Windows Autopatch to enable hotpatch security updates by default

As detailed in The Register, Microsoft is set to enable hotpatch security updates by default for Windows Autopatch users starting May 2026. This change aims to deliver security patches more rapidly without requiring immediate system reboots.

The hotpatch feature, which allows security updates to be installed and take effect without a restart, will become the default for devices meeting specific prerequisites, including those running Windows 11 version 24H2 or later and having the April 2026 security update installed. While an initial baseline update will still necessitate a reboot, subsequent hotpatches will install silently.

Windows Autopatch manages these rollouts through testing rings, progressively deploying updates and allowing for halts or reversals if issues arise. Existing update policies, such as deferrals and ring settings, will remain respected. Administrators concerned about control can opt out at the tenant or device group level, though the compressed timeline for this change has drawn criticism.

Source: The Register