last sync: 2020-Sep-24 14:01:32 UTC

Azure Policy

Audit Windows machines that are not set to the specified time zone

Policy DisplayName Audit Windows machines that are not set to the specified time zone
Policy Id c633f6a2-7f8b-4d9e-9456-02f0f04f5505
Policy Category Guest Configuration
Policy Description Requires that prerequisites are deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines are non-compliant if the value of the property StandardName in WMI class Win32_TimeZone does not match the selected time zone for the policy parameter.
Policy Mode Indexed
Policy Type BuiltIn
Policy in Preview FALSE
Policy Deprecated FALSE
Policy Effect Fixed: auditIfNotExists
Roles used none
Policy Changes
Date/Time (UTC ymd) (i) Change Change detail
2020-09-09 11:24:03 add: Policy c633f6a2-7f8b-4d9e-9456-02f0f04f5505
Used in Policy Initiative(s) none
Policy Rule
{
  "properties": {
    "displayName": "Audit Windows machines that are not set to the specified time zone",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Requires that prerequisites are deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines are non-compliant if the value of the property StandardName in WMI class Win32_TimeZone does not match the selected time zone for the policy parameter.",
    "metadata": {
      "category": "Guest Configuration",
      "version": "1.0.0",
      "requiredProviders": [
        "Microsoft.GuestConfiguration"
      ],
      "guestConfiguration": {
        "name": "WindowsTimeZone",
        "version": "1.*",
        "configurationParameter": {
        "TimeZone": "[WindowsTimeZone]WindowsTimeZone1;TimeZone"
        }
      }
    },
    "parameters": {
      "IncludeArcMachines": {
        "type": "String",
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine."
        },
        "allowedValues": [
          "true",
          "false"
        ],
        "defaultValue": "false"
      },
      "TimeZone": {
        "type": "String",
        "metadata": {
          "displayName": "Time zone",
          "description": "The expected time zone"
        },
        "allowedValues": [
          "(UTC-12:00) International Date Line West",
          "(UTC-11:00) Coordinated Universal Time-11",
          "(UTC-10:00) Aleutian Islands",
          "(UTC-10:00) Hawaii",
          "(UTC-09:30) Marquesas Islands",
          "(UTC-09:00) Alaska",
          "(UTC-09:00) Coordinated Universal Time-09",
          "(UTC-08:00) Baja California",
          "(UTC-08:00) Coordinated Universal Time-08",
          "(UTC-08:00) Pacific Time (US & Canada)",
          "(UTC-07:00) Arizona",
          "(UTC-07:00) Chihuahua, La Paz, Mazatlan",
          "(UTC-07:00) Mountain Time (US & Canada)",
          "(UTC-06:00) Central America",
          "(UTC-06:00) Central Time (US & Canada)",
          "(UTC-06:00) Easter Island",
          "(UTC-06:00) Guadalajara, Mexico City, Monterrey",
          "(UTC-06:00) Saskatchewan",
          "(UTC-05:00) Bogota, Lima, Quito, Rio Branco",
          "(UTC-05:00) Chetumal",
          "(UTC-05:00) Eastern Time (US & Canada)",
          "(UTC-05:00) Haiti",
          "(UTC-05:00) Havana",
          "(UTC-05:00) Indiana (East)",
          "(UTC-05:00) Turks and Caicos",
          "(UTC-04:00) Asuncion",
          "(UTC-04:00) Atlantic Time (Canada)",
          "(UTC-04:00) Caracas",
          "(UTC-04:00) Cuiaba",
          "(UTC-04:00) Georgetown, La Paz, Manaus, San Juan",
          "(UTC-04:00) Santiago",
          "(UTC-03:30) Newfoundland",
          "(UTC-03:00) Araguaina",
          "(UTC-03:00) Brasilia",
          "(UTC-03:00) Cayenne, Fortaleza",
          "(UTC-03:00) City of Buenos Aires",
          "(UTC-03:00) Greenland",
          "(UTC-03:00) Montevideo",
          "(UTC-03:00) Punta Arenas",
          "(UTC-03:00) Saint Pierre and Miquelon",
          "(UTC-03:00) Salvador",
          "(UTC-02:00) Coordinated Universal Time-02",
          "(UTC-02:00) Mid-Atlantic - Old",
          "(UTC-01:00) Azores",
          "(UTC-01:00) Cabo Verde Is.",
          "(UTC) Coordinated Universal Time",
          "(UTC+00:00) Dublin, Edinburgh, Lisbon, London",
          "(UTC+00:00) Monrovia, Reykjavik",
