Alternatives for Automated KB-Specific Patching with Azure Update Manager for Unified On-Premises and Azure VM Security Patch Management

Question

Currently, our team is working to streamline the application of security patches across both our on-premises environment and Azure VMs, using Azure Update Manager to reduce manual workload and promote automation. However, we have encountered limitations with specifying particular KBs for application through Azure Update Manager and are now exploring alternative options.

In this regard, we would appreciate guidance from Microsoft Support on alternative methods to apply past or specific KBs using Azure Update Manager, as follows:

• Applying Past or Specific KBs: Since Azure Update Manager does not seem to support explicit application of specific KBs when replaced by newer ones, what alternative solutions or methods could help achieve this?
• Unified Patch Management with Automation in Mind: Are there other recommended approaches or tools for maintaining consistent KB applications across both on-premises environments and Azure VMs while reducing administrative overhead?

Thank you for your time and consideration. We would be grateful for your insights on these points.

Best regards,