Azure Update Manager Configuration

Question

Hi everyone,

We know Update Manager could do Critical and Security Updates with the Maintenance Configuration that cover VM's OS and OS security update..

Is this enough to control the update?
Or do I need to do anything else to set this up?
Like for example this one with the group policy:
https://learn.microsoft.com/en-us/azure/update-manager/configure-wu-agent

Thank you

Answer 1

Hello Handinata Tanudjaja,

To configure Azure Update Manager for controlling your VM's OS and OS security updates, as shown below enabling Critical updates and Security updates in the Maintenance Configuration's Update classification is a good enough as this will ensure that important updates are applied to maintain the security and functionality of your VMs.

However, as you mentioned, you may also want to consider additional configurations to ensure comprehensive control over updates. i.e., you can manage Windows update settings through Group Policy or by editing the registry, which allows for more granular control over how updates are applied. This includes settings for automatic updates and specifying the update repository.

Certainly, Group Policy helps ensure that all VMs within a specified scope (such as a subscription, resource group, or specific tags) adhere to the same update policies. This automation reduces the need for manual intervention and ensures consistency across your environment

Refer this link: https://learn.microsoft.com/en-us/azure/update-manager/configure-wu-agent#edit-the-registry

In summary, while enabling Critical and Security updates is essential, reviewing and potentially configuring additional settings through Group Policy or registry edits can enhance your control over the update process.

Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.

Thanks