1. A method to update a virtual machine template, comprising: updating a management policy associated with a virtual machine; starting a virtual machine based on the virtual machine template in a network cordoned sandbox, wherein starting the virtual machine in the network cordoned sandbox configures the virtual machine to access a central policy database and a central file system using a communication gateway; triggering, based on the management policy updating, the virtual machine to update per the updated management policy, wherein a user interface triggers a server automation (SA) agent to initiate the update; saving the virtual machine as an updated virtual machine template, wherein a second virtual machine started based on the updated virtual machine template is in compliance with the management policy; for a second policy of the management policy, determining whether the virtual machine started based on the virtual machine template is compliant with the second policy; and updating the virtual machine per the second policy when the virtual machine is not compliant with the second policy.