ReleaseWindows Autopatch
Microsoft Enables Windows Hotpatch by Default for Eligible Intune Devices
Starting with the May 2026 security update, Windows Autopatch enables hotpatch security updates by default for eligible Intune-managed (and Microsoft Graph) devices - applying monthly fixes without a restart. Tenant opt-out controls arrived April 1, 2026, with a grace period to May 11.