Update Management
Please take a few minutes to submit your idea or vote up an existing idea. All of the feedback you share in these forums will be monitored and reviewed by the Update Management engineering team.
-
servers with pending reboot should not show as compliant
Don't turn a recently patched server to compliant before the server has been rebooted (after patching). the existing implementation turns a recently patched server to compliant before it's restarted and can lead a person to forget to restart the server and leaving the patches not yet applied.
51 votesReboot status is now included in the machine OS update assessment & status. As part of our private preview – to signup go to: https://aka.ms/UCpreview
-
Compliance report in Update Management
There is no option to Export the data in Automation account Update Management page where we see the total count of compliant and No machines, There should be option to export detailed report which has individual servers Compliance Status as the patch deployment output is nothing to do with Compliance report.
16 votesYou can export reports/data for update management solution from Azure Monitor Logs (log analytics) as Excel – see: https://docs.microsoft.com/azure/azure-monitor/logs/log-excel
For sample log queries for Update Management, see: https://docs.microsoft.com/azure/automation/update-management/query-log
-
Systems that get an error when scanning via WSUS should be reported as 'not assessed' instead of 'compliant' if scan fails for x days
When the app pool for a WSUS server is stopped or not running, and a client computer scans against it, it fails with an error. This error does not get surfaced in the AUM dashboard. Systems experiencing this error are listed as 'compliant', they should be listed as 'not assessed'.
6 votes -
In automation account the update management needs an option to check by subscription or resource group name if the VMs a re in compliance
Currently un automation account --> update management the search to check if a VM is in compliance can be done just by the name of the VMs. It is needed a feature in order to look by subscription name or resource group name so we can check the compliance of all the vms of one environment
4 votes -
Do an immediate refresh of compliance data after update deployment (linux)
After a deployment/update job, the data for the compliance dashboard should be immediately updated - not have to wait for the next scheduled compliance check
4 votes -
Schedule immediate compliance refresh function
I'd like to be able to schedule a refresh of compliance data (outstanding patches) whenever the next heartbeat occurs. Unless I'm missing something, the data can be somewhat stale and offers no easy way of getting it updated in a more timely fashion.
3 votes -
Real time on demand patch assessment on VMs
Hi, I want a way to assess the patches installed on a particular machine at a point in time. I am not able to use the API
https://docs.microsoft.com/en-us/rest/api/compute/virtualmachines/assesspatches
or the Powershell Invoke-AzVmAssessPatches cmdlet due to the subscription not being registered. I assume this is because I need to register Automatic Patching and enable it on the VM as implied in the page below:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/automatic-vm-guest-patching.
Is this true? There is no way to run an on demand assessment of installed patches on a VM unless it has Automatic Guest Patching enabled?
I am using Update Management but in a controlled…
1 vote -
1 vote
-
Machine doesn't have 'Update Management' enabled. Click to manage machines
Upon clicking to manage a new machine, the banner persists in saying that the machine doesn't have Update Management enabled. Click to manage machines. Please temporarily mute that banner if an attempt for that particular machine is pending.
1 vote -
Possibility to see VMs being under Update Management via policy
Possibility to distinguish VMs which are under Update Management and incorporate the results into ARM script to work as a policy.
Policy would help to track which VMs are left over of Update Management service.
1 vote -
Add a compliance policy for update management allowing to define acceptable delay
As soon as patches are available, VMs are automatically displayed as non-compliant. However, it often requires review, tests, ...
It could be great to be able to create a policy that allows to define for each kind of update what delay before applying the upgrade is acceptable or not and associate this with "shortcuts" to help to plan upgrades according to policy.
Example - A policy states that important security updates needs to be deployed during the next 12h
* VMS are displayed as compliant during 12h (but something indicates that they require updates)
* A button allows to plan…1 vote -
إعادة تحديث هاتفي بنفس مرجعية الإصدار الأصلي للهاتف المحمول حتى يتم تسهيل على المستخدم من استخدام الهاتف ويبقى دوماً معجب بمنتجات الصانع
هاتفي يطلب مني إعادة تحديث أكثر من مرة لهذا يزعجني كثيراً الأفضل أن يبقى طريقة استخدام الهاتف المحمول بنفس الطريقة التي قدمها الوكيل عند البيع لهذا انا منزعج من التحديث الجديد الذي أصبح صعب الاستعمال
1 voteشكرا على الاقتراح الصحيح. تعليقاتك مفتوحة الآن لمجتمع المستخدمين للتصويت والتعليق عليها. يتيح لنا ذلك تحديد أولويات طلبك بفعالية مقابل تراكم الميزات الحالية لدينا ويمنحنا أيضًا نظرة ثاقبة على التأثير المحتمل لتنفيذ الميزة المقترحة
- Don't see your idea?