What you need to know
DSE recommends documenting the update capabilities the workload needs before selecting an upgrade method.
Potentially affected
Use this review before choosing an in-place Windows Server upgrade for an Azure VM whose operational plan depends on Azure-managed update capabilities.
DSE recommendation
DSE recommends documenting the update capabilities the workload needs before selecting an upgrade method.
Source facts
Microsoft cautions that an in-place Windows Server upgrade leaves the VM’s source-image properties, including publisher, offer, and plan, unchanged. The same warning says automatic guest patching, automatic OS image upgrades, Hotpatching, and Azure Update Manager are not officially supported with this process and can fail. Microsoft Learn
Applicability
Use this review before choosing an in-place Windows Server upgrade for an Azure VM whose operational plan depends on Azure-managed update capabilities.
DSE recommendation
DSE recommends documenting the update capabilities the workload needs before selecting an upgrade method. Compare those requirements with the source warning, and ask the service owner to decide whether deploying a new VM is the appropriate route. If an in-place upgrade remains under consideration, record the resulting management limitation explicitly alongside the recovery plan and application compatibility review. Do not use the guest version alone to describe the platform configuration.
Verification
Inspect both the guest OS version and the Azure source-image properties after any approved test. Review each required management capability against the documented support boundary and the selected deployment method. Keep a successful OS installation separate from operational acceptance, and leave unsupported dependencies unresolved until the service owner chooses a supported design.
Official references
Review the official source
Windows in-place upgrade - Azure Virtual Machines | Microsoft Learn · Verified September 17, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE