Forum Discussion
MarcVDH
Sep 04, 2023Iron Contributor
Azure Update Manager - dynamic scope not adding the machines
Hello,
I am trying to create a maintenance configuration to distribute the Definition Updates to a bunch of machines but when I use a dynamic scope to get the machines, the configuration is never applied to the machines.
Example :
I create a dynamic scope and it returns a list of machines :
But when I look in Manage - Machines, the associated schedules stays empty :
On the other hand, if I had the machines in the configuration, then you can see the associated schedule :
Now you can see the schedule :
Is there something that I am missing ?
Thanks in advance for your help
Marc
6 Replies
Sort By
- sasinaCopper ContributorMany people were having these issues but it's getting better since 2023 updates. Little things you will need to do in your Azure Portal environment are:
Dynamic Scope Configuration: Review the dynamic scope configuration to ensure that it includes the appropriate criteria for adding machines.
Prerequisites: Ensure that the Azure VMs or Arc-enabled VMs have Patch Orchestration set to Customer Managed Schedules. This sets patch mode to AutomaticByPlatform and the BypassPlatformSafetyChecksOnUserSchedule = True.
Associate a Schedule with the VM: Make sure a schedule is associated with the VM.
Permissions: For Dynamic Scoping and configuration assignment, ensure that you have the following permissions: Write permissions at subscription level to create or modify a schedule. Read permissions at subscription level to assign or read schedule. - kunlesanniCopper ContributorHi, I have the same issue, is there a solution yet?
- ItsBhattiIron Contributor
If you're experiencing an issue with Azure Update Manager where the dynamic scope isn't adding machines as expected, you may want to consider the following steps to troubleshoot and resolve the problem:
Check Dynamic Scope Configuration: Review the dynamic scope configuration to ensure that it includes the appropriate criteria for adding machines. Double-check the rules and conditions defined within the dynamic scope to verify that they match the machines you want to include.
Machine Compliance: Ensure that the machines you're trying to add meet the compliance criteria specified in the dynamic scope. Azure Update Manager only includes machines that match the criteria you've set.
Resource Tags: If you're using resource tags as part of the dynamic scope, make sure that the tags are correctly applied to the machines you want to include. Incorrect or missing tags can lead to machines not being added.
Deployment Schedules: Verify that the deployment schedule for updates aligns with your expectations. The dynamic scope will only include machines when updates are scheduled to be deployed.
Error Messages: Look for any error messages or logs that might provide information about why the machines are not being added. These logs can often pinpoint the issue and help with troubleshooting.
Azure Support: If the problem persists and you can't identify the root cause, consider reaching out to Azure support. They can provide specific guidance and assistance for your particular situation.
By going through these steps, you should be able to identify and resolve the issue with Azure Update Manager not adding machines to the dynamic scope as intended.
- CireBCopper ContributorI have the same question/problem. Do you already have the solution?
Thanks,
Eric- CireBCopper Contributor
When using a dynamic scope Azure Update Manager does it's job according to the defined schedule, but you don't see the schedule in the column 'Associated schedules' when you view the machines. That's a bit confusing. You only see a schedule when you assign a machine manually to a schedule.
In the end: Azure Update Manager does it's job
- MarcVDHIron Contributor
Hello,
Sorry for my late answer.
Yes indeed, the dynamic scope is working now but you don't see it unless you check the machines history.
At least now when you click on a Maintenance Configuration - Dynamic scopes, you see when there is one that is configured.Since my original mail and now, the dynamic scope it not in preview anymore. I guess a lot of changes have been made.
The only problem remaining is that you cannot see the schedule in the 'Associated schedules' column.
Marc