AzPolicyAdvertizer

last sync: 2025-Oct-31 18:22:59 UTC

Deploy Windows Domain Join Extension with keyvault configuration

Source

Repository Azure Landing Zones (ALZ) GitHub
JSON Deploy-Windows-DomainJoin

Display name

Deploy Windows Domain Join Extension with keyvault configuration

Deploy-Windows-DomainJoin

Version

Category

Guest Configuration

Description

Deploy Windows Domain Join Extension with keyvault configuration when the extension does not exist on a given windows Virtual Machine

Cloud environments

AzureChinaCloud
AzureCloud
AzureUSGovernment

Mode

Indexed

Type

Custom Azure Landing Zones (ALZ)

Preview

False

Deprecated

False

Effect

Default
DeployIfNotExists
Allowed
DeployIfNotExists, Disabled

RBAC role(s)

Role Name	Role Id
Virtual Machine Contributor	9980e02c-c2be-4d73-94e8-173b1dc7cf3c
Key Vault Secrets User	4633458b-17de-408a-b874-0445c86b69e6

Rule aliases

IF (3)

Alias	Namespace	ResourceType	Path	PathIsDefault	Modifiable
Microsoft.Compute/imageOffer	Microsoft.Compute Microsoft.Compute Microsoft.Compute	virtualMachines virtualMachineScaleSets disks	properties.storageProfile.imageReference.offer properties.virtualMachineProfile.storageProfile.imageReference.offer properties.creationData.imageReference.id	True True True	False False False
Microsoft.Compute/imagePublisher	Microsoft.Compute Microsoft.Compute Microsoft.Compute	virtualMachines virtualMachineScaleSets disks	properties.storageProfile.imageReference.publisher properties.virtualMachineProfile.storageProfile.imageReference.publisher properties.creationData.imageReference.id	True True True	False False False
Microsoft.Compute/imageSku	Microsoft.Compute Microsoft.Compute Microsoft.Compute	virtualMachines virtualMachineScaleSets disks	properties.storageProfile.imageReference.sku properties.virtualMachineProfile.storageProfile.imageReference.sku properties.creationData.imageReference.id	True True True	False False False

THEN-ExistenceCondition (2)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.Compute/virtualMachines/extensions/publisher	Microsoft.Compute	virtualMachines/extensions	properties.publisher	True		False
Microsoft.Compute/virtualMachines/extensions/type	Microsoft.Compute	virtualMachines/extensions	properties.type	True		False

Rule resource types

IF (1)
Microsoft.Compute/virtualMachines
THEN-Deployment (1)
Microsoft.Compute/virtualMachines/extensions

Initiatives usage

none

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2025-09-01 17:23:01	change	Minor (1.0.0 > 1.1.0)

JSON compare

compare mode: version left: version right:

JSON

EPAC