Feature Update vs Cumulative Update vs Hotpatch: What’s the Difference?
Windows Update uses a lot of terms that sound very similar:
feature update
quality update
cumulative update
security update
preview update
hotpatch
baseline update
out-of-band update
They all change Windows.
But they do very different jobs.
The simplest way to remember them is:
Feature update
Moves the PC to a newer Windows release.
Cumulative update
Services the Windows version already installed.
Hotpatch
Applies eligible monthly security fixes without requiring an immediate restart, on supported managed devices.
That distinction matters because each type has a different impact on:
compatibility
deployment timing
support lifecycle
restart behaviour
business change control
At a Glance
Update type Main purpose Changes Windows version? Restart normally required?
Feature update Moves Windows to a newer release Yes Yes
Cumulative/quality update Security and reliability fixes for current release No Usually
Hotpatch Eligible security fixes between baseline updates No No for the hotpatch itself
Baseline update Refreshes the hotpatch foundation No Yes
Microsoft’s current Windows 11 servicing model uses quarterly baseline cumulative updates for hotpatch-enabled devices, with hotpatch releases in the following two months.
What Is a Feature Update?
A feature update moves Windows from one major release to another.
For example:
Windows 11 24H2 → Windows 11 25H2
A feature update can introduce changes to:
security
user interface
hardware support
management
drivers
built-in applications
accessibility
recovery
servicing components
Microsoft defines feature updates as upgrades that include significant feature additions and changes as well as security and quality improvements.
A feature update also starts a new support lifecycle for that Windows release.
Feature Updates Are Bigger Changes
A monthly update normally modifies the Windows release you already have.
A feature update may need to migrate:
applications
users
drivers
settings
security configuration
recovery components
That is why feature updates typically involve a longer installation process and one or more restarts.
A Higher Version Number Does Not Always Mean Your Existing PC Should Upgrade
Windows 11 26H1 is a good 2026 example.
Microsoft’s current release information says 26H1 exists as a Windows release, but also states that hotpatching is not available on 26H1.
The important lesson is broader:
Do not assume every higher Windows version is necessarily intended for every existing device or deployment path.
Use Windows Update, release health and your organisation’s deployment policy rather than forcing an upgrade simply because a newer version number exists.
How to Check Your Windows Version
Press:
Windows + R
Type:
winver
You might see:
Windows 11 Version 25H2
OS Build 26200.xxxx
That tells you the broad release and current build family.
What Is a Cumulative Update?
A cumulative update services the Windows release you already have.
It typically contains:
security fixes
reliability improvements
bug fixes
servicing improvements
previously released fixes
The word cumulative matters.
Microsoft says Windows client updates are typically cumulative, meaning newer updates include previously released fixes so devices do not need to install every historical package individually.
For example:
January: A, B, C
February: A, B, C, D, E
March: A, B, C, D, E, F
Installing the latest applicable cumulative update generally brings the device up to the current servicing level for that Windows release.
What Is a Quality Update?
Microsoft often uses quality update as the broader category for normal Windows servicing.
Quality updates can include:
security fixes
critical fixes
reliability fixes
and are typically released monthly, although Microsoft can release them at other times when required.
In everyday IT conversation, people often say:
monthly cumulative update
or:
monthly security update
for the regular servicing release.
What Is the Monthly “B Release”?
Microsoft’s normal security servicing cadence is centred around the monthly B release, traditionally associated with the second Tuesday of the month.
That release provides the month’s security fixes and cumulative servicing.
This is the normal patch cycle most businesses think of when they say:
Patch Tuesday
For most ordinary Windows 11 PCs, this update normally requires a restart.
What Is a Preview Update?
A preview update generally contains non-security fixes that Microsoft intends to include in a later cumulative release.
It can be useful for:
testing a specific fix
resolving a known reliability issue early
IT validation
But businesses do not normally need to deploy every preview update automatically.
