EDS Enterprise Windows update, system upgrade, patch management, WSUS configuration-Elastic Desktop Service-阿里云帮助中心

The Windows update service for Elastic Desktop Service (EDS) Enterprise validates official Microsoft updates through an internal Alibaba Cloud WSUS server and blocks high-risk patches that may cause system instability, ensuring security without update-related downtime.

Limitations

This feature is supported only on Windows Server 2022/2019 images of version 2.10.0 or later.

For Elastic Desktop Service cloud computers, the console does not currently support directly disabling system patch updates in batches for all users. If you must keep cloud computers on a specific patch level, use one of the following alternatives:

Group policy (GPO): For cloud computers joined to an AD domain, use a group policy object to disable updates in batches.
Image standardization: Disable the update service and scheduled tasks in a custom image so that cloud computers created from the image retain a specific version.
Batch command execution: Use a management tool to push a script that disables updates to all existing cloud computers.

Enable Windows updates

After you configure and enable Windows updates, update options appear when eligible cloud computers shut down or restart.

Log on to the EDS enterprise console.
In the left-side navigation pane, choose Resources > Cloud Computers.
In the top navigation bar, select a region.
Enable Windows updates for one or more cloud computers.

Single cloud computer

On the Elastic Desktop Service (EDS) Enterprise page, find the target cloud computer. In the Actions column, click More and select Configure Windows Updates.

Multiple cloud computers

On the Elastic Desktop Service (EDS) Enterprise page, select the target cloud computers. In the lower-left corner, choose More > Configure Windows Updates.

In the Configure Windows Updates panel, enable Accept Windows Updates and then configure the following options.

Option	Description
Set Intranet update server to detect updates	The server that detects updates. Defaults to the Alibaba Cloud intranet update server. Customizable.
Set Intranet statistics server	The server that collects update statistics. Defaults to the Alibaba Cloud intranet statistics server. Customizable.
Always override the user-specified intranet Microsoft update service location	Selected by default. The specified location overrides any user-configured update service location on cloud computers.

Note

Click Restore to Default Location to reset the intranet update server and intranet statistics server to the default Alibaba Cloud WSUS server.

Click OK.

Test connectivity to the update server

Run one of the following commands on a cloud computer to test connectivity to the update server. Replace the URL with your actual update server address.

CMD

Prerequisite: Enable Telnet Client in Turn Windows features on or off.

telnet update.cloud.aliyuncs.com 80

PowerShell

Test-NetConnection -ComputerName update.cloud.aliyuncs.com -Port 80

Update Windows

Prerequisite: The cloud computer must be in the running state. Shut down or hibernating cloud computers cannot receive updates.

Log on to the EDS enterprise console.
In the left-side navigation pane, choose Resources > Cloud Computers.
In the top navigation bar, select a region.
Update Windows for one or more cloud computers.

Note
For eligible cloud computers, update options appear upon shutdown or restart. The specific options vary. The following steps use update and restart as an example.

Single cloud computer

On the Elastic Desktop Service (EDS) Enterprise page, find the target cloud computer. In the Restart column, click restart, select OK, and then click OK.

Multiple cloud computers

On the Elastic Desktop Service (EDS) Enterprise page, select the target cloud computers. In the lower-left corner, click Restart. In the dialog box that appears, select Update and restart, and then click OK.

FAQ

Must I install system updates when a cloud computer prompts me?

No. Windows updates are not mandatory, and you can decide whether to install them based on your needs. Before you install an update, back up your data or create an image to help prevent data loss if an exception occurs.

How can I stop or cancel automatic Windows updates for a cloud computer?

Elastic Desktop Service currently provides no direct switch to stop Windows updates. Schedule manual updates at a time that does not affect your business, or do not select an update option when one appears. If you need to address the current update state, first create an up-to-date image to back up your data, and then roll back the cloud computer.

Does the 30-minute inactivity hibernation policy apply while Windows updates are installed?

No. Windows updates are not affected by the 30-minute inactivity hibernation policy. The policy does not interrupt an update or damage the system. If you expect a major update to take a long time, temporarily extend the hibernation period in the console to a value such as two hours. Restore the original setting after the update completes.

What should I do if a cloud computer remains in Updating or displays a loading spinner that prevents operation?

Installing Windows patches can take a long time, similar to updating a personal computer. This is normal. Wait patiently, refresh the console to check the status, or reconnect and sign in to the cloud computer.

If you urgently need to restore access, try Restart. If the cloud computer does not recover after you wait, or it fails to start and changes to the stopped state, submit feedback for further troubleshooting. Do not manually restart the cloud computer immediately after it starts. Perform updates during off-peak hours and make sure that your data has been saved.

What should I do if a cloud computer remains in the shut-down state for a long time after an update restart?

The shut-down process after a system update can take 10 to 20 minutes, which is normal. Wait for that period before you investigate further. If the process exceeds that period or the status remains abnormal, continue troubleshooting.

Why does a Windows 11 cloud computer restart unexpectedly?

Under normal circumstances, a Windows 11 cloud computer does not restart automatically. Possible causes include an administrator-configured scheduled restart policy, a remote restart command, conflicts with security software, insufficient disk space, or other system exceptions. Check the relevant policies and the system exception logs to identify the cause.

How do I recover a cloud computer that is stuck on the recovery page after a lengthy Windows update triggers a forced power-off?

This issue can occur when a lengthy Windows update causes the management system to force the cloud computer to power off, which leaves the next startup stuck on the recovery page. The product team has incorporated an optimization for this issue and plans to fix it in a later version. To track the repair progress, follow the release notes and announcements in the product documentation.

What should I do if the Chinese language pack download fails or its progress stalls during a Windows update?

Restart the cloud computer and check the network quality.
Make sure that the cloud computer can connect to Windows Update servers. If the cloud computer is on an intranet or subject to firewall restrictions, manually download an offline language pack.
Sign in to the cloud computer with an administrator account and choose Settings (Win+I) > Time & language > Language > Add a language. Search for Chinese, select Install language pack and Set as my Windows display language, and then install the language pack.