Skip to content

Automatic updates are enabled#

Security · Virtual Machine · Rule · 2020_06 · Important

Ensure automatic updates are enabled at deployment.

Description#

Window virtual machines (VMs) have automatic updates turned on at deployment time by default. The option can be enabled/ disabled at deployment time or updated for VM scale sets.

Enabling this option does not prevent automatic updates being disabled or reconfigured within the operating system after deployment.

Recommendation#

Enable automatic updates at deployment time, then reconfigure as required to meet patch management requirements.

Comments