last sync: 2020-Sep-18 14:08:07 UTC

Azure Policy

[Deprecated]: Deploy prerequisites to audit Windows VMs that are not set to the specified time zone

Policy DisplayName [Deprecated]: Deploy prerequisites to audit Windows VMs that are not set to the specified time zone
Policy Id c21f7060-c148-41cf-a68b-0ab3e14c764c
Policy Category Guest Configuration
Policy Description This policy creates a Guest Configuration assignment to audit Windows virtual machines that are not set to the specified time zone. It also creates a system-assigned managed identity and deploys the VM extension for Guest Configuration. This policy should only be used along with its corresponding audit policy in an initiative. For more information on Guest Configuration policies, please visit https://aka.ms/gcpol
Policy Mode Indexed
Policy Type BuiltIn
Policy in Preview FALSE
Policy Deprecated True
Policy Effect Fixed: deployIfNotExists
Roles used
Role Name Role Id
Contributor b24988ac-6180-42a0-ab88-20f7382dd24c
Policy Changes
Date/Time (UTC ymd) (i) Change Change detail
2020-09-09 11:24:03 change: DisplayName previous DisplayName: Deploy prerequisites to audit Windows VMs that are not set to the specified time zone
Used in Policy Initiative(s)
Initiative DisplayName Initiative Id
[Deprecated]: Audit Windows VMs that are not set to the specified time zone 538942d3-3fae-4fb6-9d94-744f9a51e7da
Policy Rule
{
  "properties": {
  "displayName": "[Deprecated]: Deploy prerequisites to audit Windows VMs that are not set to the specified time zone",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "This policy creates a Guest Configuration assignment to audit Windows virtual machines that are not set to the specified time zone. It also creates a system-assigned managed identity and deploys the VM extension for Guest Configuration. This policy should only be used along with its corresponding audit policy in an initiative. For more information on Guest Configuration policies, please visit https://aka.ms/gcpol",
    "metadata": {
      "version": "1.2.0-deprecated",
      "category": "Guest Configuration",
      "requiredProviders": [
        "Microsoft.GuestConfiguration"
      ],
      "deprecated": true
    },
    "parameters": {
      "TimeZone": {
        "type": "String",
        "metadata": {
        "displayName": "[Deprecated]: Time zone",
          "description": "The expected time zone"
        },
        "allowedValues": [
          "(UTC-12:00) International Date Line West",
          "(UTC-11:00) Coordinated Universal Time-11",
          "(UTC-10:00) Aleutian Islands",
          "(UTC-10:00) Hawaii",
          "(UTC-09:30) Marquesas Islands",
          "(UTC-09:00) Alaska",
          "(UTC-09:00) Coordinated Universal Time-09",
          "(UTC-08:00) Baja California",
          "(UTC-08:00) Coordinated Universal Time-08",
          "(UTC-08:00) Pacific Time (US & Canada)",
          "(UTC-07:00) Arizona",
          "(UTC-07:00) Chihuahua, La Paz, Mazatlan",
          "(UTC-07:00) Mountain Time (US & Canada)",
          "(UTC-06:00) Central America",
          "(UTC-06:00) Central Time (US & Canada)",
          "(UTC-06:00) Easter Island",
          "(UTC-06:00) Guadalajara, Mexico City, Monterrey",
          "(UTC-06:00) Saskatchewan",
          "(UTC-05:00) Bogota, Lima, Quito, Rio Branco",
          "(UTC-05:00) Chetumal",
          "(UTC-05:00) Eastern Time (US & Canada)",
          "(UTC-05:00) Haiti",
          "(UTC-05:00) Havana",
          "(UTC-05:00) Indiana (East)",
          "(UTC-05:00) Turks and Caicos",
          "(UTC-04:00) Asuncion",
          "(UTC-04:00) Atlantic Time (Canada)",
          "(UTC-04:00) Caracas",
          "(UTC-04:00) Cuiaba",
          "(UTC-04:00) Georgetown, La Paz, Manaus, San Juan",
          "(UTC-04:00) Santiago",
          "(UTC-03:30) Newfoundland",
          "(UTC-03:00) Araguaina",
          "(UTC-03:00) Brasilia",
          "(UTC-03:00) Cayenne, Fortaleza",
          "(UTC-03:00) City of Buenos Aires",
          "(UTC-03:00) Greenland",
          "(UTC-03:00) Montevideo",
          "(UTC-03:00) Punta Arenas",
          "(UTC-03:00) Saint Pierre and Miquelon",
          "(UTC-03:00) Salvador",
          "(UTC-02:00) Coordinated Universal Time-02",
          "(UTC-02:00) Mid-Atlantic - Old",
          "(UTC-01:00) Azores",
          "(UTC-01:00) Cabo Verde Is.",
          "(UTC) Coordinated Universal Time",