          "(UTC+00:00) Sao Tome",
          "(UTC+01:00) Casablanca",
          "(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna",
          "(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague",
          "(UTC+01:00) Brussels, Copenhagen, Madrid, Paris",
          "(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb",
          "(UTC+01:00) West Central Africa",
          "(UTC+02:00) Amman",
          "(UTC+02:00) Athens, Bucharest",
          "(UTC+02:00) Beirut",
          "(UTC+02:00) Cairo",
          "(UTC+02:00) Chisinau",
          "(UTC+02:00) Damascus",
          "(UTC+02:00) Gaza, Hebron",
          "(UTC+02:00) Harare, Pretoria",
          "(UTC+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius",
          "(UTC+02:00) Jerusalem",
          "(UTC+02:00) Kaliningrad",
          "(UTC+02:00) Khartoum",
          "(UTC+02:00) Tripoli",
          "(UTC+02:00) Windhoek",
          "(UTC+03:00) Baghdad",
          "(UTC+03:00) Istanbul",
          "(UTC+03:00) Kuwait, Riyadh",
          "(UTC+03:00) Minsk",
          "(UTC+03:00) Moscow, St. Petersburg",
          "(UTC+03:00) Nairobi",
          "(UTC+03:30) Tehran",
          "(UTC+04:00) Abu Dhabi, Muscat",
          "(UTC+04:00) Astrakhan, Ulyanovsk",
          "(UTC+04:00) Baku",
          "(UTC+04:00) Izhevsk, Samara",
          "(UTC+04:00) Port Louis",
          "(UTC+04:00) Saratov",
          "(UTC+04:00) Tbilisi",
          "(UTC+04:00) Volgograd",
          "(UTC+04:00) Yerevan",
          "(UTC+04:30) Kabul",
          "(UTC+05:00) Ashgabat, Tashkent",
          "(UTC+05:00) Ekaterinburg",
          "(UTC+05:00) Islamabad, Karachi",
          "(UTC+05:00) Qyzylorda",
          "(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi",
          "(UTC+05:30) Sri Jayawardenepura",
          "(UTC+05:45) Kathmandu",
          "(UTC+06:00) Astana",
          "(UTC+06:00) Dhaka",
          "(UTC+06:00) Omsk",
          "(UTC+06:30) Yangon (Rangoon)",
          "(UTC+07:00) Bangkok, Hanoi, Jakarta",
          "(UTC+07:00) Barnaul, Gorno-Altaysk",
          "(UTC+07:00) Hovd",
          "(UTC+07:00) Krasnoyarsk",
          "(UTC+07:00) Novosibirsk",
          "(UTC+07:00) Tomsk",
          "(UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi",
          "(UTC+08:00) Irkutsk",
          "(UTC+08:00) Kuala Lumpur, Singapore",
          "(UTC+08:00) Perth",
          "(UTC+08:00) Taipei",
          "(UTC+08:00) Ulaanbaatar",
          "(UTC+08:45) Eucla",
          "(UTC+09:00) Chita",
          "(UTC+09:00) Osaka, Sapporo, Tokyo",
          "(UTC+09:00) Pyongyang",
          "(UTC+09:00) Seoul",
          "(UTC+09:00) Yakutsk",
          "(UTC+09:30) Adelaide",
          "(UTC+09:30) Darwin",
          "(UTC+10:00) Brisbane",
          "(UTC+10:00) Canberra, Melbourne, Sydney",
          "(UTC+10:00) Guam, Port Moresby",
          "(UTC+10:00) Hobart",
          "(UTC+10:00) Vladivostok",
          "(UTC+10:30) Lord Howe Island",
          "(UTC+11:00) Bougainville Island",
          "(UTC+11:00) Chokurdakh",
          "(UTC+11:00) Magadan",
          "(UTC+11:00) Norfolk Island",
          "(UTC+11:00) Sakhalin",
          "(UTC+11:00) Solomon Is., New Caledonia",
          "(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky",
          "(UTC+12:00) Auckland, Wellington",
          "(UTC+12:00) Coordinated Universal Time+12",
          "(UTC+12:00) Fiji",
          "(UTC+12:00) Petropavlovsk-Kamchatsky - Old",
          "(UTC+12:45) Chatham Islands",
          "(UTC+13:00) Coordinated Universal Time+13",
          "(UTC+13:00) Nuku'alofa",
          "(UTC+13:00) Samoa",
          "(UTC+14:00) Kiritimati Island"
        ]
      }
    },
    "policyRule": {
      "if": {
        "anyOf": [
          {
            "allOf": [
              {
                "field": "type",
                "equals": "Microsoft.Compute/virtualMachines"
              },
              {
                "anyOf": [
                  {
                    "field": "Microsoft.Compute/imagePublisher",
                    "in": [
                      "esri",
                      "incredibuild",
                      "MicrosoftDynamicsAX",
