Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more here.

Update Management

Please take a few minutes to submit your idea or vote up an existing idea. All of the feedback you share in these forums will be monitored and reviewed by the Update Management engineering team.

  • Hot ideas
  • Top ideas
  • New ideas
  • My feedback
  1. Update/s rollback

    Add the ability to rollback specific update/s

    74 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    10 comments  ·  Deployments  ·  Flag idea as inappropriate…  ·  Admin →

    While there is no explicit button or option in AUM for rollback. Currently, we have mechanisms in place which customers can use to roll-back updates across machine. You can still achieve the same implicitly today by:

    a) In Azure Update Management, setup a pre-script which will execute backup job for the VM. More details on pre/post script here: https://docs.microsoft.com/azure/automation/update-management/pre-post-scripts . Since the pre-script runbook is executed in Azure Automation before patching is done, it will ensure backup is done; which you can later use for rollback. This can be used for Windows & Linux machines – more useful for Linux, where rollback/uninstall of a patch is difficult.
    For sample PS, on setting up backup job for a VM – see: https://docs.microsoft.com/azure/backup/quick-backup-vm-powershell

    b) In Azure Automation, setup independent to Azure Update Management and PowerShell based runbook to uninstall Windows Update KB.
    For sample PS, on uninstalling a Windows Update KB…

  2. The possibility to "pin" a patch set for X number of days

    The possibility to "pin" a patch set for X number of days, giving you the possibility of deploying and verifying the same set of patches across individual envs. In other words: same patchset on DEV servers on Monday, Test servers on Tuesday, etc. and Production on Sunday.

    53 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    6 comments  ·  Deployments  ·  Flag idea as inappropriate…  ·  Admin →

    We’re currently reviewing enhancements around approved and time-delayed patching.

    In the interim – there are two ways to achieve your scenario “exactly same updates” in Dev & then Prod, by either manipulating the OS behavior or tweaking the AUM config:

    1. - Host the updates locally using Microsoft WSUS [https://docs.microsoft.com/azure/automation/automation-configure-windows-update#make-wsus-configuration-settings] or Reposync utility from RedHat [https://access.redhat.com/solutions/23016]or Ubuntu Landscape [https://docs.ubuntu.com/landscape/], etc. And the configure the update service or package manager of all your machines to use the local update source. In this way the updates installed when using Update Management will only be what is available in your local patch server which is running (say) WSUS or RH Reposync. And if the patch server remain unchanged in 2-3 weeks when you start update schedule for Prod, they will also fetch updates from same local patch server and have exactly same updates as your non-prod.
    1. - Use the…
  3. Create computer patch groups like in SCCM

    SCCM has the ability to create patch groups, which you can choose the order in which computers are patched

    39 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    5 comments  ·  Deployments  ·  Flag idea as inappropriate…  ·  Admin →
  4. Add ability to remove previous Update Deployments stuck in "In Progress" state

    I have two update deployments that are stuck in progress and won't go away. The Automation jobs finished successfully, but they still show in progress. It would be nice if there was an option to remove previous deployments. Or will these disappear with time?

    6 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Deployments  ·  Flag idea as inappropriate…  ·  Admin →
  5. Ability to adjust Windows Update settings

    Hi,

    I think it would be useful to be able to configure Windows Update settings through update management, control things like automatic reboot settings, working hours, action to take if users are logged on. I believe the OMS agent could set the relevant registry keys.

    4 votes

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    We’ll send you updates on this idea

    0 comments  ·  Deployments  ·  Flag idea as inappropriate…  ·  Admin →
  • Don't see your idea?

Update Management

Categories

Feedback and Knowledge Base