feedback incorporated

Author: SnehaSudhirG

articles/update-center/prerequsite-for-schedule-patching.md

@@ -2,27 +2,30 @@
 title: Prerequisites for scheduled patching in update management center (preview).
 description: The article describes the new prerequisites to configure scheduled patching in Update management center (preview).
 ms.service: update-management-center
-ms.date: 04/11/2023
+ms.date: 04/13/2023
 ms.topic: conceptual
 author: snehasudhirG
 ms.author: sudhirsneha
 ---
 
-# Configure patching using the new prerequisite 
+# Configure Azure VMs for enhanced patching
 
 **Applies to:** :heavy_check_mark: Windows VMs :heavy_check_mark: Linux VMs :heavy_check_mark: Azure VMs.
 
 This article is an overview on how to configure Schedule patching and Automatic guest VM patching on Azure VMs using the new prerequisite. The steps to configure both the patching options on Arc VMs continue to remain the same.
- 
-Currently, you can enable [Automatic guest VM patching](../virtual-machines/automatic-vm-guest-patching.md) (Autopatch) by setting the patch mode to **Azure-orchestrated** or **AutomaticByPlatform** where patches are automatically applied during off-peak hours. To have additional control over your patch installation, you can also use schedule patching to define your own custom maintenance window. You can enable schedule patching by setting the patch mode to **Azure orchestrated**, or **AutomaticByPlatform** and attaching a schedule to the Azure VM.
 
-In certain cases, when you remove the schedule from a VM, there is a possibility that the VM may get accidentally autopatched and subsequently rebooted. To avoid accidental or unintentional patching, the new prerequisite, **ByPassPlatformSafetyChecksOnUserSchedule**, a VM property allows you to accurately determine the VMs that must be schedule patched or autopatched.
+Currently, you can enable [Automatic guest VM patching](../virtual-machines/automatic-vm-guest-patching.md) (Autopatch) by setting the patch mode to **Azure-orchestrated** or **AutomaticByPlatform** on Azure portal and using REST API respectively, where patches are automatically applied during off-peak hours. 
+
+For additional control over your patch installation, you use [schedule patching](updates-maintenance-schedules.md#scheduled-patching) to define your own custom maintenance window. You can [enable schedule patching](scheduled-patching.md#schedule-recurring-updates-on-single-vm) by setting the patch mode to **Azure orchestrated**, or **AutomaticByPlatform** and attaching a schedule to the Azure VM.
+
+However, in certain cases, when you remove the schedule from a VM, there is a possibility that the VM may be autopatched for critical or security patches and subsequently rebooted. To avoid such accidental or unintentional patching, a new prerequisite - **ByPassPlatformSafetyChecksOnUserSchedule**, a VM property is introduced that allows you to accurately determine the VMs that must be schedule patched or autopatched.
+
+> [!IMPORTANT]
+> For a seamless scheduled patching experience, you must ensure that the new VM property is enabled on all your Azure VMs (existing or new) that have schedules attached to them **before April 30, 2023**. Failing to update will give an error that the prerequisites aren't met.
 
 
 ## Prerequisite for schedule patching on Azure VMs
 
-To enable schedule patching on your VMs now, follow these steps:
-  
 # [Azure portal](#tab/new-prereq-portal)
 
 **Patch orchestration = Azure-orchestrated with user managed schedules (Preview)**.
@@ -34,41 +37,13 @@ The new patch orchestration option enables the following VM properties on your b
   - Patch mode = Azure-orchestrated
   - BypassPlatformSafetyChecksOnUserSchedule = TRUE
 
-
-# [REST API](#tab/new-prereq-rest-api)
-
-- Patch mode = AutomaticByPlatform
-- BypassPlatformSafetyChecksOnUserSchedule = TRUE 
-
---- 
-
-## Prerequisite for automatic guest VM patching on Azure VMs
-
-To enable automatic guest VM patching on your Azure VMs now, follow these steps:
-
-# [Azure portal](#tab/auto-portal)
-
-- Patch mode = Azure-orchestrated
-
-# [REST API](#tab/auto-rest-api)
-
-- Patch mode = AutomaticByPlatform
-- BypassPlatformSafetyChecksOnUserSchedule = FALSE
-
----
-
-> [!IMPORTANT]
-> For a seamless scheduled patching experience, you must ensure that the new VM property is enabled on all your Azure VMs (existing or new) that have schedules attached to them **before April 30, 2023**. Failing to update will give an error that the prerequisites aren't met.
-
-## Enable patch orchestration for existing VMs
+**Enable patch orchestration for existing VMs**
 
 You can update the patch orchestration option for existing VMs that either already have schedules associated or are to be newly associated with a schedule:  
 
 > [!NOTE]
 > If the **Patch orchestration** is set as *Azure orchestrated*, the **BypassPlatformSafetyChecksOnUserSchedule** is set to *False* and there is no schedule associated, the VM(s) will be autopatched.
 
-# [Azure portal](#tab/prereq-portal)
-
 To update the patch mode, follow these steps:
 
 1. Sign in to the [Azure portal](https://portal.azure.com)
@@ -77,9 +52,12 @@ To update the patch mode, follow these steps:
 1. In **Select resources**, select your VMs and then select **Add**.
 1. In **Change update settings**, under **Patch orchestration**, select *Azure orchestrated with user managed schedules (Preview)* and then select **Save**.
 
+# [REST API](#tab/new-prereq-rest-api)
 
-# [REST API](#tab/prereq-rest-api)
+- Patch mode = AutomaticByPlatform
+- BypassPlatformSafetyChecksOnUserSchedule = TRUE 
 
+**Enable patch orchestration for existing VMs**
 ```
 PUT on `/subscriptions/subscription_id/resourceGroups/myResourceGroup/providers/Microsoft.Compute/virtualMachines/myVirtualMachine?api-version=2020-12-01`
 ```
@@ -101,10 +79,26 @@ PUT on `/subscriptions/subscription_id/resourceGroups/myResourceGroup/providers/
 }
 ```
 ---
-
 > [!NOTE]
 > Currently, you can only enable the new prerequisite for schedule patching via Azure portal and REST API. It cannot be enabled via Azure CLI and PowerShell.
 
+--- 
+
+## Prerequisite for automatic guest VM patching on Azure VMs
+
+To enable automatic guest VM patching on your Azure VMs now, follow these steps:
+
+# [Azure portal](#tab/auto-portal)
+
+- Patch mode = Azure-orchestrated
+
+# [REST API](#tab/auto-rest-api)
+
+- Patch mode = AutomaticByPlatform
+- BypassPlatformSafetyChecksOnUserSchedule = FALSE
+
+---
+
 ## Enable patch orchestration for new VMs
 
 You can select the patch orchestration option for new VMs that would be associated with the schedules:
@@ -144,7 +138,6 @@ PUT on `/subscriptions/subscription_id/resourceGroups/myResourceGroup/providers/
 ```
 ---
 
-
 ## User scenarios
 
 **Scenarios** | **Azure-orchestrated** | **BypassPlatformSafetyChecksOnUserSchedule** | **Schedule Associated** |**Expected behavior in Azure** |