MicrosoftI'm confused at the call-out that says
We are not using AP at this time but I want to set it up for all of the capabilities (QU, FU, Driver, 365, Edge). During group creation, all of those capabilities are checked by default. Does this mean that the first time I create an Autopatch group, I need to uncheck Feature Updates and step through the settings then separately run through creating a dedicated Feature Update multi-release phase and pick the same groups used the first time?
Why then are you able to have Feature Update checked during AP Group creation if you are recommending us not to have it checked?
An additional question - should you use a separate Autopatch Group with separate Entra Groups for doing a Win 10 to Win 11 upgrade? Or can we use the same AP Group?
MicrosoftHey Marc,
Let me help clarify a bit.
When you check the “Feature updates” box during Autopatch group creation, it automatically creates a single feature update policy assigned to all deployment rings in that group. While this works, it limits flexibility and control—especially if you want to use multi-phase rollout strategies or manage Windows 10 to Windows 11 upgrades separately.
The checkbox exists to support simpler scenarios where a single policy is sufficient if you want devices in that group to be on that minimum version. But for phased rollouts and ring-specific targeting it’s better to manage feature updates separately.
It is recommended using separate Autopatch Group since devices staying on Windows 10 (e.g., ESU-enrolled) and those upgrading to Windows 11 have different servicing needs. Keeping them in the same Autopatch group risks conflicting policies or accidental upgrades.
Thanks Akash for the explanation. So for us where we want to move everyone to Windows 11 but do it in a phased roll-out, we should use two separate groups until the rollout is complete then just use one group for continued maintenance (if I am understanding it correctly).
