Azure Update Management - old updates detected as missing

Question

question

BojanZivkovic-7448 asked Aug 7, '21 stan commented Aug 13, '21

Azure Update Management - old updates detected as missing

Hi, I am in the process of evaluating Azure Update Management - we potentially want to use it in environments without Configuration Manager. Having connected test Windows Server 2016 system to Log Analytics Workspace I see these updates as missing ones:

All these updates are superseded by newer updates so basically I see "stale" updates and no newest updates such as July CU for Windows Server 2016. What is wrong here and how to remediate - I am newbie in Azure Update Management, having been working with Configuration Manager to patch servers for many years.

azure-automation

image.png (37.0 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2021-08-11T09:24:49.197Z

stan answered Aug 11, '21

Hi,
Updates are detected depending on what Windows Update service on the local server reports as available updates. For example, if Windows Update on the service is configured to get updates from WSUS server and that WSUS server has approved only certain updates you will see only those available. Check if that is the case with our server. You can also login to the server and see what updates are available locally, whatever the server sees it is also what will be shown in Update Management.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2021-08-13T08:16:54.547Z

BojanZivkovic-7448 answered Aug 13, '21 stan commented Aug 13, '21

We do not have any WSUS server in that environment - just DC and a few member servers and that's it thereby I wanted to patch that environment with Azure Update Management as PoC. We want to test it out and potentially use in all environments where currently we do not have WSUS or MECM and even maybe replace standalone WSUS in some.

· 3

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

stan · Aug 13, 2021 at 08:35 AM

As I have mentioned before if agent is working properly and still reporting data it is a matter of what the Windows Update service locally sees as available updates on the server. You can run Install-Module -Name PSWindowsUpdate and after that Get-WindowsUpdate to see what updates are available via Windows Update service.

0 ·

BojanZivkovic-7448 stan · Aug 13, 2021 at 08:55 AM

Yes, I see locally same updates.

0 ·

stan BojanZivkovic-7448 · Aug 13, 2021 at 08:57 AM

This means that the answer proposed is correct. Basically the service is working as intended. I am not sure on the current state of updates but sometimes in order to see other available updates you have to install some others first. It could be that after update and restart the new updates will appear.

0 ·

question