The regular security release will eventually incorporate the relevant cumulative fixes.
What Is an Out-of-Band Update?
An out-of-band, or OOB, update is released outside the normal monthly schedule.
Microsoft may do this when a problem is important enough that waiting for the next regular cumulative update is not appropriate.
Examples could include urgent fixes for:
serious security problems
authentication failures
printing failures
boot problems
widespread update regressions
Out-of-band does not mean optional or experimental.
It simply means:
released outside the normal servicing timetable.
What Is Hotpatch?
Hotpatch is where Windows servicing becomes more interesting.
On eligible devices, Microsoft can apply certain monthly security fixes to running Windows code without requiring an immediate restart. Microsoft describes hotpatch updates as Monthly B security updates that install and take effect without rebooting the device.
That can be valuable for businesses because it reduces:
employee disruption
reboot delays
patch-compliance lag
“I’ll restart later” behaviour
But hotpatch is not:
“Windows never needs restarting again.”
Hotpatch Still Needs Baseline Restarts
Microsoft currently uses this broad hotpatch cycle:
January — baseline cumulative update — restart
February — hotpatch — no restart
March — hotpatch — no restart
April — baseline — restart
May — hotpatch
June — hotpatch
July — baseline
August — hotpatch
September — hotpatch
October — baseline
November — hotpatch
December — hotpatch
So the user may avoid many monthly restarts.
But quarterly baseline updates still require one.
Microsoft can also introduce an additional baseline outside that schedule when security requirements demand it.
Who Can Actually Use Windows 11 Hotpatch?
This is where I would strengthen the original article most.
Hotpatch is not simply a switch available to every Windows 11 PC.
Microsoft’s current prerequisites include:
supported licensing
Windows 11 version 24H2 or later
Microsoft Intune management
Windows Autopatch quality-update policy with hotpatch enabled
latest supported baseline
Virtualization-Based Security (VBS) running.
Eligible licences currently include examples such as:
Windows 11 Enterprise E3/E5
Microsoft 365 F3
Windows 11 Education A3/A5
Microsoft 365 Business Premium
Windows 365 Enterprise.
So a normal unmanaged Windows 11 Home PC does not suddenly start receiving reboot-free monthly hotpatch servicing.
Microsoft 365 Business Premium Can Qualify
This point is particularly relevant to SMEs.
Microsoft currently includes Microsoft 365 Business Premium among the eligible hotpatch licences.
But licence eligibility alone is not enough.
The device still needs to satisfy the technical and management requirements, including:
Intune
Windows Autopatch quality policy
VBS
correct Windows version
current baseline.
So:
Business Premium licence ≠ hotpatch automatically enabled.
It means the organisation may be able to use it when the environment is configured correctly.
What Happens if a PC Is Not Eligible for Hotpatch?
It does not simply miss security updates.
Microsoft says devices that fail one or more hotpatch prerequisites are offered the normal Latest Cumulative Update (LCU) instead.
That update normally requires a restart.
This is a very important safety characteristic.
Hotpatch eligibility problems should not mean:
no security patching at all.
They generally mean:
fall back to ordinary cumulative servicing.
What If the PC Missed the Latest Baseline?
Hotpatch depends on a current baseline.
Microsoft says that during a hotpatch month, a device that is enabled for hotpatch but has fallen behind the baseline can receive:
the current baseline + the current hotpatch
and the baseline requires a restart.
So if a supposedly hotpatch-enabled PC suddenly asks for a restart, that does not automatically mean the technology is broken.
It may simply need to catch up to the required baseline.
What If You Upgrade Windows During a Hotpatch Month?
This is a particularly useful 2026 detail.
Microsoft says that if a hotpatch-enrolled device moves to the latest Windows version during a baseline month, it can remain on the hotpatch cycle.
But if it upgrades during a hotpatch month, it moves temporarily back to standard servicing and requires the normal restart path until the next baseline refresh.
