AzPolicyAdvertizer

last sync: 2025-Jul-18 17:23:11 UTC

Configure periodic checking for missing system updates on azure Arc-enabled servers

Azure BuiltIn Policy definition

Source Azure Portal
Display name Configure periodic checking for missing system updates on azure Arc-enabled servers
Id bfea026e-043f-4ff4-9d1b-bf301ca7ff46
Version 2.3.0
Details on versioning
Versioning Versions supported for Versioning: 2
2.3.0
2.2.1
Built-in Versioning [Preview]
Category Azure Update Manager
Microsoft Learn
Description Configure auto-assessment (every 24 hours) for OS updates on Azure Arc-enabled servers. You can control the scope of assignment according to machine subscription, resource group, location or tag. Learn more about this for Windows: https://aka.ms/computevm-windowspatchassessmentmode, for Linux: https://aka.ms/computevm-linuxpatchassessmentmode.
Cloud environments AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown
Available in AzUSGov Unknown, no evidence if Policy definition is/not available in AzureUSGovernment
Mode Indexed
Type BuiltIn
Preview False
Deprecated False
Effect Fixed
modify
RBAC role(s)
Role Name Role Id
Azure Connected Machine Resource Administrator cd570a14-e51a-42ad-bac8-bafd67325302
Rule aliases IF (3)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.HybridCompute/machines/osName Microsoft.HybridCompute machines properties.osName True False
Microsoft.HybridCompute/machines/osProfile.linuxConfiguration.patchSettings.assessmentMode Microsoft.HybridCompute machines properties.osProfile.linuxConfiguration.patchSettings.assessmentMode True True
Microsoft.HybridCompute/machines/osProfile.windowsConfiguration.patchSettings.assessmentMode Microsoft.HybridCompute machines properties.osProfile.windowsConfiguration.patchSettings.assessmentMode True True
THEN-Operations (2)
Alias Namespace ResourceType Path PathIsDefault DefaultPath Modifiable
Microsoft.HybridCompute/machines/osProfile.linuxConfiguration.patchSettings.assessmentMode Microsoft.HybridCompute machines properties.osProfile.linuxConfiguration.patchSettings.assessmentMode True True
Microsoft.HybridCompute/machines/osProfile.windowsConfiguration.patchSettings.assessmentMode Microsoft.HybridCompute machines properties.osProfile.windowsConfiguration.patchSettings.assessmentMode True True
Rule resource types IF (1)
Compliance Not a Compliance control
Initiatives usage
Initiative DisplayName Initiative Id Initiative Category State Type polSet in AzUSGov
Configure periodic checking for missing system updates on azure virtual machines and Arc-enabled virtual machines Deploy-AUM-CheckUpdates Security Center GA ALZ
Configure periodic checking for missing system updates on azure virtual machines and Arc-enabled virtual machines Deploy-AUM-CheckUpdates Security Center GA ALZ
History
Date/Time (UTC ymd) (i) Change type Change detail
2024-10-15 17:53:32 change Minor (2.2.1 > 2.3.0)
2023-09-18 18:02:04 change Patch, old suffix: preview (2.2.0-preview > 2.2.1)
2023-09-11 17:59:12 change Minor, suffix remains equal (2.1.0-preview > 2.2.0-preview)
2023-01-13 18:06:06 change Minor, suffix remains equal (2.0.0-preview > 2.1.0-preview)
2022-12-21 17:43:51 change Major, suffix remains equal (1.1.0-preview > 2.0.0-preview)
2022-04-29 18:06:01 change Minor, suffix remains equal (1.0.0-preview > 1.1.0-preview)
2021-10-08 15:47:40 add bfea026e-043f-4ff4-9d1b-bf301ca7ff46
JSON compare
compare mode: version left: version right:
JSON
api-version=2021-06-01
EPAC