last sync: 2020-Dec-01 15:11:26 UTC

Azure Policy definition

Audit Windows machines that are not set to the specified time zone

Name Audit Windows machines that are not set to the specified time zone
Azure Portal
Id c633f6a2-7f8b-4d9e-9456-02f0f04f5505
Version 1.0.0
details on versioning
Category Guest Configuration
Microsoft docs
Description Requires that prerequisites are deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines are non-compliant if the value of the property StandardName in WMI class Win32_TimeZone does not match the selected time zone for the policy parameter.
Mode Indexed
Type BuiltIn
Preview FALSE
Deprecated FALSE
Effect Fixed: auditIfNotExists
Used RBAC Role none
History
Date/Time (UTC ymd) (i) Change type Change detail
2020-09-09 11:24:03 add c633f6a2-7f8b-4d9e-9456-02f0f04f5505
Used in Initiatives none
Json
{
  "properties": {
    "displayName": "Audit Windows machines that are not set to the specified time zone",
    "policyType": "BuiltIn",
    "mode": "Indexed",
    "description": "Requires that prerequisites are deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol. Machines are non-compliant if the value of the property StandardName in WMI class Win32_TimeZone does not match the selected time zone for the policy parameter.",
    "metadata": {
      "category": "Guest Configuration",
      "version": "1.0.0",
      "requiredProviders": [
        "Microsoft.GuestConfiguration"
      ],
      "guestConfiguration": {
        "name": "WindowsTimeZone",
        "version": "1.*",
        "configurationParameter": {
        "TimeZone": "[WindowsTimeZone]WindowsTimeZone1;TimeZone"
        }
      }
    },
    "parameters": {
      "IncludeArcMachines": {
        "type": "String",
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine."
        },
        "allowedValues": [
          "true",
          "false"
        ],
        "defaultValue": "false"
      },
      "TimeZone": {
        "type": "String",
        "metadata": {
          "displayName": "Time zone",
          "description": "The expected time zone"
        },
        "allowedValues": [
          "(UTC-12:00) International Date Line West",
          "(UTC-11:00) Coordinated Universal Time-11",
          "(UTC-10:00) Aleutian Islands",
          "(UTC-10:00) Hawaii",
          "(UTC-09:30) Marquesas Islands",
          "(UTC-09:00) Alaska",
          "(UTC-09:00) Coordinated Universal Time-09",
          "(UTC-08:00) Baja California",
          "(UTC-08:00) Coordinated Universal Time-08",
          "(UTC-08:00) Pacific Time (US & Canada)",
          "(UTC-07:00) Arizona",
          "(UTC-07:00) Chihuahua, La Paz, Mazatlan",
          "(UTC-07:00) Mountain Time (US & Canada)",
          "(UTC-06:00) Central America",
          "(UTC-06:00) Central Time (US & Canada)",
          "(UTC-06:00) Easter Island",
          "(UTC-06:00) Guadalajara, Mexico City, Monterrey",
          "(UTC-06:00) Saskatchewan",
          "(UTC-05:00) Bogota, Lima, Quito, Rio Branco",
          "(UTC-05:00) Chetumal",
          "(UTC-05:00) Eastern Time (US & Canada)",
          "(UTC-05:00) Haiti",
          "(UTC-05:00) Havana",
          "(UTC-05:00) Indiana (East)",
          "(UTC-05:00) Turks and Caicos",
          "(UTC-04:00) Asuncion",
          "(UTC-04:00) Atlantic Time (Canada)",
          "(UTC-04:00) Caracas",
          "(UTC-04:00) Cuiaba",
          "(UTC-04:00) Georgetown, La Paz, Manaus, San Juan",
          "(UTC-04:00) Santiago",
          "(UTC-03:30) Newfoundland",
          "(UTC-03:00) Araguaina",
          "(UTC-03:00) Brasilia",
          "(UTC-03:00) Cayenne, Fortaleza",
          "(UTC-03:00) City of Buenos Aires",
          "(UTC-03:00) Greenland",
          "(UTC-03:00) Montevideo",
          "(UTC-03:00) Punta Arenas",
          "(UTC-03:00) Saint Pierre and Miquelon",
          "(UTC-03:00) Salvador",
          "(UTC-02:00) Coordinated Universal Time-02",
          "(UTC-02:00) Mid-Atlantic - Old",
          "(UTC-01:00) Azores",
          "(UTC-01:00) Cabo Verde Is.",
          "(UTC) Coordinated Universal Time",
          "(UTC+00:00) Dublin, Edinburgh, Lisbon, London",
          "(UTC+00:00) Monrovia, Reykjavik",
          "(UTC+00:00) Sao Tome",
          "(UTC+01:00) Casablanca",
          "(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna",
