Will Microsoft charge for Windows security updates starting in July? Yes, but for Windows Server 2025, not Windows 11.

Some headlines have caused confusion over whether Windows security updates will cost money.

Microsoft is launching a paid subscription for Windows security updates, but the cost will hit those running Windows Server 2025, not Windows 11. Hotpatching for Windows Server 2025 has been free while in preview, but when the option leaves preview in July, it will cost $1.50 per CPU core per month.

I suspect many who manage servers already know about the change coming in July and whether it will affect their organization. The problem is that this story made the rounds because some outlets used — dare I say — clickbait headlines that suggested PC owners may have to pay for Windows 11 security updates starting this summer.

But if you're an admin who manages servers and is curious about the change, I'll cover that as well.

What is hotpatching a server?

Hotpatching is a way to update a server without having to reboot after installation. This is important because it minimizes the time servers are unprotected.

It's common for a fix to be delayed while a server waits to be rebooted. During that time between installation and the reboot, known as the "window of vulnerability," the server is left vulnerable even though a fix is available.

Hotpatching in Windows Server 2025 will reduce the number of times you need to restart servers to around four times per year. That leaves some windows of vulnerability, but far fewer than if you had to restart a server each month.

To use hotpatching in multicloud or on-premises environments, you need to use Azure Arc. With Azure Arc, you can manage an environment by projecting non-Azure or on-premises resources into Azure Resource Manager.