          "(UTC+00:00) Dublin, Edinburgh, Lisbon, London",
          "(UTC+00:00) Monrovia, Reykjavik",
          "(UTC+00:00) Sao Tome",
          "(UTC+01:00) Casablanca",
          "(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna",
          "(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague",
          "(UTC+01:00) Brussels, Copenhagen, Madrid, Paris",
          "(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb",
          "(UTC+01:00) West Central Africa",
          "(UTC+02:00) Amman",
          "(UTC+02:00) Athens, Bucharest",
          "(UTC+02:00) Beirut",
          "(UTC+02:00) Cairo",
          "(UTC+02:00) Chisinau",
          "(UTC+02:00) Damascus",
          "(UTC+02:00) Gaza, Hebron",
          "(UTC+02:00) Harare, Pretoria",
          "(UTC+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius",
          "(UTC+02:00) Jerusalem",
          "(UTC+02:00) Kaliningrad",
          "(UTC+02:00) Khartoum",
          "(UTC+02:00) Tripoli",
          "(UTC+02:00) Windhoek",
          "(UTC+03:00) Baghdad",
          "(UTC+03:00) Istanbul",
          "(UTC+03:00) Kuwait, Riyadh",
          "(UTC+03:00) Minsk",
          "(UTC+03:00) Moscow, St. Petersburg",
          "(UTC+03:00) Nairobi",
          "(UTC+03:30) Tehran",
          "(UTC+04:00) Abu Dhabi, Muscat",
          "(UTC+04:00) Astrakhan, Ulyanovsk",
          "(UTC+04:00) Baku",
          "(UTC+04:00) Izhevsk, Samara",
          "(UTC+04:00) Port Louis",
          "(UTC+04:00) Saratov",
          "(UTC+04:00) Tbilisi",
          "(UTC+04:00) Volgograd",
          "(UTC+04:00) Yerevan",
          "(UTC+04:30) Kabul",
          "(UTC+05:00) Ashgabat, Tashkent",
          "(UTC+05:00) Ekaterinburg",
          "(UTC+05:00) Islamabad, Karachi",
          "(UTC+05:00) Qyzylorda",
          "(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi",
          "(UTC+05:30) Sri Jayawardenepura",
          "(UTC+05:45) Kathmandu",
          "(UTC+06:00) Astana",
          "(UTC+06:00) Dhaka",
          "(UTC+06:00) Omsk",
          "(UTC+06:30) Yangon (Rangoon)",
          "(UTC+07:00) Bangkok, Hanoi, Jakarta",
          "(UTC+07:00) Barnaul, Gorno-Altaysk",
          "(UTC+07:00) Hovd",
          "(UTC+07:00) Krasnoyarsk",
          "(UTC+07:00) Novosibirsk",
          "(UTC+07:00) Tomsk",
          "(UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi",
          "(UTC+08:00) Irkutsk",
          "(UTC+08:00) Kuala Lumpur, Singapore",
          "(UTC+08:00) Perth",
          "(UTC+08:00) Taipei",
          "(UTC+08:00) Ulaanbaatar",
          "(UTC+08:45) Eucla",
          "(UTC+09:00) Chita",
          "(UTC+09:00) Osaka, Sapporo, Tokyo",
          "(UTC+09:00) Pyongyang",
          "(UTC+09:00) Seoul",
          "(UTC+09:00) Yakutsk",
          "(UTC+09:30) Adelaide",
          "(UTC+09:30) Darwin",
          "(UTC+10:00) Brisbane",
          "(UTC+10:00) Canberra, Melbourne, Sydney",
          "(UTC+10:00) Guam, Port Moresby",
          "(UTC+10:00) Hobart",
          "(UTC+10:00) Vladivostok",
          "(UTC+10:30) Lord Howe Island",
          "(UTC+11:00) Bougainville Island",
          "(UTC+11:00) Chokurdakh",
          "(UTC+11:00) Magadan",
          "(UTC+11:00) Norfolk Island",
          "(UTC+11:00) Sakhalin",
          "(UTC+11:00) Solomon Is., New Caledonia",
          "(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky",
          "(UTC+12:00) Auckland, Wellington",
          "(UTC+12:00) Coordinated Universal Time+12",
          "(UTC+12:00) Fiji",
          "(UTC+12:00) Petropavlovsk-Kamchatsky - Old",
          "(UTC+12:45) Chatham Islands",
          "(UTC+13:00) Coordinated Universal Time+13",
          "(UTC+13:00) Nuku'alofa",
          "(UTC+13:00) Samoa",
          "(UTC+14:00) Kiritimati Island"
        ]
      }
    },
    "policyRule": {
      "if": {
        "anyOf": [
          {
            "allOf": [
              {
                "field": "type",
                "equals": "Microsoft.Compute/virtualMachines"
              },
              {
                "anyOf": [
                  {
                    "field": "Microsoft.Compute/imagePublisher",
                    "in": [
                      "esri",
                      "incredibuild",
                      "MicrosoftDynamicsAX",
                      "MicrosoftSharepoint",
                      "MicrosoftVisualStudio",
                      "MicrosoftWindowsDesktop",
                      "MicrosoftWindowsServerHPCPack"
