[Deprecated]: Show audit results from Windows VMs configurations in 'Security Options - Accounts' - b872a447-cc6f-43b9-bccf-45703cd81607 Azure Policy

[Deprecated]: Show audit results from Windows VMs configurations in 'Security Options - Accounts'

Azure BuiltIn Policy definition

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.Compute/imageOffer

Microsoft.Compute
Microsoft.Compute
Microsoft.Compute

virtualMachines
virtualMachineScaleSets
disks

properties.storageProfile.imageReference.offer
properties.virtualMachineProfile.storageProfile.imageReference.offer
properties.creationData.imageReference.id

True
True
True

False
False
False

Microsoft.Compute/imagePublisher

Microsoft.Compute
Microsoft.Compute
Microsoft.Compute

virtualMachines
virtualMachineScaleSets
disks

properties.storageProfile.imageReference.publisher
properties.virtualMachineProfile.storageProfile.imageReference.publisher
properties.creationData.imageReference.id

True
True
True

False
False
False

Microsoft.Compute/imageSKU

Microsoft.Compute
Microsoft.Compute
Microsoft.Compute

virtualMachines
virtualMachineScaleSets
disks

properties.storageProfile.imageReference.sku
properties.virtualMachineProfile.storageProfile.imageReference.sku
properties.creationData.imageReference.id

True
True
True

False
False
False

Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration

Microsoft.Compute

virtualMachines

properties.osProfile.windowsConfiguration

True

Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType

Microsoft.Compute

virtualMachines

properties.storageProfile.osDisk.osType

True

Microsoft.HybridCompute/imageOffer

Microsoft.HybridCompute

machines

properties.osName

True

False

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus

Microsoft.GuestConfiguration

guestConfigurationAssignments

properties.complianceStatus

True

False

Rows: 1-1 / 1

Records:

Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi

Page of 1

Initiative DisplayName

Initiative Id

Initiative Category

State

Type

polSet in AzUSGov

[Deprecated]: Audit Windows VMs that do not match Azure compute security baseline settings

d618d658-b2d0-410e-9e2e-bfbfd04d09fa

Guest Configuration

Deprecated

BuiltIn

true

Date/Time (UTC ymd) (i)

Change type

Change detail

2020-08-20 14:05:01

change

Previous DisplayName: Show audit results from Windows VMs configurations in 'Security Options - Accounts'

2020-06-09 16:25:53

change

Previous DisplayName: [Preview]: Show audit results from Windows VMs configurations in 'Security Options - Accounts'

{

displayName: "[Deprecated]: Show audit results from Windows VMs configurations in 'Security Options - Accounts'",
policyType: "BuiltIn",
mode: "All",
description: "This policy should only be used along with its corresponding deploy policy in an initiative. This definition allows Azure Policy to process the results of auditing Windows virtual machines with non-compliant settings in Group Policy category: 'Security Options - Accounts'. For more information on Guest Configuration policies, please visit https://aka.ms/gcpol",
metadata: {3 items
- version: "1.0.0-deprecated",
- category: "Guest Configuration",
- deprecated: true
},
policyRule: {2 items
- if: {1 item
  - anyOf: [2 items
    - {1 item
      - allOf: [2 items
        {2 items
        field: "type",
        equals: "Microsoft.Compute/virtualMachines"
        },
        {1 item
        anyOf: [10 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        in: [7 items
        "esri",
        "incredibuild",
        "MicrosoftDynamicsAX",
        "MicrosoftSharepoint",
        "MicrosoftVisualStudio",
        "MicrosoftWindowsDesktop",
        "MicrosoftWindowsServerHPCPack"
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "MicrosoftWindowsServer"
        },
        {2 items
        field: "Microsoft.Compute/imageSKU",
        notLike: "2008*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "MicrosoftSQLServer"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        notLike: "SQL2008*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "microsoft-dsvm"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        equals: "dsvm-windows"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "microsoft-ads"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        in: [2 items
        "standard-data-science-vm",
        "windows-data-science-vm"
        ]
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "batch"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        equals: "rendering-windows2016"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "center-for-internet-security-inc"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        like: "cis-windows-server-201*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "pivotal"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        like: "bosh-windows-server*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "cloud-infrastructure-services"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        like: "ad*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {1 item
        anyOf: [2 items
        {2 items
        field: "Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration",
        exists: "true"
        },
        {2 items
        field: "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
        like: "Windows*"
        }
        ]
        },
        {1 item
        anyOf: [2 items
        {2 items
        field: "Microsoft.Compute/imageSKU",
        exists: "false"
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imageSKU",
        notLike: "2008*"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        notLike: "SQL2008*"
        }
        ]
        }
        ]
        }
        ]
        }
        ]
        }
        ]
      },
    - {1 item
      - allOf: [2 items
        {2 items
        field: "type",
        equals: "Microsoft.HybridCompute/machines"
        },
        {2 items
        field: "Microsoft.HybridCompute/imageOffer",
        like: "windows*"
        }
        ]
      }
    ]
  },
- then: {2 items
  - effect: "auditIfNotExists",
  - details: {3 items
    - type: "Microsoft.GuestConfiguration/guestConfigurationAssignments",
    - name: "AzureBaseline_SecurityOptionsAccounts",
    - existenceCondition: {2 items
      - field: "Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus",
      - equals: "Compliant"
      }
    }
  }
}

}