${lead}
${lead}
Operating Windows Server securely without monthly reboots – that’s the promise of hotpatching. The preview of this can now be tested.
Microsoft has unveiled hotpatching capabilities for Windows Server 2025, which allows for updates to be applied while the server is operational, eliminating the need for reboots. This feature is currently available for testing in the public preview of the new server.
In a blog post, Microsoft’s developers reveal that both the standard and data center editions of Windows Server 2025 will support hotpatching. Described by Microsoft as a “game changer,” this function promises to simplify change management, reduce the duration of patching windows, and make orchestration easier: “And you could finally see your family at weekends,” say the Microsoft team.
While it may seem overly optimistic, Microsoft defines hotpatching clearly: it involves updating the operating system without the need to reboot. This is achieved by modifying the code of active processes in memory, eliminating the necessity to restart the process.
This offers benefits like reduced workload thanks to less frequent reboots. Traditionally, reboots were required monthly on “patch tuesdays,” but now they will occur only quarterly. There might still be a need for a reboot during an off-schedule month, albeit rarely. With fewer binary files, updates are quicker to download and install, taking up less memory and processing power. Streamlining orchestration and change management becomes simpler. The hot patching feature is a part of the optional Azure Update Manager.
With just a few clicks, hotpatching can be enabled on Windows Server 2025 Datacenter and Standard Edition. Those interested can deploy the “Hotpatch (preview)” feature using the Azure Arc agent, which is included in the Windows Server 2025 preview.
For years, hotpatching has been active in Windows Server 2022 Datacenter Azure Edition, according to Microsoft. Previously, users had to operate a virtual machine (VM) in Azure or Azure Stack HCI with Windows Server 2022 Azure Edition. With the launch of Windows Server 2025, users will have the flexibility to choose the server edition and its operating environment—whether onsite in their own data centers, in the Azure cloud, or elsewhere. Hotpatching is viable on both physical servers and VMs, irrespective of whether they function on Hyper-V, VMware, or other software that supports Microsoft’s Virtualization Based Security.
This technology is proven and effective. The significant shift lies in the source and method of obtaining security updates. Hotpatching will now be accessible via Azure Arc, which handles administration and operates Windows Server’s internal licensing service, ensuring the delivery of hot patch updates to customers.
At the end of January, it had already been revealed that Microsoft was developing a Windows Server 2025 that would support on-premise use. Despite this, the emphasis remains heavily on cloud integration. On Monday, September 23, Microsoft confirmed plans to phase out WSUS. Looking ahead, Microsoft aims to transition local setups to the Windows Cloud PC and server frameworks in Azure.
Stay updated by following us on
LinkedIn or
This piece was originally authored in German and has been translated with assistance while ensuring it underwent a thorough editorial review prior to its release.