Microsoft has detailed the company's latest method to improve the delivery of Windows updates, especially in the case of companies where deploying urgent patches is important.

Available for devices enrolled in the Windows Update for Business deployment service (in Intune and Windows Update for Business), this program is mainly targeted at resolving zero-day security vulnerabilities in a timelier manner.

Microsoft says a great way is to configure the number of days necessary for a reboot to 1 or 2 days, as it prevents forced reboots to minimize the disruption within the organization.

Full focus on security updates

At the same time, additionally, it provides a reasonable window to deploy security updates, though when zero-days are now being involved, immediate rebooting might be required.

"If you are using the expedite capability the very first time, then just before reaching a zero-day vulnerability scenario, identify in case your devices are eligible to receive expedited updates or not. If your devices are current and active, perform a test run and expedite these to an older security update," Microsoft explains.

"For example, in case your devices possess the August security update, then you could test the expedite capability by utilizing target release as June. The Summary and Device reports in Intune will notify you if there are devices that could 't be expedited, together with reasons and mitigations. Note: We're exploring a future capability to test the expedite capability without needing to create an expedite policy for a quality update."

Microsoft says this program happens to be focused specifically on security updates, but at the same time, the organization reveals that it's also working on an identical approach specifically aimed at non-security patches. This expansion will make it possible for organizations to urgently deploy certain bug fixes and enhancements on their Windows 10 and Windows 11 devices, whilst enforcing a time to reboot for every machine.