Skip to content

Commit 268cf6c

Browse files
authored
Merge pull request #127339 from ADOYLEMSFT/main
Update configure-wu-agent.md
2 parents 0ee9dce + 3801b26 commit 268cf6c

File tree

1 file changed

+12
-7
lines changed

1 file changed

+12
-7
lines changed

articles/update-manager/configure-wu-agent.md

Lines changed: 12 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -19,13 +19,13 @@ Azure Update Manager relies on the [Windows Update client](/windows/deployment/u
1919
- PowerShell
2020
- Directly editing the Registry
2121

22-
The Update Manager respects many of the settings specified to control the Windows Update client. If you use settings to enable non-Windows updates, the Update Manager will also manage those updates. If you want to enable downloading of updates before an update deployment occurs, update deployment can be faster, more efficient, and less likely to exceed the maintenance window.
22+
Azure Update Manager respects many of the settings specified to control the Windows Update client. If you use settings to enable non-Windows updates, Update Manager will also manage those updates.
2323

2424
For additional recommendations on setting up WSUS in your Azure subscription and to secure your Windows virtual machines up to date, review [Plan your deployment for updating Windows virtual machines in Azure using WSUS](/azure/architecture/example-scenario/wsus).
2525

2626
## Pre-download updates
2727

28-
Pre-download of updates isn't supported in Azure Update Manager. Don't use pre-download functionality through AUOptions while using Azure Update Manager default/advanced patching mechanisms which sets NoAutoUpdate=1.
28+
Pre-download of updates isn't supported in Azure Update Manager.
2929

3030
## Configure reboot settings
3131

@@ -59,10 +59,6 @@ The Windows update client on Windows servers can get their patches from either o
5959
> For the application of patches, you can choose the update client at the time of installation, or later using Group policy or by directly editing the registry.
6060
> To get the non-operating system Microsoft patches or to install only the OS patches, we recommend you to change the patch repository as this is an operating system setting and not an option that you can configure within Azure Update Manager.
6161
62-
### Edit the registry
63-
64-
If scheduled patching is configured on your machine using the Azure Update Manager, the Auto update on the client is disabled. To edit the registry and configure the setting, see [First party updates on Windows](support-matrix.md).
65-
6662
### Patching using group policy on Azure Update Manager
6763
6864
If your machine is patched using Azure Update Manager, and has Automatic updates enabled on the client, you can use the group policy to have complete control. To patch using group policy, follow these steps:
@@ -81,12 +77,21 @@ For Windows Server 2022:
8177
8278
:::image type="content" source="./media/configure-wu-agent/configure-updates-group-policy-windows.png" alt-text="Screenshot of selection or deselection of install updates for other Microsoft products in Windows Server 2022.":::
8379
84-
## Make WSUS configuration settings
80+
## WSUS configuration settings
8581
8682
Update Manager supports WSUS settings. You can specify sources for scanning and downloading updates using instructions in [Specify intranet Microsoft Update service location](/windows/deployment/update/waas-wu-settings#specify-intranet-microsoft-update-service-location). By default, the Windows Update client is configured to download updates from Windows Update. When you specify a WSUS server as a source for your machines, the update deployment fails, if the updates aren't approved in WSUS.
8783
8884
To restrict machines to the internal update service, see [do not connect to any Windows Update Internet locations](/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates#do-not-connect-to-any-windows-update-internet-locations).
8985
86+
## Registry settings
87+
88+
It's possible to check the patch source under the following two registry keys.
89+
90+
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\
91+
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services
92+
93+
See [Configuring Automatic Updates by editing the registry](/windows/deployment/update/waas-wu-settings#configuring-automatic-updates-by-editing-the-registry) for more details.
94+
9095
## Next steps
9196
9297
Configure an update deployment by following instructions in [Deploy updates](deploy-updates.md).

0 commit comments

Comments
 (0)