          "(UTC+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague",
          "(UTC+01:00) Brussels, Copenhagen, Madrid, Paris",
          "(UTC+01:00) Sarajevo, Skopje, Warsaw, Zagreb",
          "(UTC+01:00) West Central Africa",
          "(UTC+02:00) Amman",
          "(UTC+02:00) Athens, Bucharest",
          "(UTC+02:00) Beirut",
          "(UTC+02:00) Cairo",
          "(UTC+02:00) Chisinau",
          "(UTC+02:00) Damascus",
          "(UTC+02:00) Gaza, Hebron",
          "(UTC+02:00) Harare, Pretoria",
          "(UTC+02:00) Helsinki, Kyiv, Riga, Sofia, Tallinn, Vilnius",
          "(UTC+02:00) Jerusalem",
          "(UTC+02:00) Kaliningrad",
          "(UTC+02:00) Khartoum",
          "(UTC+02:00) Tripoli",
          "(UTC+02:00) Windhoek",
          "(UTC+03:00) Baghdad",
          "(UTC+03:00) Istanbul",
          "(UTC+03:00) Kuwait, Riyadh",
          "(UTC+03:00) Minsk",
          "(UTC+03:00) Moscow, St. Petersburg",
          "(UTC+03:00) Nairobi",
          "(UTC+03:30) Tehran",
          "(UTC+04:00) Abu Dhabi, Muscat",
          "(UTC+04:00) Astrakhan, Ulyanovsk",
          "(UTC+04:00) Baku",
          "(UTC+04:00) Izhevsk, Samara",
          "(UTC+04:00) Port Louis",
          "(UTC+04:00) Saratov",
          "(UTC+04:00) Tbilisi",
          "(UTC+04:00) Volgograd",
          "(UTC+04:00) Yerevan",
          "(UTC+04:30) Kabul",
          "(UTC+05:00) Ashgabat, Tashkent",
          "(UTC+05:00) Ekaterinburg",
          "(UTC+05:00) Islamabad, Karachi",
          "(UTC+05:00) Qyzylorda",
          "(UTC+05:30) Chennai, Kolkata, Mumbai, New Delhi",
          "(UTC+05:30) Sri Jayawardenepura",
          "(UTC+05:45) Kathmandu",
          "(UTC+06:00) Astana",
          "(UTC+06:00) Dhaka",
          "(UTC+06:00) Omsk",
          "(UTC+06:30) Yangon (Rangoon)",
          "(UTC+07:00) Bangkok, Hanoi, Jakarta",
          "(UTC+07:00) Barnaul, Gorno-Altaysk",
          "(UTC+07:00) Hovd",
          "(UTC+07:00) Krasnoyarsk",
          "(UTC+07:00) Novosibirsk",
          "(UTC+07:00) Tomsk",
          "(UTC+08:00) Beijing, Chongqing, Hong Kong, Urumqi",
          "(UTC+08:00) Irkutsk",
          "(UTC+08:00) Kuala Lumpur, Singapore",
          "(UTC+08:00) Perth",
          "(UTC+08:00) Taipei",
          "(UTC+08:00) Ulaanbaatar",
          "(UTC+08:45) Eucla",
          "(UTC+09:00) Chita",
          "(UTC+09:00) Osaka, Sapporo, Tokyo",
          "(UTC+09:00) Pyongyang",
          "(UTC+09:00) Seoul",
          "(UTC+09:00) Yakutsk",
          "(UTC+09:30) Adelaide",
          "(UTC+09:30) Darwin",
          "(UTC+10:00) Brisbane",
          "(UTC+10:00) Canberra, Melbourne, Sydney",
          "(UTC+10:00) Guam, Port Moresby",
          "(UTC+10:00) Hobart",
          "(UTC+10:00) Vladivostok",
          "(UTC+10:30) Lord Howe Island",
          "(UTC+11:00) Bougainville Island",
          "(UTC+11:00) Chokurdakh",
          "(UTC+11:00) Magadan",
          "(UTC+11:00) Norfolk Island",
          "(UTC+11:00) Sakhalin",
          "(UTC+11:00) Solomon Is., New Caledonia",
          "(UTC+12:00) Anadyr, Petropavlovsk-Kamchatsky",
          "(UTC+12:00) Auckland, Wellington",
          "(UTC+12:00) Coordinated Universal Time+12",
          "(UTC+12:00) Fiji",
          "(UTC+12:00) Petropavlovsk-Kamchatsky - Old",
          "(UTC+12:45) Chatham Islands",
          "(UTC+13:00) Coordinated Universal Time+13",
          "(UTC+13:00) Nuku'alofa",
          "(UTC+13:00) Samoa",
          "(UTC+14:00) Kiritimati Island"
        ]
      }
    },
    "policyRule": {
      "if": {
        "anyOf": [
          {
            "allOf": [
              {
                "field": "type",
                "equals": "Microsoft.Compute/virtualMachines"
              },
              {
                "anyOf": [
                  {
                    "field": "Microsoft.Compute/imagePublisher",
                    "in": [
                      "esri",
                      "incredibuild",
                      "MicrosoftDynamicsAX",
                      "MicrosoftSharepoint",
                      "MicrosoftVisualStudio",
                      "MicrosoftWindowsDesktop",
                      "MicrosoftWindowsServerHPCPack"
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "MicrosoftWindowsServer"
                      },