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "MicrosoftWindowsServer"
                      },
                      {
                        "field": "Microsoft.Compute/imageSKU",
                        "notLike": "2008*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "MicrosoftSQLServer"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "notLike": "SQL2008*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "microsoft-dsvm"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "equals": "dsvm-windows"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "microsoft-ads"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "in": [
                          "standard-data-science-vm",
                          "windows-data-science-vm"
                        ]
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "batch"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "equals": "rendering-windows2016"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "center-for-internet-security-inc"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "like": "cis-windows-server-201*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "pivotal"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "like": "bosh-windows-server*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "cloud-infrastructure-services"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "like": "ad*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "anyOf": [
                          {
                            "field": "Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration",
                            "exists": "true"
                          },
                          {
                            "field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
                            "like": "Windows*"
                          }
                        ]
                      },
                      {
                        "anyOf": [
                          {
                            "field": "Microsoft.Compute/imageSKU",
                            "exists": "false"
                          },
                          {
                            "allOf": [
                              {
                                "field": "Microsoft.Compute/imageSKU",
                                "notLike": "2008*"
                              },
                              {
                                "field": "Microsoft.Compute/imageOffer",
                                "notLike": "SQL2008*"
                              }
                            ]
                          }
                        ]
                      }
                    ]
                  }
                ]
              }
            ]
          },
          {
            "allOf": [
              {
                "field": "type",
                "equals": "Microsoft.HybridCompute/machines"
              },
              {
                "field": "Microsoft.HybridCompute/imageOffer",
                "like": "windows*"
              }
            ]
          }
        ]
      },
      "then": {
        "effect": "deployIfNotExists",
        "details": {
          "roleDefinitionIds": [
            "/providers/microsoft.authorization/roleDefinitions/b24988ac-6180-42a0-ab88-20f7382dd24c"
          ],
          "type": "Microsoft.GuestConfiguration/guestConfigurationAssignments",
          "name": "WindowsTimeZone",
          "existenceCondition": {
            "field": "Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash",
          "equals": "[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', '=', parameters('TimeZone')))]"
          },
          "deployment": {
            "properties": {
              "mode": "incremental",
              "parameters": {
                "vmName": {
                "value": "[field('name')]"
                },
                "location": {
                "value": "[field('location')]"
                },
                "type": {
                "value": "[field('type')]"
                },
                "configurationName": {
                  "value": "WindowsTimeZone"
                },
                "TimeZone": {
                "value": "[parameters('TimeZone')]"
                }
              },
              "template": {
                "$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
