Automatic updates are enabled

SYNOPSIS

Ensure automatic updates are enabled at deployment.

DESCRIPTION

Window virtual machines (VMs) have automatic updates turned on at deployment time by default. The option can be enabled/ disabled at deployment time or updated for VM scale sets.

Enabling this option does not prevent automatic updates being disabled or reconfigured within the operating system after deployment.

RECOMMENDATION

Enable automatic updates at deployment time, then reconfigure as required to meet patch management requirements.

LINKS

• SE:08 Hardening resources
• Automatic Guest Patching for Azure Virtual Machines and Scale Sets
• Azure deployment reference