AzPolicyAdvertizer

last sync: 2025-Jul-25 17:39:48 UTC

[Deprecated]: Configure supported Windows Arc machines to automatically install the Azure Security agent

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

[Deprecated]: Configure supported Windows Arc machines to automatically install the Azure Security agent

d01f3018-de9f-4d75-8dae-d12c1875da9f

Version

1.1.0-deprecated
Details on versioning

Versioning

Versions supported for Versioning: 2
1.1.0 (1.1.0-deprecated)
1.0.0-preview
Built-in Versioning [Preview]

Category

Security Center
Microsoft Learn

Description

Configure supported Windows Arc machines to automatically install the Azure Security agent. Security Center collects events from the agent and uses them to provide security alerts and tailored hardening tasks (recommendations). Target Windows Arc machines must be in a supported location.

Cloud environments

AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown

Available in AzUSGov

Unknown, no evidence if Policy definition is/not available in AzureUSGovernment

Mode

Indexed

Type

BuiltIn

Preview

False

Deprecated

True

Effect

Default
Disabled
Allowed
DeployIfNotExists, Disabled

RBAC role(s)

Role Name	Role Id
Log Analytics Contributor	92aaf0da-9dab-42b6-94a3-d43ce8d16293

Rule aliases

IF (1)

Alias	Namespace	ResourceType	Path	PathIsDefault	DefaultPath	Modifiable
Microsoft.HybridCompute/imageOffer	Microsoft.HybridCompute	machines	properties.osName	True		False

THEN-ExistenceCondition (3)

Alias	Namespace	ResourceType	Path	PathIsDefault	Modifiable
Microsoft.HybridCompute/machines/extensions/provisioningState	Microsoft.HybridCompute	machines/extensions	properties.provisioningState	True	False
Microsoft.HybridCompute/machines/extensions/Publisher	Microsoft.HybridCompute	machines/extensions	properties.publisher	True	False
Microsoft.HybridCompute/machines/extensions/type	Microsoft.HybridCompute	machines/extensions	properties.type	True	False

Rule resource types

IF (1)

Microsoft.HybridCompute/machines

THEN-Deployment (1)

Microsoft.HybridCompute/machines/extensions

Compliance

Not a Compliance control

Initiatives usage

Rows: 1-2 / 2
Records:
Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators:
<, <=, >, >=, =, *, !, {, }, ||,&&, **[empty]**, **[nonempty]**, **rgx:**
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max Guglielmi
Close
?
Page of 1
Initiative DisplayName	Initiative Id	Initiative Category	State	Type	polSet in AzUSGov

[Deprecated]: Configure machines to create the default Microsoft Defender for Cloud pipeline using Azure Monitor Agent	362ab02d-c362-417e-a525-45805d58e21d	Security Center	Deprecated	BuiltIn	unknown
[Deprecated]: Configure machines to create the user-defined Microsoft Defender for Cloud pipeline using Azure Monitor Agent	500ab3a2-f1bd-4a5a-8e47-3e09d9a294c3	Security Center	Deprecated	BuiltIn	unknown

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2025-04-04 18:50:38	change	Minor, suffix changed: new suffix: deprecated; old suffix: preview (1.0.0-preview > 1.1.0-deprecated)
2021-09-13 16:35:32	add	d01f3018-de9f-4d75-8dae-d12c1875da9f

JSON compare

compare mode: version left: version right:

1.0.0-preview → 1.1.0-deprecated RENAMED Viewed

@@ -1,13 +1,13 @@
 {
-    "displayName": "[Preview]: Configure supported Windows Arc machines to automatically install the Azure Security agent",
     "policyType": "BuiltIn",
     "mode": "Indexed",
     "description": "Configure supported Windows Arc machines to automatically install the Azure Security agent. Security Center collects events from the agent and uses them to provide security alerts and tailored hardening tasks (recommendations). Target Windows Arc machines must be in a supported location.",
     "metadata": {
         "category": "Security Center",
-        "version": "1.0.0-preview",
-        "preview": true
     },
     "parameters": {
         "effect": {
             "type": "String",
@@ -18,9 +18,9 @@
             "allowedValues": [
                 "DeployIfNotExists",
                 "Disabled"
             ],
-            "defaultValue": "DeployIfNotExists"
         }
     },
     "policyRule": {
         "if": {

