Configure Windows Update settings in Azure Update Manager (2024)

  • Article

Azure Update Manager relies on the Windows Update client to download and install Windows updates. There are specific settings that are used by the Windows Update client when connecting to Windows Server Update Services (WSUS) or Windows Update. Many of these settings can be managed by:

  • Local Group Policy Editor
  • Group Policy
  • PowerShell
  • Directly editing the Registry

The Update Manager respects many of the settings specified to control the Windows Update client. If you use settings to enable non-Windows updates, the Update Manager will also manage those updates. If you want to enable downloading of updates before an update deployment occurs, update deployment can be faster, more efficient, and less likely to exceed the maintenance window.

For additional recommendations on setting up WSUS in your Azure subscription and to secure your Windows virtual machines up to date, review Plan your deployment for updating Windows virtual machines in Azure using WSUS.

Pre-download updates

To configure the automatic downloading of updates without automatically installing them, you can use Group Policy to configure the Automatic Updates setting to 3. This setting enables downloads of the required updates in the background, and notifies you that the updates are ready to install. In this way, Update Manager remains in control of schedules, but allows downloading of updates outside the maintenance window. This behavior prevents Maintenance window exceeded errors in Update Manager.

You can enable this setting in PowerShell:

$WUSettings = (New-Object -com "Microsoft.Update.AutoUpdate").Settings$WUSettings.NotificationLevel = 3$WUSettings.Save()

Configure reboot settings

The registry keys listed in Configuring Automatic Updates by editing the registry and Registry keys used to manage restart can cause your machines to reboot, even if you specify Never Reboot in the Update Deployment settings. Configure these registry keys to best suit your environment.

Enable updates for other Microsoft products

By default, the Windows Update client is configured to provide updates only for Windows operating system. In Windows update, select Check online for Windows updates. It will check updates for other Microsoft products to enable the Give me updates for other Microsoft products when I update Windows to receive updates for other Microsoft products, including security patches for Microsoft SQL Server and other Microsoft software.

Use one of the following options to perform the settings change at scale:

  • For Servers configured to patch on a schedule from Update Manager (that has the VM PatchSettings set to AutomaticByPlatform = Azure-Orchestrated), and for all Windows Servers running on an earlier operating system than server 2016, Run the following PowerShell script on the server you want to change.

    $ServiceManager = (New-Object -com "Microsoft.Update.ServiceManager")$ServiceManager.Services$ServiceID = "7971f918-a847-4430-9279-4a52d1efe18d"$ServiceManager.AddService2($ServiceId,7,"")
  • For servers running Server 2016 or later which are not using Update Manager scheduled patching (that has the VM PatchSettings set to AutomaticByOS = Azure-Orchestrated) you can use Group Policy to control this by downloading and using the latest Group Policy Administrative template files.

Configure a Windows server for Microsoft updates

The Windows update client on Windows servers can get their patches from either of the following Microsoft hosted patch repositories:

  • Windows update - hosts operating system patches.
  • Microsoft update - hosts operating system and other Microsoft patches. For example MS Office, SQL Server and so on.

Note

For the application of patches, you can choose the update client at the time of installation, or later using Group policy or by directly editing the registry.To get the non-operating system Microsoft patches or to install only the OS patches, we recommend you to change the patch repository as this is an operating system setting and not an option that you can configure within Azure Update Manager.

Edit the registry

If scheduled patching is configured on your machine using the Azure Update Manager, the Auto update on the client is disabled. To edit the registry and configure the setting, see First party updates on Windows.

Patching using group policy on Azure Update Manager

If your machine is patched using Azure Update Manager, and has Automatic updates enabled on the client, you can use the group policy to have complete control. To patch using group policy, follow these steps:

  1. Go to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage end user experience.

  2. Select Configure Automatic Updates.

  3. Select or deselect the Install updates for other Microsoft products option.

For Windows Server 2022:

  1. Go to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Configure Automatic Updates.

  2. Select Configure Automatic Updates.

  3. Select or deselect the Install updates for other Microsoft products option.

    Configure Windows Update settings in Azure Update Manager (2)

Make WSUS configuration settings

Update Manager supports WSUS settings. You can specify sources for scanning and downloading updates using instructions in Specify intranet Microsoft Update service location. By default, the Windows Update client is configured to download updates from Windows Update. When you specify a WSUS server as a source for your machines, the update deployment fails, if the updates aren't approved in WSUS.

To restrict machines to the internal update service, see do not connect to any Windows Update Internet locations.

Next steps

Configure an update deployment by following instructions in Deploy updates.

Configure Windows Update settings in Azure Update Manager (2024)
Top Articles
Key terms for MOVE contracts - Delta Exchange
What is Coming soon in English?
Red wine, berries, dark chocolate and tea: A recipe to reduce dementia risk
Amwednesday Vimeo
Five Guys Calorie Calculator
Davis.k12.Ut.us
Qvc Uk Marla Wynne
A2 Key preparation | Cambridge English
415-261-2242
Dr Matheson Waco Tx
Fox News 10 Mobile Al
Grifolsplasma.com Donor-Portal
[1.4.9] Updated Demonologist guide - ToME: the Tales of Maj'Eyal
Osceola (U.S. National Park Service)
Dale Jefferson Lise Barber Adoption Minnesota
Wrongplanet.net
Brownlow fashions are a national obsession. And we owe it in part to this stylist
Olivia Dunne 2023: Puerto Rico
Jennifer Maker Website
How To Use Google Flights To Find Cheap Prices
Imponte Phoenix
Skyrizi Commercial Restaurant Actress
Universal Orlando opens ‘DreamWorks Land’ with Shrek, Kung Fu Panda soon. What to know
How Long A Funeral Home Can Hold A Body? And 6 Related Questions
Spider Man Wiki Spider Man
What Do Noom Coins Get Me
Craigslist Fort Smith Ar Personals
Craigslist Class A Drivers Texas
Cadillacs On Craigslist
Hannibal Mo Craigslist Pets
Tom Wages Stone Mountain
Adecco Check Stubs
Revit Forums
Keylee Morales
Campaign Homecoming Queen Posters
Stellaris Ultima Vigilis
Busted Barren County Ky
Devotion Showtimes Near O'neil Cinemas - Brickyard Square 12
Www.craigslist.com Savannah Ga
Publix Super Markets | LinkedIn
How To Get The Unphased Badge In Slap Battles
Busted Mugshots Paducah Ky
Understanding "X marks the spot" Idiom: Meaning, Origins & Usage - CrossIdiomas.com
[PDF] fmj 1900 02 - Free Download PDF
North Jersey Creiglist
Honeybee: Classification, Morphology, Types, and Lifecycle
Cargurus Ram Trx
Shane Gillis Girlfriend: All About His Dating History, Career & More |Pudelek
The Leaf-Chronicle from Clarksville, Tennessee
Rubios Listens Com
Savage Funniest Texts Drunk
Latest Posts
Article information

Author: Terence Hammes MD

Last Updated:

Views: 6511

Rating: 4.9 / 5 (49 voted)

Reviews: 88% of readers found this page helpful

Author information

Name: Terence Hammes MD

Birthday: 1992-04-11

Address: Suite 408 9446 Mercy Mews, West Roxie, CT 04904

Phone: +50312511349175

Job: Product Consulting Liaison

Hobby: Jogging, Motor sports, Nordic skating, Jigsaw puzzles, Bird watching, Nordic skating, Sculpting

Introduction: My name is Terence Hammes MD, I am a inexpensive, energetic, jolly, faithful, cheerful, proud, rich person who loves writing and wants to share my knowledge and understanding with you.