Merge pull request #262104 from SnehaSudhirG/2Jan-PatchingUpdates

updated patching info

Author: v-ccolin

articles/update-manager/includes/dynamic-scope-prerequisites.md

@@ -10,11 +10,11 @@ ms.date: 08/02/2023
 
 #### [Azure VMs](#tab/avms)
 
-- Patch Orchestration must be set to Customer Managed Schedules. This sets patch mode to AutomaticByPlatform and the **BypassPlatformSafetyChecksOnUserSchedule** = *True*.
+- Patch Orchestration must be set to Customer Managed Schedules. This sets **patch mode** to *AutomaticByPlatform* and the **BypassPlatformSafetyChecksOnUserSchedule** = *True*.
 - Associate a Schedule with the VM.
 
 #### [Arc-enabled VMs](#tab/arcvms)
 
-There are no prerequisites for patch orchestration. However, you must associate a schedule with the VM for Schedule patching. For more information, see [Configure schedule patching on Azure VMs to ensure business continuity](../prerequsite-for-schedule-patching.md).
+There are **no prerequisites** for patch orchestration. However, you must associate a schedule with the VM for Schedule patching. For more information, see [Configure schedule patching on Azure VMs to ensure business continuity](../prerequsite-for-schedule-patching.md).
 
 ---

articles/update-manager/manage-dynamic-scoping.md

@@ -4,7 +4,7 @@ description: This article describes how to manage Dynamic Scoping operations
 ms.service: azure-update-manager
 author: SnehaSudhirG
 ms.author: sudhirsneha
-ms.date: 11/20/2023
+ms.date: 01/02/2024
 ms.topic: how-to
 ---
 
@@ -20,16 +20,16 @@ This article describes how to view, add, edit and delete a dynamic scope.
 To add a Dynamic scope to an existing configuration, follow these steps:
 
 1. Sign in to the [Azure portal](https://portal.azure.com) and navigate to **Azure Update Manager**. 
-1. Select **Machines** > **Browse maintenance configurations** > **Maintenance configurations**. 
+1. Select **Machines** > **Maintenance configurations**. 
 1. In the **Maintenance configurations** page, select the name of the maintenance configuration for which you want to add a Dynamic scope. 
 1. In the given maintenance configuration page > select **Dynamic scopes** > **Add a dynamic scope**.
-1. In the **Add a dynamic scope** page, select **subscriptions**(mandatory).
+1. In the **Add a dynamic scope** page, select **subscriptions** (mandatory).
 1. In **Filter by**, choose **Select** and in the **Select Filter by**, specify the Resource group, Resource type, Location, Tags and OS type and then select **Ok**. These filters are optional fields.
-1. In the **Preview of machines based on above scope**, you can view the list of machines for the selected criteria and then select **Add**.
+1. In the **Preview of machines based on above scope**, you can view the list of machines for the selected criteria and then select **Save**.
    > [!NOTE]
    > The list of machines may be different at run time.
 1. In the **Configure Azure VMs for schedule updates** page, select any one of the following options to provide your consent:
-    1. **Change the required options to ensure schedule supportability** - this option confirms that you want to update the patch orchestration from existing option to *Customer Managed Schedules*: This updates the following two properties on your behalf:
+    1. **Change the required options to ensure schedule supportability** ensures that the machines are patched as per schedule and not autopatched. By selecting this option, you are confirming that you want to update the patch orchestration to *Customer Managed Schedules*: This updates the following two properties on your behalf:
 
        - *Patch mode = AutomaticByPlatform*
        - *Set the BypassPlatformSafetyChecksOnUserSchedule = True*.
@@ -38,13 +38,14 @@ To add a Dynamic scope to an existing configuration, follow these steps:
    > [!NOTE]
    > In the **Preview of machines based on above scope** page, you can view only the machines that don't have patch orchestration set to *Customer Managed Schedules*.
 
-1. Select **Save** to go back to the Dynamic scopes tab. In this tab, you can view and edit the Dynamic scope that you have created.
+1. Select **Save**. Notification confirms that the Dynamic scopes are successfully applied.
+1. In the **Maintenance configuration | Dynamic scopes** page, you can view and edit the Dynamic scopes that were created.
 
 ## View Dynamic scope
 To view the list of Dynamic scopes associated to a given maintenance configuration, follow these steps:
 
 1. Sign in to the [Azure portal](https://portal.azure.com) and navigate to **Azure Update Manager**.
-1. Select **Machines** > **Browse maintenance configurations** > **Maintenance configurations**.
+1. Select **Machines** >  **Maintenance configurations**.
 1. In the **Maintenance configurations** page, select the name of the maintenance configuration for which you want to view the Dynamic scope.
 1. In the given maintenance configuration page, select **Dynamic scopes** to view all the Dynamic scopes that are associated with the maintenance configuration.
 
