Azure Update Manager KBIDs inclusions in a maintenance configurations for a VM Patching

Question

I have onboarded Azure Update Manager to patch windows/linux servers based on customer managed schedule as per different maintenance configurations. Now as I am doing patching after microsoft release its updates so previous months updates are getting superseded by new updates. To resolve this, I want to include specific previous months patches to the existing schedule using either powershell or maintenance configurations (used below powershell cmdlet for).
I tried testing it manually, adding KBIDs, to include in an existing schedule and also through one time update but it didn't worked.
I need help to understand if it is feasible to implement. Can we do these inclusions ?If yes, help me with the ideal process.

Also I have enabled periodic assessment on the VMs. How can we reduce the frequency of VM patching assessments?

Answer 1

Hi Garg,Srishti

1. Will KBIDs inclusion work on an existing maintenance configuration?

Yes, it will. Go to the maintenance configuration, click on Updates, and include the required KBID(s).

2. Should KBIDs be included in the pending updates catalog or will it install even if not in the catalog?

Once the KBID is added to the maintenance configuration, it will be installed during the next scheduled run, along with other pending updates—even if it’s not currently listed in the catalog. (as long as it's still applicable and available from Windows Update or WSUS).

 3. Is there an alternative to install missing updates that were superseded by newer patches released on Patch Tuesday?

If you’re noticing gaps or missing updates from previous months, there are two approaches:

 

Recommended: Schedule your maintenance configuration after the second Tuesday of every month (Patch Tuesday) to ensure all updates, including superseded ones, are considered.

 Alternative: Refer to the official Microsoft documentation for monthly updates. Then, check the update history on the VM and manually include any missing KBIDs in the existing maintenance configuration. 

Please let me know if you face any challenge here, I can help you to resolve this issue further

Please provide your valuable comments

Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.