Azure Update Manager not patching

Question

Azure Update Manager not patching

Raven 20

Hi Community,

I have created a schedule to update a server which is Azure arc-enabled through Azure Update Manager. I checked after the date, and it doesn't appear to have been updated.

Could you please help provide instructions on how to verify if the update is done? Running another 'check for updates' has returned saying there's still an update remaining. I've also checked the logs to see but I can't see anything obvious indicating it's happened, but it could be in another location.

Thanks for your help.

Accepted answer

0 additional answers

Your answer

Answer 1

Ashok Gandhi Kotnana 10,115 Microsoft External Staff Moderator

@Raven

Go to the Azure Portal.

Navigate to Azure Update Manager (formerly part of Update Management).

Select the update deployment you scheduled.

Review the Deployment Results:

Look at status (e.g., Succeeded, Failed, In Progress).

User's image

Check Update History on the Arc-Enabled Server

Depending on the OS:

For Windows: Run this command in PowerShell:

Get-HotFix | Sort-Object InstalledOn -Descending

Or check via GUI:

Go to Control Panel > Programs > View installed updates.

Ensure the update classification in your scheduled maintenance configuration includes the maintenance window is long enough. Check if reboots are allowed in the settings.

Hope this helps!

Kindly let us know if the above helps or you need further assistance on this issue.

User's image

Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.

Raven 20 Reputation points

2025-06-04T23:02:53.85+00:00

@Ashok Gandhi Kotnana

Thank you for your help.

When checking the 'Activity Log' of the scheduled update I created, I only see events where I've created the schedule but not that it successfully deployed.

I've turned on change tracking as of yesterday on the target server and can see that it ran some updates, but not at the time that I asked for it, so it's unclear whether this was because of my schedule.

I also ran the 'check for updates' again today and it's still telling me there's an update required to be made, so not sure.

Do we know whether update manager will definitely work for arc-enabled VM's? Is there a special extension that needs to be installed for it to work?

I haven't logged onto the machine to check directly but will also do that.

Thanks again for your help!
Ashok Gandhi Kotnana 10,115 Reputation points Microsoft External Staff Moderator

2025-06-05T15:57:17.3066667+00:00

Hi @Raven,

Thanks for the response back,

Yes, Azure Update Manager does support Arc-enabled servers, including on-premises or non-Azure machines. However, there are specific requirements and limitations, especially around configuration.

Prerequisites for Arc-enabled VM update management to ensure Update Manager works properly with Arc-enabled machines, check that the following are set up:

a. Azure Connected Machine Agent This is required for Arc-enabled servers. You probably already have this installed if the machine appears in Azure.

b. Windows Update Agent (for Windows) or appropriate Linux update manager the OS-level update agent (e.g., Windows Update, apt, yum, etc.) must be working and not disabled or misconfigured.

c. Microsoft Update Extension (Not Required Anymore) For the new Update Manager (not legacy Update Management via Automation), you no longer need to manually install an agent/extension.

Why might updates not show as deployed?

Several reasons might cause the schedule to appear as created but not show successful deployment:

Update Assessment: If you turned on change tracking only yesterday, the update scan might not yet reflect the latest patch status.

Update Manager's compliance report can lag by several hours after a scheduled run.

The update deployment did not match the schedule time exactly — if the server wasn't reachable or missed the window, it may not have executed.

Kindly let us know if the above helps or you need further assistance on this issue.

Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.
Raven 20 Reputation points

2025-06-06T05:11:23.05+00:00

Hi @Ashok Gandhi Kotnana

Thank you for this - that gives me some reassurance at least that we should be able to get it working for our on prem arc-enabled servers.

Yesterday I pushed a direct patch update using the 'one time update' feature, which actually did work. I was later able to confirm it worked using the 'check for updates' and confirming the status in the 'change tracking' which is positive news.

The only issue that remains is why the scheduler didn't work. I'll have to test this again with another server that needs a patch to see what went wrong there and try again. I'll let you know how it goes.

Let's keep this open if that's OK until I know whether it worked.
Ashok Gandhi Kotnana 10,115 Reputation points Microsoft External Staff Moderator

2025-06-06T06:39:42.1966667+00:00

Hi @Raven,

Thanks for the update — that’s great to hear the one-time update worked and that you were able to confirm it through 'check for updates' and 'change tracking'. Definitely a positive step. Agreed. Testing it again with another server sounds like a good plan — hopefully it will help pinpoint the issue. Absolutely fine to keep this open. Just let me know how the next test goes, and we can go from there. Ensure the update classification in your scheduled maintenance configuration includes the maintenance window is long enough. Check if reboots are allowed in the settings.

Note: we would keep this open, if it helped you can accept and up vote it, Still the case will be opened until your next response

Additionally,

Kindly let us know if the above helps or you need further assistance on this issue.

Please do not forget to "Accept the answer” and “upvote it” wherever the information provided helps you, this can be beneficial to other community members.it would be greatly appreciated and helpful to others.

Share via

Azure Update Manager not patching

0 additional answers

Your answer