/
Guest configuration extension should be installed on your machines
Guest configuration extension should be installed on your machines
Description:
According to Microsoft:
Azure Policy can audit settings inside a machine, both for machines running in Azure and Arc Connected Machines. The validation is performed by the Guest Configuration extension and client. The extension, through the client, validates settings such as:
The configuration of the operating system
Application configuration or presence
Environment settings
At this time, most Azure Policy Guest Configuration policy definitions only audit settings inside the machine. They don't apply configurations.
Solution/Reference:
Please learn more about how to configure this extension here:
https://docs.microsoft.com/en-us/azure/governance/policy/concepts/guest-configuration
, multiple selections available,
Related content
Virtual Machines' Guest Configuration Extension Should be Deployed with System-Assigned Managed Identity
Virtual Machines' Guest Configuration Extension Should be Deployed with System-Assigned Managed Identity
More like this
Windows Defender Exploit Guard Should be Enabled on Your Machines
Windows Defender Exploit Guard Should be Enabled on Your Machines
More like this
Guest Attestation Extension Should be Installed on XYZ
Guest Attestation Extension Should be Installed on XYZ
More like this
Vulnerabilities in Security Configuration on your Machines Should be Remediated
Vulnerabilities in Security Configuration on your Machines Should be Remediated
More like this
Auto Provisioning of the Log Analytics Agent Should be Enabled on Your Subscription
Auto Provisioning of the Log Analytics Agent Should be Enabled on Your Subscription
More like this
File Integrity Monitoring Should be Enabled on Servers
File Integrity Monitoring Should be Enabled on Servers
More like this