[Deprecated]: Show audit results from Windows VMs that do not have the password complexity setting enabled

Azure BuiltIn Policy definition

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.Compute/imageOffer

Microsoft.Compute
Microsoft.Compute
Microsoft.Compute

virtualMachines
virtualMachineScaleSets
disks

properties.storageProfile.imageReference.offer
properties.virtualMachineProfile.storageProfile.imageReference.offer
properties.creationData.imageReference.id

True
True
True

False
False
False

Microsoft.Compute/imagePublisher

Microsoft.Compute
Microsoft.Compute
Microsoft.Compute

virtualMachines
virtualMachineScaleSets
disks

properties.storageProfile.imageReference.publisher
properties.virtualMachineProfile.storageProfile.imageReference.publisher
properties.creationData.imageReference.id

True
True
True

False
False
False

Microsoft.Compute/imageSKU

Microsoft.Compute
Microsoft.Compute
Microsoft.Compute

virtualMachines
virtualMachineScaleSets
disks

properties.storageProfile.imageReference.sku
properties.virtualMachineProfile.storageProfile.imageReference.sku
properties.creationData.imageReference.id

True
True
True

False
False
False

Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration

Microsoft.Compute

virtualMachines

properties.osProfile.windowsConfiguration

True

Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType

Microsoft.Compute

virtualMachines

properties.storageProfile.osDisk.osType

True

Microsoft.HybridCompute/imageOffer

Microsoft.HybridCompute

machines

properties.osName

True

False

Alias

Namespace

ResourceType

Path

PathIsDefault

DefaultPath

Modifiable

Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus

Microsoft.GuestConfiguration

guestConfigurationAssignments

properties.complianceStatus

True

False

Rows: 1-1 / 1

Records:

Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more

TableFilter v0.7.3

https://www.tablefilter.com/
©2015-2025 Max Guglielmi

Page of 1

Initiative DisplayName

Initiative Id

Initiative Category

State

Type

polSet in AzUSGov

[Deprecated]: Audit VMs with insecure password security settings

3fa7cbf5-c0a4-4a59-85a5-cca4d996d5a6

Guest Configuration

Deprecated

BuiltIn

true

Date/Time (UTC ymd) (i)

Change type

Change detail

2020-09-09 11:24:03

change

Previous DisplayName: Show audit results from Windows VMs that do not have the password complexity setting enabled

2020-06-09 16:25:53

change

Previous DisplayName: [Preview]: Show audit results from Windows VMs that do not have the password complexity setting enabled

{

displayName: "[Deprecated]: Show audit results from Windows VMs that do not have the password complexity setting enabled",
policyType: "BuiltIn",
mode: "All",
description: "This policy should only be used along with its corresponding deploy policy in an initiative. This definition allows Azure Policy to process the results of auditing Windows virtual machines that do not have the password complexity setting enabled. For more information on Guest Configuration policies, please visit https://aka.ms/gcpol",
metadata: {3 items
- version: "1.0.0-deprecated",
- category: "Guest Configuration",
- deprecated: true
},
policyRule: {2 items
- if: {1 item
  - anyOf: [2 items
    - {1 item
      - allOf: [2 items
        {2 items
        field: "type",
        equals: "Microsoft.Compute/virtualMachines"
        },
        {1 item
        anyOf: [10 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        in: [7 items
        "esri",
        "incredibuild",
        "MicrosoftDynamicsAX",
        "MicrosoftSharepoint",
        "MicrosoftVisualStudio",
        "MicrosoftWindowsDesktop",
        "MicrosoftWindowsServerHPCPack"
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "MicrosoftWindowsServer"
        },
        {2 items
        field: "Microsoft.Compute/imageSKU",
        notLike: "2008*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "MicrosoftSQLServer"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        notLike: "SQL2008*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "microsoft-dsvm"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        equals: "dsvm-windows"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "microsoft-ads"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        in: [2 items
        "standard-data-science-vm",
        "windows-data-science-vm"
        ]
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "batch"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        equals: "rendering-windows2016"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "center-for-internet-security-inc"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        like: "cis-windows-server-201*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "pivotal"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        like: "bosh-windows-server*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imagePublisher",
        equals: "cloud-infrastructure-services"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        like: "ad*"
        }
        ]
        },
        {1 item
        allOf: [2 items
        {1 item
        anyOf: [2 items
        {2 items
        field: "Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration",
        exists: "true"
        },
        {2 items
        field: "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
        like: "Windows*"
        }
        ]
        },
        {1 item
        anyOf: [2 items
        {2 items
        field: "Microsoft.Compute/imageSKU",
        exists: "false"
        },
        {1 item
        allOf: [2 items
        {2 items
        field: "Microsoft.Compute/imageSKU",
        notLike: "2008*"
        },
        {2 items
        field: "Microsoft.Compute/imageOffer",
        notLike: "SQL2008*"
        }
        ]
        }
        ]
        }
        ]
        }
        ]
        }
        ]
      },
    - {1 item
      - allOf: [2 items
        {2 items
        field: "type",
        equals: "Microsoft.HybridCompute/machines"
        },
        {2 items
        field: "Microsoft.HybridCompute/imageOffer",
        like: "windows*"
        }
        ]
      }
    ]
  },
- then: {2 items
  - effect: "auditIfNotExists",
  - details: {3 items
    - type: "Microsoft.GuestConfiguration/guestConfigurationAssignments",
    - name: "PasswordMustMeetComplexityRequirements",
    - existenceCondition: {2 items
      - field: "Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus",
      - equals: "Compliant"
      }
    }
  }
}

}