Windows Autopatch quality update policies now cover .NET Framework and quick machine recovery alongside monthly Windows quality updates, and the approvals already sitting on your tenant are worth a read before the rollout finishes on October 15.
Start with the default that is not the same for every category: a newly created policy auto-approves monthly security updates and holds non-security and out-of-band releases for review. Any policy someone created and assigned without opening Settings is already approving on your behalf.
Two mechanics decide whether that matters. Quick machine recovery is manual by default and the approval method cannot be changed in an existing policy, so decide it while you are creating the policy. And pausing a release revokes the approval for new devices without pulling the update off devices that already installed it.
