windows-itpro-docs/windows/deployment/windows-autopatch/overview/windows-autopatch-faq.yml

### YamlMime:FAQ
metadata:
  title: Windows Autopatch - Frequently Asked Questions (FAQ)
  description: Answers to frequently asked questions about Windows Autopatch.
  ms.prod: w11
  ms.topic: faq
  ms.date: 07/06/2022
  audience: itpro
  ms.localizationpriority: medium
  manager: dougeby
  author: tiaraquan
  ms.author: tiaraquan
  ms.reviwer: hathind
title: Frequently Asked Questions about Windows Autopatch
summary: This article answers frequently asked questions about Windows Autopatch.
sections:
  - name: General
    questions:
      - question: What Windows versions are supported?
        answer: |
          Windows Autopatch works with all [supported versions of Windows 10 and Windows 11](/windows/release-health/supported-versions-windows-client) Enterprise and Professional editions.
      - question: What is the difference between Windows Update for Business and Windows Autopatch?
        answer: |
          Windows Autopatch is a service that removes the need for organizations to plan and operate the update process. Windows Autopatch moves the burden from your IT to Microsoft. Windows Autopatch uses [Windows Update for Business](/windows/deployment/update/deployment-service-overview) and other service components to update devices. Both are part of Windows Enterprise E3.
      - question: Is Windows 365 for Enterprise supported with Windows Autopatch?
        answer: |
          Windows Autopatch supports Windows 365 for Enterprise. Windows 365 for Business isn't supported.
      - question: Does Windows Autopatch support Windows Education (A3/A5) or Windows Front Line Worker (F3) licensing?
        answer: |
          Autopatch isn't available for 'A' or 'F' series licensing.
      - question: Will Windows Autopatch support local domain join Windows 10?
        answer: | 
          Windows Autopatch doesn't support local (on-premise) domain join. Windows Autopatch supports [Hybrid AD join](/azure/active-directory/devices/concept-azure-ad-join-hybrid) or pure [Azure AD join](/azure/active-directory/devices/concept-azure-ad-join-hybrid).
      - question: Will Windows Autopatch be available for state and local government customers?
        answer: |
          Windows Autopatch is available for all Windows E3 customers using Azure commercial cloud. However, Autopatch isn't currently supported for government cloud (GCC) customers.
      - question: What if I enrolled into Windows Autopatch using the promo code? Will I still have access to the service?
        answer: |
          Yes. For those who used the promo code to access Windows Autopatch during public preview, you'll continue to have access to Windows Autopatch even when the promo code expires. There is no additional action you have to take to continue using Windows Autopatch.
  - name: Requirements
    questions:
      - question: What are the prerequisites for Windows Autopatch?
        answer: |
          - [Supported Windows 10/11 Enterprise and Professional edition versions](/windows/release-health/supported-versions-windows-client)
          - [Azure Active Directory (Azure AD) Premium](/azure/active-directory/fundamentals/active-directory-whatis#what-are-the-azure-ad-licenses)
          - [Hybrid Azure AD-Joined](/azure/active-directory/devices/concept-azure-ad-join-hybrid) or [Azure AD-joined only](/azure/active-directory/devices/concept-azure-ad-join-hybrid)
          - [Microsoft Intune](https://www.microsoft.com/cloud-platform/microsoft-intune)
          Additional pre-requisites for devices managed by Configuration Manager: 
          - [Configuration Manager Co-management requirements](../prepare/windows-autopatch-prerequisites.md#configuration-manager-co-management-requirements)
          - [A supported version of Configuration Manager](/mem/configmgr/core/servers/manage/updates#supported-versions)
          - [Switch workloads for device configuration, Windows Update and Microsoft 365 Apps from Configuration Manager to Intune](/mem/configmgr/comanage/how-to-switch-workloads) (minimum Pilot Intune. Pilot collection must contain the devices you want to register into Autopatch.)
      - question: What are the licensing requirements for Windows Autopatch?
        answer: |
          - Windows Autopatch is included with Window 10/11 Enterprise E3 or higher. For more information, see [More about licenses](../prepare/windows-autopatch-prerequisites.md#more-about-licenses).
          - [Azure AD Premium](/azure/active-directory/fundamentals/active-directory-whatis#what-are-the-azure-ad-licenses) (for Co-management)
          - [Microsoft Intune](/mem/intune/fundamentals/licenses) (includes Configuration Manager 2010 or greater via co-management)
      - question: Are there hardware requirements for Windows Autopatch?
        answer: |
          No, Windows Autopatch doesn't require any specific hardware. However, general hardware requirements for updates are still applicable. For example, to deliver Windows 11 to your Autopatch devices they must meet [specific hardware requirements](/windows/whats-new/windows-11-requirements). Windows devices must be supported by your hardware OEM.
  - name: Device registration
    questions:
      - question: Can Autopatch customers individually approve or deny devices?
        answer: |
          No you can't individually approve or deny devices. Once a device is registered with Windows Autopatch, updates are rolled out to the devices according to its ring assignment. Individual device level control isn't supported.
