Windows 11 26H2 went GA on September 29 as an enablement package: KB5121794, one restart, and a cumulative update you have to be current on first. The catch is policy, not code. Allow Temporary Enterprise Feature Control turns on every dormant feature at the next restart rather than the one you wanted, and Microsoft’s own EPM troubleshooting page says Administrator protection breaks Endpoint Privilege Management elevation on the same device today. Read that page before you pilot either one.
Windows Autopatch quality update policies now cover .NET Framework and quick machine recovery alongside monthly Windows quality updates, and the approvals already sitting on your tenant are worth a read before the rollout finishes on October 15.
Start with the default that is not the same for every category: a newly created policy auto-approves monthly security updates and holds non-security and out-of-band releases for review. Any policy someone created and assigned without opening Settings is already approving on your behalf.
Two mechanics decide whether that matters. Quick machine recovery is manual by default and the approval method cannot be changed in an existing policy, so decide it while you are creating the policy. And pausing a release revokes the approval for new devices without pulling the update off devices that already installed it.
