We knew this was coming — but it’s a disappointment anyway. For almost all Windows users, the latest update from Microsoft will be something of a bad news story, as some users suddenly get a faster, slicker way of using their PCs, while they miss out.
Per Windows Latest, this month’s KB5058497 for Windows 11 24H2 “is the first ‘hotpatch’ update, which means it doesn’t require a reboot to finish installing. But unfortunately, it is only for Windows 11 24H2 Enterprise. There’s no word on when the feature will roll out to Pro and Home consumers, but it might happen at some point.”
Microsoft warned users this would be the case. “With hotpatch updates, you can quickly take measures to help protect your organization from cyberattacks, while minimizing user disruptions. Hotpatching represents a significant advancement in our journey to help you, and everyone who uses Windows, stay secure and productive.”
The “numerous enhancements” Microsoft touted, include immediate protection, consistent security and minimized disruptions: “Users can continue their work without interruptions while hotpatch updates are installed. Hotpatch updates don’t require the PC to restart for the remainder of the quarter.”
But this probably isn’t for you. Microsoft also confirmed you will need:
- “A Microsoft subscription that includes Windows 11 Enterprise E3, E5, or F3, Windows 11 Education A3 or A5, or a Windows 365 Enterprise subscription
- Devices running Windows 11 Enterprise, version 24H2 (Build 26100.2033 or later) and with the current baseline update installed
- An x64 CPU including AMD64 and Intel (Note: Arm®64 devices are still in public preview)
- Microsoft Intune to manage deployment of hotpatch updates with a hotpatch-enabled Windows quality update policy
- Virtualization-based Security (VBS) enabled”
“Right now,” says Windows Latest, “when there’s a new security update for Windows 11 24H2 or an older version, you need to reboot to apply it. That’s the case for pretty much every update unless it’s a security patch for Windows Defender. With hotpatching, you don’t have to reboot the PC to install updates, but there are certain exceptions.”
The primary exception is that every third update does require a reboot, that enables a fuller update that can get to the parts of your PC a hot patch might not reach.
KB5058497 “falls between May and June 2025, which is the ‘no restart’ period,” in other words the hot patch two-months between reboot updates. “In our tests with Windows 11 24H2 Enterprise edition,” Windows Latest says, “KB5058497 installed on its own, and it did not ask for a reboot. I didn’t even realise the update was installed until I went to Windows Update history. That’s the magic of a reboot-free hotpatch.”
For Windows 11 Home and Pro users watching on, the monthly, mandatory reboot continues. There is no information on what you might get the hot patch update. The update is still critical, it just comes with pain and downtime others now avoid.
May is proving interesting for Microsoft, with an emergency update to fix a nightmarish Bitlocker Recovery issue and even reports of blue screens of death. Clearly, whether hotpatching or not, be sure to update your PC and reboot if needed. This was another fun-packed security update and the Windows landscape is not getting any safer.