                      {
                        "field": "Microsoft.Compute/imageSKU",
                        "notLike": "2008*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "MicrosoftSQLServer"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "notLike": "SQL2008*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "microsoft-dsvm"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "equals": "dsvm-windows"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "microsoft-ads"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "in": [
                          "standard-data-science-vm",
                          "windows-data-science-vm"
                        ]
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "batch"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "equals": "rendering-windows2016"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "center-for-internet-security-inc"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "like": "cis-windows-server-201*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "pivotal"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "like": "bosh-windows-server*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "field": "Microsoft.Compute/imagePublisher",
                        "equals": "cloud-infrastructure-services"
                      },
                      {
                        "field": "Microsoft.Compute/imageOffer",
                        "like": "ad*"
                      }
                    ]
                  },
                  {
                    "allOf": [
                      {
                        "anyOf": [
                          {
                            "field": "Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration",
                            "exists": "true"
                          },
                          {
                            "field": "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
                            "like": "Windows*"
                          }
                        ]
                      },
                      {
                        "anyOf": [
                          {
                            "field": "Microsoft.Compute/imageSKU",
                            "exists": "false"
                          },
                          {
                            "allOf": [
                              {
                                "field": "Microsoft.Compute/imageSKU",
                                "notLike": "2008*"
                              },
                              {
                                "field": "Microsoft.Compute/imageOffer",
                                "notLike": "SQL2008*"
                              }
                            ]
                          }
                        ]
                      }
                    ]
                  }
                ]
              }
            ]
          },
          {
            "allOf": [
              {
              "value": "[parameters('IncludeArcMachines')]",
                "equals": "true"
              },
              {
                "field": "type",
                "equals": "Microsoft.HybridCompute/machines"
              },
              {
                "field": "Microsoft.HybridCompute/imageOffer",
                "like": "windows*"
              }
            ]
          }
        ]
      },
      "then": {
        "effect": "auditIfNotExists",
        "details": {
          "type": "Microsoft.GuestConfiguration/guestConfigurationAssignments",
          "name": "WindowsTimeZone",
          "existenceCondition": {
            "allOf": [
              {
                "field": "Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus",
                "equals": "Compliant"
              },
              {
                "field": "Microsoft.GuestConfiguration/guestConfigurationAssignments/parameterHash",
              "equals": "[base64(concat('[WindowsTimeZone]WindowsTimeZone1;TimeZone', '=', parameters('TimeZone')))]"
              }
            ]
          }
        }
      }
    }
  },
  "id": "/providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505",
  "type": "Microsoft.Authorization/policyDefinitions",
  "name": "c633f6a2-7f8b-4d9e-9456-02f0f04f5505"
}