{
    "api_version": "1",
    "kind": "dse_post",
    "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/",
    "item": {
        "id": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/",
        "slug": "dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade",
        "url": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/",
        "alternate_urls": {
            "markdown": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade.md",
            "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/"
        },
        "title": "Review Azure control-plane implications before a Windows Server in-place upgrade",
        "summary": "DSE recommends documenting the update capabilities the workload needs before selecting an upgrade method.",
        "format": {
            "slug": "guide",
            "name": "Guide"
        },
        "priority": {
            "slug": "info",
            "name": "Information"
        },
        "featured": false,
        "image": {
            "theme": "managed-it",
            "label": "Managed IT operations",
            "alt": "A controlled technology lifecycle progressing from assessment to approved production.",
            "card_url": "https://update.dsesecurity.com/assets/editorial/managed-it-card.webp?v=1.8.20",
            "hero_url": "https://update.dsesecurity.com/assets/editorial/managed-it-hero.webp?v=1.8.20",
            "social_url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
            "width": 2400,
            "height": 1350
        },
        "topics": [
            {
                "slug": "it",
                "name": "IT",
                "url": "https://update.dsesecurity.com/topic/it/"
            }
        ],
        "author": {
            "name": "DSE Security Editorial Team",
            "url": "https://update.dsesecurity.com/#editorial-team",
            "type": "Organization"
        },
        "publisher": {
            "name": "Detection Systems & Engineering",
            "url": "https://dsesecurity.com/"
        },
        "published_at": "2026-09-17T16:34:22+00:00",
        "modified_at": "2026-09-17T16:35:04+00:00",
        "reviewed_on": "2026-09-17",
        "reading_minutes": 1,
        "word_count": 210,
        "potentially_affected": "Use this review before choosing an in-place Windows Server upgrade for an Azure VM whose operational plan depends on Azure-managed update capabilities.",
        "dse_recommendation": "DSE recommends documenting the update capabilities the workload needs before selecting an upgrade method.",
        "primary_source": {
            "name": "Windows in-place upgrade - Azure Virtual Machines | Microsoft Learn",
            "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/windows-in-place-upgrade",
            "published_on": null,
            "authority": "Microsoft Learn"
        },
        "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
        "usage_info": "https://update.dsesecurity.com/usage/",
        "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
        "content_html": "<h2>Source facts</h2>\n<p>Microsoft cautions that an in-place Windows Server upgrade leaves the VM’s source-image properties, including publisher, offer, and plan, unchanged. The same warning says automatic guest patching, automatic OS image upgrades, Hotpatching, and Azure Update Manager are not officially supported with this process and can fail. <a href=\"https://learn.microsoft.com/en-us/azure/virtual-machines/windows-in-place-upgrade\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft Learn</a></p>\n<h2>Applicability</h2>\n<p>Use this review before choosing an in-place Windows Server upgrade for an Azure VM whose operational plan depends on Azure-managed update capabilities.</p>\n<h2>DSE recommendation</h2>\n<p>DSE recommends documenting the update capabilities the workload needs before selecting an upgrade method. Compare those requirements with the source warning, and ask the service owner to decide whether deploying a new VM is the appropriate route. If an in-place upgrade remains under consideration, record the resulting management limitation explicitly alongside the recovery plan and application compatibility review. Do not use the guest version alone to describe the platform configuration.</p>\n<h2>Verification</h2>\n<p>Inspect both the guest OS version and the Azure source-image properties after any approved test. Review each required management capability against the documented support boundary and the selected deployment method. Keep a successful OS installation separate from operational acceptance, and leave unsupported dependencies unresolved until the service owner chooses a supported design.</p>\n<h2>Official references</h2>\n<ul>\n<li><a href=\"https://learn.microsoft.com/en-us/azure/virtual-machines/windows-in-place-upgrade\" target=\"_blank\" rel=\"noopener noreferrer\">Microsoft: Windows in-place upgrade &#8211; Azure Virtual Machines | Microsoft Learn</a></li>\n</ul>",
