Intune · Product news
Configure Quality Update approvals and policies for Quick Machine Recovery (QMR)
Windows Autopatch currently offers limited control over the deployment of quality updates.
What changed
Today, the expedite mechanism focuses on deploying the latest security update and doesn't let admins select specific quality update releases or apply different deployment schedules, which can limit compliance, validation, and operational planning scenarios. Soon, Windows Autopatch will let you explicitly approve, auto-approve, reject, and schedule quality updates by update type, using the same approval infrastructure used for driver updates.
Why it matters
The change can alter security posture, authentication, exposure or compatibility and therefore needs an owned validation path.
Known limitations
- Availability, prerequisites and rollout scope remain authoritative in the linked Microsoft documentation.
Now check
- Confirm Windows Autopatch and Quick Machine Recovery prerequisites
- Pilot approve, reject and schedule actions in a test ring
- Monitor update compliance and recovery behavior before broad rollout