@@ -59,7 +60,7 @@ To view the list of Dynamic scopes associated to a given maintenance configurati
 ## Edit a Dynamic scope
 
 1. Sign in to the [Azure portal](https://portal.azure.com) and navigate to **Azure Update Manager**. 
-1. Select **Machines** > **Browse maintenance configurations** > **Maintenance configurations**. 
+1. Select **Machines** > **Maintenance configurations**. 
 1. In the **Maintenance configurations** page, select the name of the maintenance configuration for which you want to edit an existing Dynamic scope. 
 1. In the given maintenance configuration page > select **Dynamic scopes** and select the scope you want to edit. Under **Actions** column, select the edit icon.
 1. In the **Edit Dynamic scope**, select the edit icon in the **Filter By** to edit the filters as needed and select **Ok**.
@@ -77,47 +78,49 @@ To view the list of Dynamic scopes associated to a given maintenance configurati
 ## View patch history of a Dynamic scope
 
 1. Sign in to the [Azure portal](https://portal.azure.com) and navigate to **Azure Update Manager**. 
-1. Select **History** > **Browse maintenance configurations** > **Maintenance configurations** to view the patch history of a dynamic scope.
+1. Select **History** to view the patch history of a dynamic scope.
 
 ## Provide consent to apply updates
 
 Obtaining consent to apply updates is an important step in the workflow of dynamic scoping and listed are the various ways to provide consent.
 
+>[!NOTE]
+> There are no prerequisites for  Arc-enabled VMs. 
+
 #### [From Virtual Machine](#tab/vm)
 
 1. In [Azure portal](https://portal.azure.com), go to **+Create a resource** > **Virtual machine** > **Create**. 
-1. In **Create a virtual machine**, select **Management** tab and under the **Guest OS Updates**, in **Patch orchestration options**, you can do the following: 
-    1. Select **Azure-orchestrated with user managed schedules (Preview)** to confirm that:
-
-       - Patch Orchestration is set to *Azure orchestration*
-       - Set the Bypass platform safety checks on user schedule = *True*.
+1. In **Create a virtual machine**, select **Management** tab and under the **Guest OS Updates**, in **Patch orchestration options**, select **Azure-orchestrated**. It sets the following properties:
 
-       The selection allows you to provide consent to apply the update settings, ensures that auto patching isn't applied and that patching on the VM(s) runs as per the schedule you've defined.
+   - Patch mode is set to *AutomaticByPlatform* 
+   - Set the BypassPlatformSafetyChecksOnUserSchedule = *True*
 
 1. Complete the details under **Monitoring**, **Advanced** and **Tags** tabs.
-1. Select **Review + Create** and under the **Management** you can view the values as **Periodic assessment** - *Off* and **Patch orchestration options** - *Azure-orchestrated with user managed schedules (Preview)*.
+1. Select **Review + Create** and under the **Management** you can view the values as **Periodic assessment** - *Off* and **Patch orchestration options** - *Azure-orchestrated*.
 1. Select **Create**.
 
 
 #### [From Schedule updates tab](#tab/sc)
 
 1. Follow the steps from 1 to 5 listed in [Add a Dynamic scope](#add-a-dynamic-scope).
-1. In **Machines** tab, select **Add machine**, In **Select resources** page, select the machines and select **Add**
-1. In **Configure Azure VMs for schedule updates**, select **Continue  to schedule updates** option to confirm that:
+1. In **Configure Azure VMs for schedule updates**, page select **Change the required options to ensure schedule supportability** option to confirm that **patch orchestration** is set as **Customer Managed Schedules**. It sets the following properties:
 
-   - Patch Orchestration is set to *Azure orchestration*
-   - Set the Bypass platform safety checks on user schedule = *True*.
+    - Patch mode is set to *AutomaticByPlatform*
+    - Set the BypassPlatformSafetyChecksOnUserSchedule = *True*.
 
-1. Select **Continue to schedule updates** to update the patch mode as **Azure-orchestrated** and enable the scheduled patching for the VMs after obtaining the consent.
+   The selection allows you to provide consent to apply the update settings, ensures that auto patching isn't applied and that patching on the VM(s) runs as per the schedule you've defined.
+
+1. Select **Save**.
 
 #### [From Update Settings](#tab/us)
 
-1. In **Azure Update Manager**, go to **Overview** > **Update settings**.
+1. In **Azure Update Manager**, go to **Overview** > **Settings** > **Update settings**.
 1. In **Change Update settings**, select **+Add machine** to add the machines.
-1. In the list of machines sorted as per the operating system, go to the **Patch orchestration** option and select **Azure-orchestrated with user managed schedules (Preview)** to confirm that:
+1. In the list of machines sorted as per the operating system, go to the **Patch orchestration** option and select **Customer Managed Schedules**. It sets the following properties:
+
+   - Patch mode is set to *AutomaticByPlatform* 
+   - Set the BypassPlatformSafetyChecksOnUserSchedule = *True*
 
-   - Patch Orchestration is set to *Azure orchestration* 
-   - Set the Bypass platform safety checks on user schedule = *True*
 1. Select **Save**.
 
    The selection made in this workflow automatically applies the update settings and no consent is explicitly obtained.