Navigate to the Intune Admin Portal<https://intune.microsoft.com/#home>

Click "Create" and then click "Windows quality update policy (preview)"

Type in a name for the policy, and a name for the description and click "Next"

Enable the toggle for "When available, apply without restarting the device ("hotpatch")." and click "Next"\
\
Important Tip: For the setting, **Apply the latest cumulative quality updates for security** - This is toggled on by default, but if you have devices assigned to update rings, it will use those policies for deferral periods, deadlines, and grace periods from the update rings over the quality update policy.

Click "Add groups" to add your assignment groups. I would reccomend using update ring groups for these.

Enable Windows Hotpatch in Intune.