Query on update manager

Question

Hi All,

We have our VMs provisioned in Azure, and we are using Windows Server 2022, 2019, and 2016. When we deploy a Windows Server, such as Windows Server 2022 or 2019 Datacenter edition, from the Azure Marketplace, we download CIS benchmark policies from the CIS Security portal, apply them to the VM, and then convert it into an image. All new virtual machines are provisioned from this image. I would like to push Windows updates using Update Manager. Does Microsoft support custom images? If a server fails to update due to some issue, does Microsoft provide support? Is there any documentation available from Microsoft on this?

Answer 1

Hi @Rising Flight
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

Microsoft fully supports custom images in Azure. Once you configure your Windows Server VM with the desired configuration and security settings, you can convert it to your desired image. This image can then be used to deploy new VMs with consistent configuration, helping to standardize your environment. 

Azure Update Management is the recommended way to manage Windows updates on your VMs. First, create an Automation Account in the Azure portal, enable Update Management, and connect your VMs to it. Once configured, you can schedule updates manually and check for any missing or failed updates in your environment. 

Azure Update Management will notify you if the update fails. You can try running the built-in Windows Update Troubleshooter on the VM first to troubleshoot common problems. If that doesn't work, check the Event Viewer for error information. In some cases, you may need to manually download and update information from the Microsoft Update Catalog. 

If you have any further queries, do let us know 

--------------------------------------------------------------------------------------------------------- 

If the answer is helpful, please click "Accept Answer" and "Upvote it". 

Answer 2

i cannot mark as answer