That makes feature-update timing more relevant for businesses using hotpatch.
Hotpatch Is Not Available on Windows 11 26H1
As of August 2026, Microsoft’s Windows 11 release information explicitly states:
Hotpatching is not available on Windows 11 version 26H1.
That is exactly the kind of detail that can change over time, so businesses should check current Windows release health rather than assuming all future releases support the same servicing capabilities.
Can You Roll Back a Hotpatch?
Yes, but there is an important catch.
Microsoft says automatic rollback is not supported.
A hotpatch can be uninstalled, but doing so requires a restart. Microsoft’s recommended troubleshooting path is to uninstall the hotpatch and install the latest standard cumulative update when necessary.
So:
Hotpatch install → no reboot
does not mean:
Hotpatch troubleshooting → never reboot.
Feature Updates and Hotpatch Solve Different Problems
This deserves emphasis.
Hotpatch does not keep an old Windows release supported forever.
You still need to move to a supported Windows feature version before that release reaches end of servicing.
Hotpatch reduces disruption from some monthly security updates.
Feature updates move the operating system onto its next supported lifecycle.
Both remain necessary.
Cumulative Updates and Hotpatch Also Work Together
Hotpatch does not eliminate cumulative servicing.
Quarterly baseline cumulative updates are the foundation that later hotpatches build upon.
A good mental model is:
Baseline cumulative update
↓
Hotpatch
↓
Hotpatch
↓
New baseline cumulative update
↓
repeat.
What About Drivers?
Driver updates are another Windows Update category.
They affect hardware such as:
graphics
Wi-Fi
Bluetooth
storage
audio
printers
Microsoft’s Windows Update client policies treat driver updates separately from feature and quality updates.
That matters when troubleshooting.
If Wi-Fi broke immediately after Windows Update, do not automatically assume the monthly cumulative update caused it.
A network driver may have installed during the same update cycle.
The Practical Business Difference
For a typical SME:
Feature updates
Manage carefully.
Use:
pilot groups
compatibility checks
safeguard holds
staged rollout
because the operating-system release is changing.
Cumulative updates
Deploy promptly through managed update rings.
These are central to routine Windows security.
Hotpatch
Use where eligible to reduce reboot disruption while maintaining security compliance.
But still:
monitor deployment
maintain VBS
keep devices on baseline
plan quarterly restarts
Hotpatch reduces update friction.
It does not remove the need for update management.
Common Misunderstandings
“A feature update is just a really big monthly update”
Not quite.
A feature update moves Windows to a new release and lifecycle.
“Hotpatch means no more restarts”
No.
Quarterly baselines still require restarts, and extra baselines can be released.
“Every Windows 11 PC gets hotpatch”
No.
It requires eligible licensing, supported Windows, VBS and managed deployment.
“If hotpatch cannot install, the PC gets no security update”
No.
Eligible policy-managed devices that cannot use hotpatch are normally offered the standard LCU instead.
“Feature updates replace monthly security updates”
No.
A supported feature version still needs monthly servicing.
The Simplest Way to Remember It
Think:
Feature update
= new Windows release
Cumulative update
= maintain and secure the current release
Hotpatch
= some monthly security fixes without an immediate restart
Baseline
= periodic cumulative foundation hotpatch depends on
That's the whole servicing model in four lines.
How Hamilton Group Can Help
Hamilton Group can help businesses manage Windows updates without leaving employees to decide individually when to install, defer or restart.
We can assist with:
Windows 11 feature updates
cumulative updates
hotpatch
Microsoft Intune
Windows Autopatch
quality-update policies
update rings
VBS
safeguard holds
compatibility testing
patch compliance
For eligible organisations, hotpatch can reduce monthly disruption substantially—but only when the Windows, licensing, security and management prerequisites are configured correctly.
Visit hgmssp.com or call 0330 043 0069 to discuss Windows patch management and Microsoft Intune.