 {
+    "displayName": "[Deprecated]: Configure supported Windows Arc machines to automatically install the Azure Security agent",
     "policyType": "BuiltIn",
     "mode": "Indexed",
     "description": "Configure supported Windows Arc machines to automatically install the Azure Security agent. Security Center collects events from the agent and uses them to provide security alerts and tailored hardening tasks (recommendations). Target Windows Arc machines must be in a supported location.",
     "metadata": {
         "category": "Security Center",
+        "version": "1.1.0-deprecated",
+        "deprecated": true
     },
     "parameters": {
         "effect": {
             "type": "String",
             "allowedValues": [
                 "DeployIfNotExists",
                 "Disabled"
             ],
+            "defaultValue": "Disabled"
         }
     },
     "policyRule": {
         "if": {

JSON

api-version=2021-06-01
EPAC

{7 itemsdisplayName: "[Deprecated]: Configure supported Windows Arc machines to automatically install the Azure Security agent",
policyType: "BuiltIn",
mode: "Indexed",
description: "Configure supported Windows Arc machines to automatically install the Azure Security agent. Security Center collects events from the agent and uses them to provide security alerts and tailored hardening tasks (recommendations). Target Windows Arc machines must be in a supported location.",
metadata: {3 itemscategory: "Security Center",
version: "1.1.0-deprecated",
deprecated: true
},
parameters: {1 itemeffect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of the policy"
},
allowedValues: [2 items"DeployIfNotExists",
"Disabled"
],
defaultValue: "Disabled"
}
},
policyRule: {2 itemsif: {1 itemallOf: [2 items{2 itemsfield: "type",
equals: "Microsoft.HybridCompute/machines"
},
{2 itemsfield: "Microsoft.HybridCompute/imageOffer",
like: "windows*"
}
]
},
then: {2 itemseffect: "[parameters('effect')]",
details: {4 itemstype: "Microsoft.HybridCompute/machines/extensions",
existenceCondition: {1 itemallOf: [3 items{2 itemsfield: "Microsoft.HybridCompute/machines/extensions/type",
equals: "AzureSecurityWindowsAgent"
},
{2 itemsfield: "Microsoft.HybridCompute/machines/extensions/Publisher",
equals: "Microsoft.Azure.Security.Monitoring"
},
{2 itemsfield: "Microsoft.HybridCompute/machines/extensions/provisioningState",
equals: "Succeeded"
}
]
},
roleDefinitionIds: [1 item"/providers/microsoft.authorization/roleDefinitions/92aaf0da-9dab-42b6-94a3-d43ce8d16293" Log Analytics Contributor 
],
deployment: {1 itemproperties: {3 itemsmode: "incremental",
parameters: {2 itemslocation: {1 itemvalue: "[field('location')]"
},
vmName: {1 itemvalue: "[field('name')]"
}
},
template: {5 items$schema: "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
contentVersion: "1.0.0.0",
parameters: {2 itemslocation: {1 itemtype: "string"
},
vmName: {1 itemtype: "string"
}
},
variables: {},
resources: [1 item{5 itemstype: "Microsoft.HybridCompute/machines/extensions",
name: 🔍"[
    concat(
        parameters('vmName'),
       '/',
        'AzureSecurityWindowsAgent'
    )
]",
apiVersion: "2021-06-10-preview",
location: "[parameters('location')]",
properties: {4 itemspublisher: "Microsoft.Azure.Security.Monitoring",
type: "AzureSecurityWindowsAgent",
settings: {},
protectedSettings: {}
}
}
]
}
}
}
}
}
}
}

[Deprecated]: Configure supported Windows Arc machines to automatically install the Azure Security agent

Azure BuiltIn Policy definition

TableFilter v0.7.3