Microsoft fixes bug that prevented security updates for Azure Virtual Desktops

Microsoft has fixed a bug that prevented Windows Server Update Services (WSUS) from downloading and installing monthly security on some Azure Virtual Desktop (AVD) devices since early July.

https://support.microsoft.com/ja-jp/topic/2021-%E5%B9%B4-9-%E6%9C%88-14-%E6%97%A5-kb5005565-os-%E3%83%93%E3%83 %AB%E3%83%89-19041-1237-19042-1237-%E3%81%8A%E3%82%88%E3%81%B3-19043-1237-292cf8ed-f97b-4cd8-9883-32b71e3e6b44

This is confirmed by the “Windows Update” setting in the “Settings” app, which displays the message “You are up to date” even if no updates have been installed since May 2021.

This known issue affects both client (Windows 10 Enterprise multi-session, version 1909) and server (Windows Server multi-session, version 1909) platforms.

The Azure Virtual Desktop issue has been addressed in the KB5005565 cumulative update released in mid-September for devices running Windows 10 version 2004 or later.

The company did not explain in the Windows Health dashboard or related support documents why it delayed the release of the fix or why it provided the fix to systems running Windows 10 1909 via the Windows 10 2004 cumulative update. We have not explained the reasons for the delay.

Workaround also provided

Microsoft also provides two workarounds that allow you to use WSUS to apply the monthly security update to Azure Virtual Desktop systems if you are unable to immediately deploy KB5005565 CU, which fixes a known issue.

The first workaround requires that you deploy the latest image containing all Azure Marketplace security updates to all affected devices.

The second method is required on computers where image redeployment is not possible and requires manually downloading and installing the missing security updates from the Microsoft Update Catalog.

Microsoft releases monthly security updates on the second Tuesday of each month. You can download and deploy it using the management solution

After taking the necessary steps to download the update, you can add the .msu file to your endpoint management system and begin deploying the security update to devices running Windows 10 Enterprise or Education, version 1909. You can then add the .msu file to your endpoint management system and start deploying security updates to devices running Windows 10 Enterprise or Education, version 1909.

Detailed instructions for deploying the image and manually installing the security update on the target device can be found in this support document.

https://support.microsoft.com/ja-jp/topic/kb 5004926-windows-10-%E3%83%9E%E3%83%AB%E3%83%81%E3%82%BB%E3%83%83%83%E3%82%B7%E3%83%A7%E3%83%B3-%E3%83%90%E3%83%BC%E3%82%B8%E3%83%A7%E 3%83%B3-1909-%E3%81%AE%E6%9C%88%E6%AC%A1%E3%82%BB%E3%82%AD%E3%83%A5%E3%83%AA%E3%83%86%E3%82%A3%E6%9B%B4%E6%96%B0%E3%83%97%E3%83%AD %E3%82%B0%E3%83%A9%E3%83%A0%E3%82%92%E3%83%80%E3%82%A6%E3%83%B3%E3%83%AD%E3%83%BC%E3%83%89windows-10-enterprise-1909-3f670ebe-d3f9 -4b9e-af64-16c177612bc7