Azure VM windows Update some settings are managed by your organization although

Question

I have VM in Azure(Windows Server 2022) on the windows update it says some settings are managed by your organization.

although in sysinfo it shows that domain is "WORKGROUP" and it is not AzureADjoined, EnterpriseJoined or DomainJoined.

and there is no GPO related to update enabled.

So, Why it is showing something like this and how can I remove it ?

Answer 1

Hi, Abdul.

Most likely, this is because it is Azure-managed, so patching will be managed by Azure.

Even though you may not have this in a domain, it will be controlled by local group policy.

You can check the settings and if needed delete them by navigating to their registry location (or opening gpedit.msc, locally and navigating to the policy path):

https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsUpdate::AutoUpdateCfg

Answer 2

Hello

If you're not using Intune, GPO etc, it's most likely you have enabled Automatic VM Guest patching when deploying the virtual machine. https://learn.microsoft.com/en-us/azure/virtual-machines/automatic-vm-guest-patching

kind regards

Alistair