Windows Update
Also known as: Windows updates
Windows Update is the built-in Windows service that downloads and installs security patches, bug fixes, feature upgrades, and some drivers from Microsoft.
Most updates arrive automatically, with monthly security updates on the second Tuesday of each month and larger feature updates about once a year. While updates sometimes cause restarts or rare bugs, delaying them leaves computers open to known attacks, which is how many breaches happen.
Windows Update, explained at three levels
At home
Windows Update is like a mechanic who visits your car every month with free fixes. Microsoft's engineers keep finding weak spots, such as locks that can be picked, and package the repairs together. Windows checks for them automatically, downloads them in the background, and installs them, sometimes asking you to restart so it can replace parts that were in use. You just need to let the mechanic finish the job.
At work
Windows Update is the built-in Windows service that downloads and installs fixes from Microsoft, including monthly security patches on the second Tuesday, bug fixes, drivers, and a yearly feature update. It runs automatically, though IT can control timing. Businesses care because most cyberattacks exploit flaws that already have patches, so keeping every computer updated on a reliable schedule is one of the cheapest and most effective defences.
At home
Windows Update checks Microsoft's servers for new fixes, downloads them in the background and installs what it can while you work. Some changes affect files that are in use, so they finish during a restart. Most months bring a single cumulative update on the second Tuesday, containing all previous fixes, so a computer that missed several months catches up in one install. Once a year, a larger feature update adds new capabilities and resets the support clock.
At work
Organizations use Windows Update for Business, set through Intune or Group Policy, to control timing rather than hosting updates themselves. Devices are grouped into rings, such as IT pilot, early adopters and broad deployment, with deferrals between them so problems surface before everyone is affected. Deadlines force installation and restart after a grace period. Windows Autopatch can automate ring management. Delivery Optimization lets devices share downloaded updates with nearby peers to save bandwidth.
At home
Besides monthly security fixes, Windows offers optional updates, including preview builds of next month's fixes and driver updates. Previews let Microsoft find problems before the main release, which means you are partly testing them. Drivers offered there may be generic versions that are older than your manufacturer's. In my view, most people should skip optional previews unless they are fixing a specific problem, and let the monthly release arrive on its own.
At work
Measure patch compliance across the fleet and set maximum deferral for security updates, typically under two weeks, with emergency procedures for actively exploited zero-days. Handle restart notifications thoughtfully, since forced restarts during work breed resentment and workarounds. Windows Update covers only Microsoft components, so patch third-party apps through Intune, winget or a dedicated tool. Hotpatching on Windows 11 Enterprise applies security fixes without restarts in most months, reducing disruption.
Real-world examples
At home
Lena kept postponing Windows updates. After learning one fixed a flaw attackers were using, she set active hours and let updates install overnight.
At work
Carlos manages IT for a Montreal accounting firm. He set up update rings so his IT team's PCs get updates first, then everyone else a week later.
How it compares
| feature | Security updates | Feature updates |
|---|---|---|
| Frequency | Monthly | About yearly |
| Content | Fixes for vulnerabilities | New features and changes |
| Urgency | High | Can be planned |
| Size | Smaller | Larger |
Install security updates quickly. Plan feature updates.
For analysts
I'd write patching service levels into IT policies, such as critical updates within 14 days. Without a deadline, updates get deferred indefinitely.
History & origin
Microsoft launched the Windows Update website with Windows 98 in 1998, and automatic updates arrived with Windows Me and became mainstream with Windows XP. After major worms such as Blaster in 2003, Microsoft adopted a regular monthly release schedule that year, later nicknamed 'Patch Tuesday,' and Windows XP Service Pack 2 in 2004 turned automatic updates on by default. Windows 10 in 2015 made updates mandatory for home users, causing frustration over surprise restarts. Business tools such as Windows Server Update Services and Windows Update for Business let organizations control timing. Microsoft introduced 'hotpatching' that installs some security updates without restarts for business versions of Windows 11 in 2025. In my view, forced updates annoyed people, but they probably prevented millions of infections.