Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Microsoft’s Windows 11 hotpatch updates let eligible, managed devices install certain monthly security fixes without restarting. Hotpatch is not available to every Windows 11 PC: support depends on Windows version, licensing, security configuration and Microsoft Intune/Windows Autopatch deployment. Devices that do not qualify continue to receive the normal cumulative update, which requires a restart.

What are hotpatch updates in Windows 11?

Hotpatch is an extension of Windows Update for organizationally managed Windows 11 devices. Microsoft describes a hotpatch as a “Monthly B release security update” that installs and takes effect without requiring a device restart. It contains security fixes, while the quarterly baseline update also carries cumulative features and enhancements and does require a restart.

The documented client-management route is Windows Autopatch through Microsoft Intune. This is an enterprise servicing capability, not a switch that normally appears in Windows 11 Home or Pro consumer settings.

How the quarterly hotpatch schedule works

Microsoft’s planned cadence uses one restart-requiring baseline month followed by two restart-free hotpatch months in each quarter.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Months Update type What it contains Restart required?
January, April, July, October Baseline Security fixes plus cumulative features and enhancements Yes
February–March, May–June, August–September, November–December Hotpatch Monthly B release security fixes No

Microsoft can add an unscheduled baseline when security conditions require it; that does not necessarily change the later planned cadence. A device that is behind the current baseline may first need the restart-requiring baseline and then receive that month’s hotpatch.

Which Windows 11 PCs qualify?

Eligibility is a combination of operating-system, licensing, management and hardware conditions. Microsoft’s main hotpatch overview says a device generally needs:

Rank #2
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
  • 256 GB SSD of storage.
  • Multitasking is easy with 16GB of RAM
  • Equipped with a blazing fast Core i5 2.00 GHz processor.
  • Windows 11 version 24H2 or later.
  • The latest applicable baseline release.
  • An eligible commercial or education license.
  • Microsoft Intune configured with a Windows quality update policy that enables hotpatch, typically through Windows Autopatch.
  • Virtualization-based Security (VBS) running.

Microsoft’s Windows Autopatch FAQ also documents build-threshold examples and support for x64 systems using AMD or Intel processors. ARM64 devices can be supported, but the Intune configuration guide specifies an additional CHPE requirement. Confirm the current build and ARM64 instructions in Microsoft’s documentation before enrollment.

Licenses listed by Microsoft

The main overview lists Windows 11 Enterprise E3 or E5, Microsoft 365 F3, Windows 11 Education A3 or A5, Microsoft 365 Business Premium and Windows 365 Enterprise. The Autopatch FAQ additionally names Windows 11 Enterprise F3. Because those Microsoft pages do not show identical license lists, do not assume Enterprise F3 is entitled without checking the current licensing terms for your tenant.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3

Home and Pro editions are not presented by Microsoft as universally eligible. A Windows 11 PC can therefore be fully up to date yet remain on standard cumulative updates because its edition, license, VBS state or management configuration does not qualify.

How to enable hotpatch with Intune

Hotpatch is deployed by policy rather than by a local Windows Update checkbox. Exact portal labels can change, but Microsoft documents this general path:

Rank #4
15.6 Inch Laptop Computer, N4020, 4GB DDR4 RAM, 128GB eMMC,with Windows 11
  • EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
  • 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
  • RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
  • ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
  • LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
  1. Meet the Windows 11 24H2-or-later, baseline, license, VBS and hardware prerequisites.
  2. Enroll the devices in Microsoft Intune and use Windows Autopatch for the documented Windows client management path.
  3. In the Intune admin center, open Devices, then Windows, and go to Windows updates or the Windows quality update policy area.
  4. Create or edit a Windows quality update policy and enable the hotpatch option where it is offered. You can set a tenant default or configure hotpatch in an individual quality update policy.
  5. Assign the policy to the intended device or user groups, then allow the devices to check in and evaluate eligibility.
  6. Review the existing update-ring settings. Deferrals, active hours and deadlines still influence when updates are offered and enforced.

Microsoft’s configuration reference is Use Hotpatch With Windows Quality Updates. The broader servicing behavior is documented in Hotpatch updates.

Hotpatch versus a standard monthly update

Characteristic Hotpatch Standard cumulative update
Update scope Monthly security fixes Security fixes plus cumulative features and enhancements
Restart Not required to apply the hotpatch Required
Availability Only eligible, correctly configured managed devices Normal Windows Update path for supported devices
Cadence Two months after each quarterly baseline Regular cumulative-update servicing, subject to Microsoft’s release schedule
Administration Intune and Windows Autopatch policy Windows Update management, including existing rings and policies
Recovery Uninstalling requires a restart; automatic rollback is unsupported Uses the normal Windows update removal and recovery options
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Does hotpatch eliminate all Windows 11 restarts?

No. The baseline month still requires a restart. An operating-system feature upgrade can interrupt the hotpatch cycle depending on when it occurs. Removing a hotpatch also requires a restart, and Microsoft does not support automatic rollback for hotpatch packages.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
Windows 11 Laptop with i3 Processor 15.6" Work Laptop for College Students
  • 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
  • Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
  • 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
  • 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
  • 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop

Upgrading Windows during a baseline month keeps the device on the hotpatch cycle. Upgrading during a hotpatch month switches the device to standard updates until the next baseline, so upgrade timing matters for organizations trying to preserve the cadence.

What happens when a device is not eligible?

Windows does not simply stop updating. A device that fails the hotpatch prerequisites receives the latest standard cumulative update (LCU), preserving the ordinary security-update path. If an enrolled device is missing the current baseline, it may receive both that baseline and the applicable hotpatch in the same hotpatch month, with the baseline restart occurring as required.

Practical checks for administrators

  • Confirm the device reports Windows 11 24H2 or later and has the latest baseline.
  • Verify the assigned license against the current Microsoft terms rather than relying on an older entitlement list.
  • Check that VBS is running and that ARM64 devices meet the CHPE configuration requirement.
  • Confirm Intune enrollment, Windows Autopatch participation and assignment of the quality update policy.
  • Review update-ring deferrals, active hours and deadlines if a device is not receiving the expected offer.
  • Plan for the quarterly baseline restart and for possible restart requirements after uninstalling a hotpatch.

For eligibility changes, build requirements and current exceptions, consult Microsoft’s Windows Autopatch FAQ alongside the hotpatch overview.

Quick Recap

Bestseller No. 1
Bestseller No. 2
Dell Latitude 5420 14' FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
Dell Latitude 5420 14" FHD Business Laptop Computer, Intel Quad-Core i5-1145G7, 16GB DDR4 RAM, 256GB SSD, Camera, HDMI, Windows 11 Pro (Renewed)
256 GB SSD of storage.; Multitasking is easy with 16GB of RAM; Equipped with a blazing fast Core i5 2.00 GHz processor.
$289.99
Bestseller No. 3
HP 14' HD Laptop, Windows 11, Intel Celeron Dual-Core Processor Up to 2.60GHz, 4GB RAM, 64GB SSD, Webcam, Dale Pink (Renewed)
HP 14" HD Laptop, Windows 11, Intel Celeron Dual-Core Processor Up to 2.60GHz, 4GB RAM, 64GB SSD, Webcam, Dale Pink (Renewed)
14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
$249.99

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.