update management questions on azure :

Question

question

shashikaushal-5830 asked Jan 18, '21 stan answered Jan 19, '21

update management questions on azure :

1)Monitoring agent is seen as extension and agent being installed on the VM when you enable
update management on the VM . and i also see that the VM is linked to the Log analytics workspace .

Is this the only agent that is responsible for sending all the updates to the Logs analytics workspace , including the patching details ?
If yes how this agent gets information about the patches that are missing on the machine ? is that he queries the
windows update.log to check what patches are installed ? if yes how does it gets the information about missing updates ?

2)Now when we get the report in the update management that yes these patches are missing and these patches needs
to be installed . When we scedule , is that hybrid runbook worker corresponding to the VM, push patches to the VM ?
am i correct on this ? Or is that hybrid runbook worker just has the list what patches are missing
and it calls windows update agent through monitoring agent installed within the Vm to get the patches deployed ?

azure-automation

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2021-01-19T09:00:20.617Z

stan answered Jan 19, '21

Hi,
1) - Yes. The information is taken from the local Windows Update Service. If Windows Update service is configured with WSUS available updates will be reported from WSUS to Windows Update service and from there to Update management.
2) Once VM is onboarded to Update Management a system hybrid worker is automatically registered with each VM onboarded. Every system hybrid worker is in its own Hybrid worker group. Once you schedule update the hybrid worker will pick the job and execute it. Updates are installed again trough Windows Update service. If you are not excluding or including specific updates everything that the Windows Update service reports as available for install and recommended will be installed. I believe optional updates are not installed.

In short the service interacts with the Windows Update service rather having its own mechanism for detecting and installing updates.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question