Skip to content

Commit dc82eb0

Browse files
committed
updated the cfg windows update article
1 parent 8107c23 commit dc82eb0

File tree

1 file changed

+7
-14
lines changed

1 file changed

+7
-14
lines changed

articles/automation/automation-configure-windows-update.md

Lines changed: 7 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -3,41 +3,34 @@ title: Configure Windows Update settings to work with Azure Update Management
33
description: This article describes the Windows Update settings that you configure to work with Azure Update Management.
44
services: automation
55
ms.subservice: update-management
6-
ms.date: 10/02/2019
6+
ms.date: 02/27/2020
77
ms.topic: conceptual
88
---
99
# Configure Windows Update settings for Update Management
1010

11-
Azure Update Management relies on Windows Update to download and install Windows updates. As a result, Update Management respects many of the settings used by Windows Update. If you use settings to enable non-Windows updates, Update Management will also manage those updates. If you want to enable downloading of updates before an update deployment occurs, update deployment can be faster, more efficient, and less likely to exceed the maintenance window.
11+
Azure Update Management relies on [Windows Update client](https://docs.microsoft.com//windows/deployment/update/windows-update-overview) to download and install Windows updates. There are specific settings that are used by the Windows Update client when connecting to Windows Server Update Services (WSUS) or Windows Update. Many of these settings can be managed with Local Group Policy Editor, PowerShell, directly editing the Registry, or in Group Policy. Some settings can be managed with the [Server Configuration Tool](https://docs.microsoft.com/windows-server/get-started/sconfig-on-ws2016#windows-update-settings) (SCONFIG).
12+
13+
Update Management respects many of the settings specified to control the Windows Update client. If you use settings to enable non-Windows updates, Update Management will also manage those updates. If you want to enable downloading of updates before an update deployment occurs, update deployment can be faster, more efficient, and less likely to exceed the maintenance window.
1214

1315
## Pre-download updates
1416

15-
To configure automatic downloading of updates in Group Policy, set the [Configure Automatic Updates setting](/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates##configure-automatic-updates) to **3**. This setting enables downloads of the required updates in the background, but it doesn't install them. In this way, Update Management remains in control of schedules, but updates can be downloaded outside the Update Management maintenance window. This behavior prevents "Maintenance window exceeded" errors in Update Management.
17+
To configure automatic downloading of updates but don't automatically install them, you can use Group Policy to set the [Configure Automatic Updates setting](/windows-server/administration/windows-server-update-services/deploy/4-configure-group-policy-settings-for-automatic-updates##configure-automatic-updates) to **3**. This setting enables downloads of the required updates in the background, and notifies you that the updates are ready to install. In this way, Update Management remains in control of schedules, but updates can be downloaded outside the Update Management maintenance window. This behavior prevents "Maintenance window exceeded" errors in Update Management.
1618

17-
You can also turn on this setting by running the following PowerShell command on a system that you want to configure for auto-downloading of updates:
19+
You can also turn on this setting by running the following PowerShell command on a machine that you want to configure for auto-downloading of updates:
1820

1921
```powershell
2022
$WUSettings = (New-Object -com "Microsoft.Update.AutoUpdate").Settings
2123
$WUSettings.NotificationLevel = 3
2224
$WUSettings.Save()
2325
```
2426

25-
## Disable automatic installation
26-
27-
By default on Azure virtual machines (VMs), automatic installation of updates is enabled. This might cause updates to be installed before you schedule them for installation by Update Management. You can disable this behavior by setting the `NoAutoUpdate` registry key to `1`. The following PowerShell snippet shows how to do this:
28-
29-
```powershell
30-
$AutoUpdatePath = "HKLM:SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU"
31-
Set-ItemProperty -Path $AutoUpdatePath -Name NoAutoUpdate -Value 1
32-
```
33-
3427
## Configure reboot settings
3528

3629
The registry keys listed in [Configuring Automatic Updates by editing the registry](/windows/deployment/update/waas-wu-settings#configuring-automatic-updates-by-editing-the-registry) and [Registry keys used to manage restart](/windows/deployment/update/waas-restart#registry-keys-used-to-manage-restart) can cause your machines to reboot, even if you specify **Never Reboot** in the **Update Deployment** settings. You should configure these registry keys to best suit your environment.
3730

3831
## Enable updates for other Microsoft products
3932

40-
By default, Windows Update provides updates only for Windows. If you enable the **Give me updates for other Microsoft products when I update Windows** setting, you also receive updates for other products, including security patches for Microsoft SQL Server and other Microsoft software. This option can't be configured by Group Policy. Run the following PowerShell command on the systems that you want to enable other Microsoft updates on. Update Management will comply with this setting.
33+
By default, Windows Update client is configured to provide updates only for Windows. If you enable the **Give me updates for other Microsoft products when I update Windows** setting, you also receive updates for other products, including security patches for Microsoft SQL Server and other Microsoft software. This option can't be configured by Group Policy. Run the following PowerShell command on the systems that you want to enable other Microsoft updates on. Update Management will comply with this setting.
4134

4235
```powershell
4336
$ServiceManager = (New-Object -com "Microsoft.Update.ServiceManager")

0 commit comments

Comments
 (0)