      - question: Does Autopatch on Windows 365 Cloud PCs have any feature difference from a physical device?
        answer: |
          No, Windows 365 Enterprise Cloud PC's support all features of Windows Autopatch. For more information, see [Virtual devices](/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices#virtual-devices).
      - question: Do my Cloud PCs appear any differently in the Windows Autopatch admin center?
        answer: |
          Cloud PC displays the model as the license type you have provisioned. For more information, see [Virtual devices](/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices#virtual-devices).
      - question: Can I run Autopatch on my Windows 365 Business Workloads?
        answer: |
          No. Autopatch is only available on enterprise workloads. For more information, see [Virtual devices](/windows/deployment/windows-autopatch/deploy/windows-autopatch-register-devices#virtual-devices).
  - name: Update Management
    questions: 
      - question: What systems does Windows Autopatch update?
        answer: |
          - Windows 10/11 quality updates: Windows Autopatch manages all aspects of update rings.
          - Microsoft 365 Apps for enterprise updates: All devices registered for Windows Autopatch will receive updates from the Monthly Enterprise Channel.
          - Microsoft Edge: Windows Autopatch configures eligible devices to benefit from Microsoft Edge's progressive rollouts on the Stable channel and will provide support for issues with Microsoft Edge updates.
          - Microsoft Teams: Windows Autopatch allows eligible devices to benefit from the standard automatic update channels and will provide support for issues with Teams updates.
      - question: What does Windows Autopatch do to ensure updates are done successfully?
        answer: |
          For Windows quality updates, updates are applied to device in the Test ring first. The devices are evaluated, and then rolled out to the First, Fast then Broad rings. There's an evaluation period at each progression. This process is dependent on customer testing and verification of all updates during these rollout stages. The outcome is to ensure that registered devices are always up to date and disruption to business operations is minimized to free up your IT department from that ongoing task.
      - question: What happens if there's an issue with an update?
        answer: |
          Autopatch relies on the following capabilities to help resolve update issues:
          - Pausing and resuming: If Windows Autopatch detects an issue with a Windows quality release, we may decide that it's necessary to pause that release. Once the issue is resolved, the release will be resumed. For more information, see [Pausing and resuming a Windows quality release](../operate/windows-autopatch-wqu-overview.md#pausing-and-resuming-a-release).
          - Rollback: If Windows Autopatch detects issues between versions of Microsoft 365 Apps for enterprise, we might force all devices to roll back to the previous version. For more information, see [Update controls for Microsoft 365 Apps for enterprise](../operate/windows-autopatch-microsoft-365-apps-enterprise.md#update-controls).
      - question: Will Windows quality updates be released more quickly after vulnerabilities are identified, or what is the regular cadence of updates?
        answer: |
          For zero-day threats, Autopatch will have an [expedited release cadence](../operate/windows-autopatch-wqu-overview.md#expedited-releases). For normal updates Autopatch uses a [regular release cadence](../operate/windows-autopatch-wqu-overview.md#windows-quality-update-releases) starting with devices in the Test ring and completing with general rollout to the Broad ring.
      - question: Can customers configure when to move to the next ring or is it controlled by Windows Autopatch?
        answer: |
          The decision of when to move to the next ring is handled by Windows Autopatch; it isn't customer configurable.
      - question: Can you customize the scheduling of an update rollout to only install on certain days and times?
        answer: |
          No, you can't customize update scheduling. However, you can specify [active hours](../operate/windows-autopatch-wqu-end-user-exp.md#servicing-window) to prevent users from updating during business hours.
      - question: Does Autopatch support include and exclude groups, or dynamic groups to define ring membership?
        answer: |
          Windows autopatch doesn't support managing update ring membership using your Azure AD groups. For more information, see [Move devices between rings](../operate/windows-autopatch-update-management.md#moving-devices-between-rings).
      - question: Does Autopatch have two release cadences per update or are there two release cadences per-ring?
        answer: |
          The release cadences are defined based on the update type. For example, a [regular cadence](../operate/windows-autopatch-wqu-overview.md#windows-quality-update-releases) (for a Windows quality update would be a gradual rollout from the Test ring to the Broad ring over 14 days whereas an [expedited release](../operate/windows-autopatch-wqu-overview.md#expedited-releases) would roll out more rapidly.
  - name: Support
    questions:
      - question: What support is available for customers who need help with onboarding to Windows Autopatch?
        answer: |
          The FastTrack Center is the primary mode of support for customers who need assistance from Microsoft to meet the pre-requisites (such as Intune and Azure or Hybrid AD) for onboarding to Windows Autopatch. For more information, see [Microsoft FastTrack for Windows Autopatch](../operate/windows-autopatch-support-request.md#microsoft-fasttrack). When you've onboarded with Windows Autopatch, you can [submit a support request](../operate/windows-autopatch-support-request.md) with the Windows Autopatch Service Engineering Team.
  - name: Other
    questions:
      - question: Are there Autopatch specific APIs or PowerShell scripts available?
        answer: |
          Programmatic access to Autopatch isn't currently available.
additionalContent: |
  ## Additional Content
  [Provide feedback](https://go.microsoft.com/fwlink/?linkid=2195593) or start a discussion in our [Windows Autopatch Tech Community](https://aka.ms/Community/WindowsAutopatch)