Microsoft Enables Autopatch by Default for Windows Updates
Microsoft activated Windows Autopatch as the default setting for enterprise customers on March 10, 2026. The service automatically deploys security updates across managed Windows devices without requiring manual administrator intervention.
The change affects organizations using Microsoft Intune and System Center Configuration Manager to manage their Windows fleets. Help Net Security confirmed the rollout began Tuesday morning across Microsoft's enterprise management platforms.
Enterprise Customers See Automatic Update Management
Organizations with Windows 11 devices enrolled in Microsoft's device management services will see Autopatch enabled automatically. The service targets businesses running Windows 11 versions 23H2, 24H2, and 25H2 through Intune or Configuration Manager.
IT administrators can still override the default setting and maintain manual control over update deployment schedules. Microsoft designed the feature to reduce the administrative burden on enterprise IT teams while maintaining security compliance.
How Windows Autopatch Works for IT Teams
Autopatch creates deployment rings that gradually roll out security updates across an organization's devices. The service monitors update success rates and can pause deployments if issues arise during the rollout process.
Administrators can access Autopatch controls through the Microsoft Intune admin center or Configuration Manager console. The service provides detailed reporting on update status and device compliance across the managed fleet.
