Skip to content

Automatic updates are enabled#

Security · Virtual Machine · Rule · 2020_06 · Important

Ensure automatic updates are enabled at deployment.


Window virtual machines (VMs) have automatic updates turned on at deployment time by default. The option can be enabled/ disabled at deployment time or updated for VM scale sets.

Enabling this option does not prevent automatic updates being disabled or reconfigured within the operating system after deployment.


Enable automatic updates at deployment time, then reconfigure as required to meet patch management requirements.