Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Fix Windows Autopatch Device Configuration Critical Alerts

Fix Windows Autopatch Device Configuration Critical Alerts

Written By Jitesh Kumar
Last Updated July 29, 2026
Posted In Intune
SHARE

This post explains how you can fix Windows Autopatch Device Configuration Critical Alerts. You can initiate remediation action for device configuration alerts. The recommended solution is to review and resolve all actions from Tenant management to ensure the healthy operation of the Windows Autopatch service.

If you have any critical actions in your tenant, you must take action as soon as possible, as the Windows Autopatch service might not be able to manage your tenant. When a critical action is active on your tenant, Windows Autopatch will consider your tenant inactive.

Windows Autopatch deploys, manages, and maintains all configurations related to the service’s operation. Don’t make any changes to the Windows Autopatch configurations.

When Windows Autopatch detects policies in the tenant are either missing or modified, which affects the service, Windows Autopatch will raise alerts and detailed recommended actions to ensure the healthy operation of the service.

Patch My PC

Windows Autopatch will automatically restore any missing groups that are required by the service. When a missing deployment group is restored, and the policies are also missing, the policies are restored to the deployment groups.

Fix Windows Autopatch Device Configuration Critical Alerts

Let’s check how to restore device configuration policy to fix Windows Autopatch Device Configuration Critical Alerts. The Global administrator can perform these actions, The minimum role required to restore configurations is Intune Service Administrator.

In the Microsoft Intune Admin Portal, Navigate to Devices, Under Windows Autopatch. When Windows Autopatch is inactive, or critical action is required. You will be alerted with banners on all Windows Autopatch blades.

You only have access to the Tenant management and Support requests blades. Critical action required. Take action to improve the security of your tenant. Clicking Learn more returns an error message and redirects you to the Tenant management blade.

Fix Windows Autopatch Device Configuration Critical Alerts Fig.1
Fix Windows Autopatch Device Configuration Critical Alerts Fig.1

In the Tenant Management, Actions, You see here one of the policies is categorized as an Unassigned policy: Windows Autopatch – Office Configuration policy is unassigned and needs to be restored. Click on the Policy name to redirect to restore configuration profiles.

If policies are misconfigured or unassigned, admins must restore them. In the Release management blade, the service will raise a Policy error workflow that you must complete to repair Windows Update policies. All other policies must be restored from the Tenant administration blade

SeverityDescription
CriticalYou must act as soon as possible to avoid disrupting the Windows Autopatch service.If no action is taken, Windows Autopatch might not be able to manage devices in your tenant, and the Windows Autopatch service may be marked as inactive. All critical pending actions must be resolved to restore service health and return to an active status.
Table 1 – Fix Windows Autopatch Device Configuration Critical Alerts
Fix Windows Autopatch Device Configuration Critical Alerts Fig.2
Fix Windows Autopatch Device Configuration Critical Alerts Fig.2

Review the unassigned policy and select Submit changes to fix this. If the policy is not restored, devices assigned to this policy will remain ineligible for the Windows Autopatch service.

The policy will be assigned to the following four groups automatically created while setting up Windows Autopatch.

•Modern Workplace Devices-Windows Autopatch-Broad •Modern Workplace Devices-Windows Autopatch-Fast •Modern Workplace Devices-Windows Autopatch-First •Modern Workplace Devices-Windows Autopatch-Test

Fix Windows Autopatch Device Configuration Critical Alerts Fig.3
Fix Windows Autopatch Device Configuration Critical Alerts Fig.3

Here you can see the tenant action changes are applied in a few minutes, and the status is showing Completed. Once critical actions are resolved, it can take up to two hours for Windows Autopatch to return to an active state.

Fix Windows Autopatch Device Configuration Critical Alerts Fig.4
Fix Windows Autopatch Device Configuration Critical Alerts Fig.4

Windows Autopatch Tenant Alert Actions

You can view alerts in line with the features you commonly use, Windows Update-related alerts in the Release management blade, and Device configuration alerts in the Tenant management > Alert actions tab.

The Tenant management blade presents IT admins with any actions that are required to maintain Windows Autopatch service health. The Tenant management blade can be found by navigating to Tenant administration  > Windows Autopatch > Tenant management.

Here you can Initiate action for the Autopatch service to restore policies without having to raise an incident. To initiate remediation action for device configuration alerts: There will be an alert for each missing policy that has deviated from the service defined values.

Note! Since we have restored the device configuration profiles, as explained above, I can not find active alerts here in this tab. You can also perform the actions directly from here.

Fix Windows Autopatch Device Configuration Critical Alerts Fig.5
Fix Windows Autopatch Device Configuration Critical Alerts Fig.5

Windows Autopatch Overview – Video Guide

You can check out the video tutorial here to learn how Windows Autopatch services work. The Ultimate Guide explains how to use Windows Autopilot with Microsoft Intune.

Windows Autopatch Overview – Fix Windows Autopatch Critical Alerts

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

About Author – Jitesh, Microsoft MVP, has over six years of working experience in the IT Industry. He writes and shares his experiences related to Microsoft device management technologies and IT Infrastructure management. His primary focus is Windows 10/11 Deployment solution with Configuration Manager, Microsoft Deployment Toolkit (MDT), and Microsoft Intune.

Written by

Jitesh has over 5 years of working experience in the IT Industry. He writes and shares his experiences related to Microsoft device management technologies and IT Infrastructure management. His primary focus area is Windows 10 Deployment solution with Configuration Manager, Microsoft Deployment Toolkit (MDT), and Microsoft Intune.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplify Windows Devices to Run Only the Required Applications using Intune

Key Takeaways Hey, let’s learn about Simplify Windows Devices to Run Only the Required Applications using Intune. This policy lets administrators replace the default windows shell with a custom or lightweight shell. it improves performance by using system resources and is useful for devices that run a dedicated application. If the policy is disabled or […]

AC Anoop C Nair 8 min read
Intune

Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune

Key Takeaways In this post we are discussing about Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune. Microsoft has announced the general availability of Custom Compliance Settings for macOS in Microsoft Intune. The feature helps organizations strengthen security controls while supporting many types of macOS management scenarios. […]

AC Anoop C Nair 4 min read
Intune

Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune

Key Takeaways In this post we are discussing Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune. Microsoft Intune has received a new update that expands firmware management capabilities for Samsung Galaxy devices through Firmware Versionsintegration. This enhancement gives IT administrators more control over firmware and operating system updates, helping them […]

AC Anoop C Nair 4 min read
Intune

MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys

Key Takeaways Microsoft Intune 2607 introduces Windows Registry Data collection in Device Inventory, allowing IT admins to verify actual device configurations without relying on custom discovery or remediation scripts. Using the Properties Catalog, admins can collect registry information through Single Value, All Values Under a Key (Non-Recursive), or Same Value Across Subkeys. MS Intune Adds […]

AC Anoop C Nair 5 min read