You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/update-manager/configure-wu-agent.md
+12-7Lines changed: 12 additions & 7 deletions
Original file line number
Diff line number
Diff line change
@@ -19,13 +19,13 @@ Azure Update Manager relies on the [Windows Update client](/windows/deployment/u
19
19
- PowerShell
20
20
- Directly editing the Registry
21
21
22
-
The Update Manager respects many of the settings specified to control the Windows Update client. If you use settings to enable non-Windows updates, the Update Manager will also manage those updates. If you want to enable downloading of updates before an update deployment occurs, update deployment can be faster, more efficient, and less likely to exceed the maintenance window.
22
+
Azure Update Manager respects many of the settings specified to control the Windows Update client. If you use settings to enable non-Windows updates, Update Manager will also manage those updates.
23
23
24
24
For additional recommendations on setting up WSUS in your Azure subscription and to secure your Windows virtual machines up to date, review [Plan your deployment for updating Windows virtual machines in Azure using WSUS](/azure/architecture/example-scenario/wsus).
25
25
26
26
## Pre-download updates
27
27
28
-
Pre-download of updates isn't supported in Azure Update Manager. Don't use pre-download functionality through AUOptions while using Azure Update Manager default/advanced patching mechanisms which sets NoAutoUpdate=1.
28
+
Pre-download of updates isn't supported in Azure Update Manager.
29
29
30
30
## Configure reboot settings
31
31
@@ -59,10 +59,6 @@ The Windows update client on Windows servers can get their patches from either o
59
59
> For the application of patches, you can choose the update client at the time of installation, or later using Group policy or by directly editing the registry.
60
60
> To get the non-operating system Microsoft patches or to install only the OS patches, we recommend you to change the patch repository as this is an operating system setting and not an option that you can configure within Azure Update Manager.
61
61
62
-
### Edit the registry
63
-
64
-
If scheduled patching is configured on your machine using the Azure Update Manager, the Auto update on the client is disabled. To edit the registry and configure the setting, see [First party updates on Windows](support-matrix.md).
65
-
66
62
### Patching using group policy on Azure Update Manager
67
63
68
64
If your machine is patched using Azure Update Manager, and has Automatic updates enabled on the client, you can use the group policy to have complete control. To patch using group policy, follow these steps:
@@ -81,12 +77,21 @@ For Windows Server 2022:
81
77
82
78
:::image type="content" source="./media/configure-wu-agent/configure-updates-group-policy-windows.png" alt-text="Screenshot of selection or deselection of install updates for other Microsoft products in Windows Server 2022.":::
83
79
84
-
## Make WSUS configuration settings
80
+
## WSUS configuration settings
85
81
86
82
Update Manager supports WSUS settings. You can specify sources for scanning and downloading updates using instructions in [Specify intranet Microsoft Update service location](/windows/deployment/update/waas-wu-settings#specify-intranet-microsoft-update-service-location). By default, the Windows Update client is configured to download updates from Windows Update. When you specify a WSUS server as a source for your machines, the update deployment fails, if the updates aren't approved in WSUS.
87
83
88
84
To restrict machines to the internal update service, see [do not connect to any Windows Update Internet locations](/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates#do-not-connect-to-any-windows-update-internet-locations).
89
85
86
+
## Registry settings
87
+
88
+
It's possible to check the patch source under the following two registry keys.
See [Configuring Automatic Updates by editing the registry](/windows/deployment/update/waas-wu-settings#configuring-automatic-updates-by-editing-the-registry) for more details.
94
+
90
95
## Next steps
91
96
92
97
Configure an update deployment by following instructions in [Deploy updates](deploy-updates.md).
0 commit comments