Windows patching through Azure Update Manager

Question

Hi folks,

We are planning to utilize Azure Update Manager for patching of our Win2016 and Win2019 servers, but currently patching of those boxes is being done automatically through a GPO.

My doubt is that if I schedule these servers in Update Manager then will UM schedules take precedence over GPO settings and patch the servers in UM defined schedule or GPO settings will override the UM schedules and it will keep on patching as per the setting defined in GPO.

Thanks

Answer 1

@Apurva Pathak That's a great question! When it comes to managing updates for your Windows servers, both Azure Update Manager (UM) and Group Policy Objects (GPO) can play significant roles. However, the precedence between these two can be a bit tricky.

In general, GPO settings are applied at the system level and can enforce specific configurations, including update schedules. If you have GPO settings that automatically manage updates, these settings will typically take precedence over other configurations, including those set by Azure Update Manager.

To ensure that Azure Update Manager schedules take precedence, you might need to adjust or disable the relevant GPO settings that manage updates. This way, the servers will follow the schedules defined in Azure Update Manager instead of the GPO settings.

It's always a good practice to test this configuration on a small set of servers before applying it broadly to ensure that the desired behavior is achieved without any unintended consequences.

If you need further assistance or have more questions, feel free to reply to this post!

---

If the response helped, do "Accept Answer" and up-vote it