Microsoft confirms Windows hotpatch devices must restart for September and October 2026 updates, with regular hotpatching resuming in November.
Microsoft announced the availability of hotpatch updates for Windows 11. For those unaware, this allows enterprise PCs enrolled in this program to install a baseline update through a restart once every quarter and not have to restart to apply security updates for the next couple of months. It's a neat little feature that ensures minimal disruption of business processes and workflows. However, Microsoft has now announced that your hotpatch PC will, in fact, restart to apply security updates for the next couple of months.
In Message Center advisory MC1462918, Microsoft has confirmed to IT admins that a restart will be necessary when applying the security updates for September 2026, unfortunately. This is because this update contains some security features for components that necessitate a restart.
This affects all enterprise devices enrolled via Windows Autopatch, Windows 11 hotpatch, and Windows Server hotpatch. After these PCs restart following the application of security updates in September 2026, they will be continue to remain enrolled for future hotpatch updates. No configuration changes are being made to hotpatching itself. And, of course, devices not enrolled in hotpatching are unaffected, because they require a restart anyway, so they won't notice anything different.
There is another catch though. While September 2026 mandates a restart due to the requirements of the security update, it is important to keep in mind that October 2026 will force a restart too, since it is the quarterly baseline release which necessitates a restart anyway.
What this means is that "proper" hotpatch updates will begin in November 2026 next. Microsoft has urged IT admins to inform affected users about this unexpected behavior, review maintenance windows, and actively monitor the deployment of the update once it begins rolling out. It is slightly unfortunate that hotpatch PCs will have to force-restart for the next couple of months, but it hopefully won't result in major disruptions to business activities.
source