                "contentVersion": "1.0.0.0",
                "parameters": {
                  "vmName": {
                    "type": "string"
                  },
                  "location": {
                    "type": "string"
                  },
                  "type": {
                    "type": "string"
                  },
                  "configurationName": {
                    "type": "string"
                  },
                  "TimeZone": {
                    "type": "string"
                  }
                },
                "resources": [
                  {
                  "condition": "[equals(toLower(parameters('type')), toLower('microsoft.hybridcompute/machines'))]",
                    "apiVersion": "2018-11-20",
                    "type": "Microsoft.HybridCompute/machines/providers/guestConfigurationAssignments",
                  "name": "[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/', parameters('configurationName'))]",
                  "location": "[parameters('location')]",
                    "properties": {
                      "guestConfiguration": {
                      "name": "[parameters('configurationName')]",
                        "version": "1.*",
                        "configurationParameter": [
                          {
                          "name": "[WindowsTimeZone]WindowsTimeZone1;TimeZone",
                          "value": "[parameters('TimeZone')]"
                          }
                        ]
                      }
                    }
                  },
                  {
                  "condition": "[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]",
                    "apiVersion": "2018-11-20",
                    "type": "Microsoft.Compute/virtualMachines/providers/guestConfigurationAssignments",
                  "name": "[concat(parameters('vmName'), '/Microsoft.GuestConfiguration/', parameters('configurationName'))]",
                  "location": "[parameters('location')]",
                    "properties": {
                      "guestConfiguration": {
                      "name": "[parameters('configurationName')]",
                        "version": "1.*",
                        "configurationParameter": [
                          {
                          "name": "[WindowsTimeZone]WindowsTimeZone1;TimeZone",
                          "value": "[parameters('TimeZone')]"
                          }
                        ]
                      }
                    }
                  },
                  {
                  "condition": "[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]",
                    "apiVersion": "2019-07-01",
                    "type": "Microsoft.Compute/virtualMachines",
                    "identity": {
                      "type": "SystemAssigned"
                    },
                  "name": "[parameters('vmName')]",
                  "location": "[parameters('location')]"
                  },
                  {
                  "condition": "[equals(toLower(parameters('type')), toLower('Microsoft.Compute/virtualMachines'))]",
                    "apiVersion": "2019-07-01",
                  "name": "[concat(parameters('vmName'), '/AzurePolicyforWindows')]",
                    "type": "Microsoft.Compute/virtualMachines/extensions",
                  "location": "[parameters('location')]",
                    "properties": {
                      "publisher": "Microsoft.GuestConfiguration",
                      "type": "ConfigurationforWindows",
                      "typeHandlerVersion": "1.1",
                      "autoUpgradeMinorVersion": true,
                      "settings": {
                        
                      },
                      "protectedSettings": {
                        
                      }
                    },
                    "dependsOn": [
                    "[concat('Microsoft.Compute/virtualMachines/',parameters('vmName'),'/providers/Microsoft.GuestConfiguration/guestConfigurationAssignments/',parameters('configurationName'))]"
                    ]
                  }
                ]
              }
            }
          }
        }
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/c21f7060-c148-41cf-a68b-0ab3e14c764c",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "c21f7060-c148-41cf-a68b-0ab3e14c764c"
}