end users. Once a device is registered with the service, you have access to the following features through the Microsoft Intune admin center:

Features included with Business Premium, A3+, E3+ and F3 licenses

Features included with Business Premium, A3+, E3+ and F3 licenses Description
Update rings You can manage Update rings for Windows 10 and later devices with Windows Autopatch. For more information, see Manage Update rings.
Autopatch groups You can manage update deployment based on your audience.

An Autopatch group is a logical container or unit that groups several Microsoft Entra groups, and software update policies, such as Update rings policy for Windows 10 and later and feature updates policy for Windows 10 and later policies.

For more information about workloads supported by Autopatch groups, see Software update workloads.

Windows quality updates With Windows Autopatch, you can manage Windows quality update profiles for Windows 10 and later devices. You can expedite a specific Windows quality update using targeted policies. Windows Autopatch:
Hotpatch updates Install Monthly B release security updates without requiring you to restart the device.
Windows feature updates and Multi-phase release policies with feature updates Windows Autopatch provides tools to assist with the controlled roll out of annual Windows feature updates. With multi-phase release policies, you can create customizable feature update deployments using multiple phases for your existing Autopatch groups. These phased releases can be tailored to meet the unique needs of your organization.
Driver and firmware updates You can manage and control your driver and firmware updates with Windows Autopatch. You can:
  • Choose to receive driver and firmware updates automatically, or self-manage the deployment
  • Control the flow of all drivers to an Autopatch group or rings within an Autopatch group
  • Control the flow of a specific driver or firmware across your entire tenant via approvals
  • Approve and deploy other drivers and firmware that previously couldn’t be centrally managed
Microsoft 365 Apps for enterprise updates Windows Autopatch aims to keep at least 90% of eligible devices on a supported version of the Monthly Enterprise Channel (MEC).
Microsoft Edge updates Windows Autopatch configures eligible devices to benefit from Microsoft Edge's progressive rollouts on the Stable channel.
Microsoft Teams updates Windows Autopatch allows eligible devices to benefit from the standard automatic update channel.
Intune reports Use Intune reports to monitor the health and activity of endpoints in your organization.
Hotpatch quality update report Hotpatch quality update report provides a per policy level view of the current update statuses for all devices that receive Hotpatch updates.
Enhanced Windows quality and feature update reports and device alerts Using Windows quality and feature update reports, you can monitor and remediate managed devices that are Not up to Date and resolve any device alerts to bring managed devices back into compliance.

Features included with E3+ and F3 licenses only

In addition to the features listed in the previous table, if you have Windows 10/11 Enterprise E3 or E5 (included in Microsoft 365 F3, E3, or E5), you have access to the following through the Microsoft Intune admin center:

Feature included with E3+ and F3 licenses only Description
Submit support requests with the Windows Autopatch Service Engineering Team You can submit, manage, and edit support requests.

Communications

To stay informed of upcoming changes, including new and changed features, planned maintenance, release and status communications, or other important announcements, navigate to Microsoft 365 admin center > Message center.

Accessibility

Microsoft remains committed to the security of your data and the accessibility of our services. For more information, see the Microsoft Trust Center and the Office Accessibility Center.

Have feedback or would like to start a discussion?

You can provide feedback or start a discussion in our Windows Autopatch Tech Community.