Azure update management

Question

Hi All,

I have a question on Azure update management.

I have segregated 4 groups for patching.All are Windows VMs and each group has 4 VMs.

Scheduled the automatic patching(every month) with required KB from automation account(Azure).Sometimes the patch installation is taking lot of time and Windows VM goes multiple reboots.
When I login and check from guest OS,I see from Security "check for updates(its up to date - I mean patch),however I see the VM status as "non compliant" in Azure portal(couple of VMs).

I dont understand why its listing like this?

I follow the below process.

1. After automatic patching is complete,I login from guest OS and will check how many patches has been installed in the update history.

Any is missing here?

Please give some feedback.

Thanks,
Raj

Answer 1

Hi @Anonymous

Welcome to Microsoft Q&A! Thanks for posting the question.

Apologies for the delayed response. Here are some pointers that should help you with the reported scenario.

Some of the common reasons of such observation are documented here, especially the subsections highlighted below.

• Update does not show available for machine
• Windows Defender update shows missing
• Superseded updates indicated as missing

Also, please review if there is an exception message below machines indicating a HRESULT or status. In case the troubleshooting docs above does not help you, please check if you have configured WSUS or SCCM, as the behavior might be different depending on the updates approved for these channels. Please refer to this link for more details.

Please let me know if you have any questions.

---

Please 'Accept as answer' and ‘Upvote’ if it helped so that it can help others in the community looking for help on similar topics.