Enrolling and using Autopatch
If you have Windows Enterprise Licensing (Microsoft 365 E3, E5, or Windows E3), instead of manually configuring and populating your Windows update rings, you can use Windows Autopatch from Microsoft. This is a semi-managed service that automates updates for Windows, Microsoft Office, Microsoft Teams, Edge, Drivers, SQL ODBC, and .NET. When using Autopatch, Microsoft can also centrally pause updates so that if it notices a particular update is causing issues, it can block it before it is installed on your devices and then automatically resume it when the issue has been resolved.
As well as the click-and-forget option, you can also use Autopatch groups for more granular control over your updates. This will be covered in the There’s more… section of this recipe.
Getting ready
Before we deploy any configuration, you need to onboard your tenant into the service. For this, you will need two administrative contacts and a user account with...
