Patching is the job nobody thanks you for.

Until a server misses a security update. Then everyone asks why.

Azure Update Manager can patch Azure VMs and on premises servers through Azure Arc. The portal is fine for one machine. For fifty, I want a CSV.

So I cleaned up the checks I use and shared them on GitHub. This toolkit uses PowerShell 7, the Az modules and Azure Resource Graph.

Repo: azure-update-manager-powershell-toolkit

The problem it solves

An Arc server goes quiet, and nobody notices until patch night.

A security team asks "are we patched for this KB?" and you have to click through every machine.

A VM is not on any patch schedule, so it never gets updates.

The morning after patching, you need to know what failed. Fast.

These scripts make those checks quick and repeatable.

Highlight scripts

Get-AzUpdateComplianceSummary.ps1

One row per machine with Critical, Security and Other update counts. It also shows a pending reboot and flags old assessments.…