                      "MicrosoftSharepoint",
                      "MicrosoftVisualStudio",
                      "MicrosoftWindowsDesktop",
                      "MicrosoftWindowsServerHPCPack"
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "MicrosoftWindowsServer"
                      },
                      {
                        "field": "Microsoft.Compute/imageSKU",
                        "notLike": "2008*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "MicrosoftSQLServer"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "notLike": "SQL2008*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "microsoft-dsvm"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "equals": "dsvm-windows"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "microsoft-ads"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "in": [
                          "standard-data-science-vm",
                          "windows-data-science-vm"
                        ]
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "batch"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "equals": "rendering-windows2016"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "center-for-internet-security-inc"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "like": "cis-windows-server-201*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "pivotal"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "like": "bosh-windows-server*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "cloud-infrastructure-services"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "like": "ad*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "anyOf": [
                          {
                            "field": "Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration",
                            "exists": "true"
                          },
                          {
                            "field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
                            "like": "Windows*"
                          }
                        ]
                      },
                      {
                        "anyOf": [
                          {
                            "field": "Microsoft.Compute/imageSKU",
                            "exists": "false"
                          },
                          {
                            "allOf": [
                              {
                                "field": "Microsoft.Compute/imageSKU",
                                "notLike": "2008*"
                              },
                              {
                                "field": "Microsoft.Compute/imageOffer",
                                "notLike": "SQL2008*"
                              }
                            ]
                          }
                        ]
                      }
                    ]
                  }
                ]
              }
            ]
          },
          {
            "allOf": [
              {
              "value": "[parameters('IncludeArcMachines')]",
                "equals": "true"
              },
              {
                "field": "type",
                "equals": "Microsoft.HybridCompute/machines"
              },
              {
                "field": "Microsoft.HybridCompute/imageOffer",
                "like": "windows*"
              }
            ]
          }
        ]
      },
      "then": {
        "effect": "auditIfNotExists",
        "details": {
          "type": "Microsoft.GuestConfiguration/guestConfigurationAssignments",
          "name": "WindowsTimeZone",
          "existenceCondition": {
            "allOf": [
              {
                "field": "Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus",
                "equals": "Compliant"
              },
              {
                "field": "Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash",
              "equals": "[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', '=', parameters('TimeZone')))]"
              }
            ]
          }
        }
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "c633f6a2-7f8b-4d9e-9456-02f0f04f5505"
}