        "content_text": "Source facts\nMicrosoft cautions that an in-place Windows Server upgrade leaves the VM’s source-image properties, including publisher, offer, and plan, unchanged. The same warning says automatic guest patching, automatic OS image upgrades, Hotpatching, and Azure Update Manager are not officially supported with this process and can fail. Microsoft Learn\nApplicability\nUse this review before choosing an in-place Windows Server upgrade for an Azure VM whose operational plan depends on Azure-managed update capabilities.\nDSE recommendation\nDSE recommends documenting the update capabilities the workload needs before selecting an upgrade method. Compare those requirements with the source warning, and ask the service owner to decide whether deploying a new VM is the appropriate route. If an in-place upgrade remains under consideration, record the resulting management limitation explicitly alongside the recovery plan and application compatibility review. Do not use the guest version alone to describe the platform configuration.\nVerification\nInspect both the guest OS version and the Azure source-image properties after any approved test. Review each required management capability against the documented support boundary and the selected deployment method. Keep a successful OS installation separate from operational acceptance, and leave unsupported dependencies unresolved until the service owner chooses a supported design.\nOfficial references\n\nMicrosoft: Windows in-place upgrade – Azure Virtual Machines | Microsoft Learn",
        "content_markdown": "## Source facts\n\nMicrosoft cautions that an in-place Windows Server upgrade leaves the VM’s source-image properties, including publisher, offer, and plan, unchanged. The same warning says automatic guest patching, automatic OS image upgrades, Hotpatching, and Azure Update Manager are not officially supported with this process and can fail. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/windows-in-place-upgrade)\n\n## Applicability\n\nUse this review before choosing an in-place Windows Server upgrade for an Azure VM whose operational plan depends on Azure-managed update capabilities.\n\n## DSE recommendation\n\nDSE recommends documenting the update capabilities the workload needs before selecting an upgrade method. Compare those requirements with the source warning, and ask the service owner to decide whether deploying a new VM is the appropriate route. If an in-place upgrade remains under consideration, record the resulting management limitation explicitly alongside the recovery plan and application compatibility review. Do not use the guest version alone to describe the platform configuration.\n\n## Verification\n\nInspect both the guest OS version and the Azure source-image properties after any approved test. Review each required management capability against the documented support boundary and the selected deployment method. Keep a successful OS installation separate from operational acceptance, and leave unsupported dependencies unresolved until the service owner chooses a supported design.\n\n## Official references\n\n- [Microsoft: Windows in-place upgrade – Azure Virtual Machines | Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/windows-in-place-upgrade)"
    },
    "json_ld": {
        "@context": "https://schema.org",
        "@graph": [
            {
                "@type": "Organization",
                "@id": "https://dsesecurity.com/#organization",
                "name": "Detection Systems & Engineering",
                "alternateName": "DSE Security",
                "url": "https://dsesecurity.com/",
                "logo": {
                    "@type": "ImageObject",
                    "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20"
                }
            },
            {
                "@type": "Organization",
                "@id": "https://update.dsesecurity.com/#editorial-team",
                "name": "DSE Security Editorial Team",
                "url": "https://update.dsesecurity.com/",
                "parentOrganization": {
                    "@id": "https://dsesecurity.com/#organization"
                }
            },
            {
                "@type": "WebSite",
                "@id": "https://update.dsesecurity.com/#website",
                "name": "DSE Updates",
                "alternateName": "DSE Security Knowledge Hub",
                "url": "https://update.dsesecurity.com/",
                "inLanguage": "en-US",
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "potentialAction": {
                    "@type": "SearchAction",
                    "target": {
                        "@type": "EntryPoint",
                        "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}"
                    },
                    "query-input": "required name=search_term_string"
                }
            },
            {
                "@type": "WebPage",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/",
                "isPartOf": {
                    "@id": "https://update.dsesecurity.com/#website"
                },
                "lastReviewed": "2026-09-17"
            },
            {
                "@type": "BreadcrumbList",
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/#breadcrumbs",
                "itemListElement": [
                    {
                        "@type": "ListItem",
                        "position": 1,
                        "name": "DSE Updates",
                        "item": "https://update.dsesecurity.com/"
                    },
                    {
                        "@type": "ListItem",
                        "position": 2,
                        "name": "Review Azure control-plane implications before a Windows Server in-place upgrade",
                        "item": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/"
                    }
                ]
            },
            {
                "@type": [
                    "Article",
                    "TechArticle"
                ],
                "@id": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/#article",
                "identifier": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/",
                "url": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/",
                "headline": "Review Azure control-plane implications before a Windows Server in-place upgrade",
                "description": "DSE recommends documenting the update capabilities the workload needs before selecting an upgrade method.",
                "abstract": "DSE recommends documenting the update capabilities the workload needs before selecting an upgrade method.",
                "articleBody": "Source facts\nMicrosoft cautions that an in-place Windows Server upgrade leaves the VM’s source-image properties, including publisher, offer, and plan, unchanged. The same warning says automatic guest patching, automatic OS image upgrades, Hotpatching, and Azure Update Manager are not officially supported with this process and can fail. Microsoft Learn\nApplicability\nUse this review before choosing an in-place Windows Server upgrade for an Azure VM whose operational plan depends on Azure-managed update capabilities.\nDSE recommendation\nDSE recommends documenting the update capabilities the workload needs before selecting an upgrade method. Compare those requirements with the source warning, and ask the service owner to decide whether deploying a new VM is the appropriate route. If an in-place upgrade remains under consideration, record the resulting management limitation explicitly alongside the recovery plan and application compatibility review. Do not use the guest version alone to describe the platform configuration.\nVerification\nInspect both the guest OS version and the Azure source-image properties after any approved test. Review each required management capability against the documented support boundary and the selected deployment method. Keep a successful OS installation separate from operational acceptance, and leave unsupported dependencies unresolved until the service owner chooses a supported design.\nOfficial references\n\nMicrosoft: Windows in-place upgrade – Azure Virtual Machines | Microsoft Learn",
                "datePublished": "2026-09-17T16:34:22+00:00",
                "dateModified": "2026-09-17T16:35:04+00:00",
                "mainEntityOfPage": {
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/"
                },
                "inLanguage": "en-US",
                "isAccessibleForFree": true,
                "author": {
                    "@type": "Organization",
                    "name": "DSE Security Editorial Team",
                    "url": "https://update.dsesecurity.com/#editorial-team"
                },
                "publisher": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "image": {
                    "@type": "ImageObject",
                    "@id": "https://update.dsesecurity.com/updates/dse-20260917-038-review-azure-control-plane-implications-before-a-windows-server-in-place-upgrade/#primaryimage",
                    "url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
                    "contentUrl": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20",
                    "width": 1200,
                    "height": 630,
                    "caption": "Review Azure control-plane implications before a Windows Server in-place upgrade"
                },
                "articleSection": [
                    "IT"
                ],
                "keywords": [
                    "IT",
                    "Guide",
                    "Information priority"
                ],
                "genre": "Guide",
                "about": [
                    {
                        "@type": "Thing",
                        "name": "IT",
                        "url": "https://update.dsesecurity.com/topic/it/"
                    }
                ],
                "wordCount": 210,
                "timeRequired": "PT1M",
                "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/",
                "usageInfo": "https://update.dsesecurity.com/usage/",
                "copyrightHolder": {
                    "@id": "https://dsesecurity.com/#organization"
                },
                "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.",
                "citation": {
                    "@type": "CreativeWork",
                    "name": "Windows in-place upgrade - Azure Virtual Machines | Microsoft Learn",
                    "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/windows-in-place-upgrade"
                }
            }
        ]
    }
}