AzPolicyAdvertizer

last sync: 2025-Jul-28 17:33:33 UTC

Windows machines should meet requirements for 'Security Options - Interactive Logon'

Azure BuiltIn Policy definition

-Source
+ Azure Portal
-Display name
+Windows machines should meet requirements for 'Security Options - Interactive Logon'
-Id
+                        d472d2c9-d6a3-4500-9f5f-b15f123005aa
-Version
+.0.0
  Details on versioning
-Versioning
+                        Versions supported for Versioning: 1
3.0.0
                         Built-in Versioning [Preview]
-Category
+Guest Configuration
 Microsoft Learn
-Description
+Windows machines should have the specified Group Policy settings in the category 'Security Options - Interactive Logon' for displaying last user name and requiring ctrl-alt-del. This policy requires that the Guest Configuration prerequisites have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.
-Cloud environments
+AzureCloud = true
AzureUSGovernment = true
AzureChinaCloud = unknown
-Available in AzUSGov
+The Policy is available in AzureUSGovernment cloud. Version: '2.0.0'
 Repository: Azure-Policy d472d2c9-d6a3-4500-9f5f-b15f123005aa
-Mode
+Indexed
-Type
+BuiltIn
-Preview
+                False
-Deprecated
+False
-Effect
+                Default
AuditIfNotExists

                Allowed
AuditIfNotExists, Disabled
-RBAC role(s)
+                            none
-Rule aliases
+IF (7)


                    
                        Alias
                        Namespace
                        ResourceType
                        Path
                        PathIsDefault
                        DefaultPath
                        Modifiable
                    
                            
                                Microsoft.Compute/imageOffer
                                Microsoft.Compute
Microsoft.Compute
Microsoft.Compute
                                virtualMachines
virtualMachineScaleSets
disks
                                properties.storageProfile.imageReference.offer
properties.virtualMachineProfile.storageProfile.imageReference.offer
properties.creationData.imageReference.id
                                True
True
True
                                


                                False
False
False
                            
                            
                                Microsoft.Compute/imagePublisher
                                Microsoft.Compute
Microsoft.Compute
Microsoft.Compute
                                virtualMachines
virtualMachineScaleSets
disks
                                properties.storageProfile.imageReference.publisher
properties.virtualMachineProfile.storageProfile.imageReference.publisher
properties.creationData.imageReference.id
                                True
True
True
                                


                                False
False
False
                            
                            
                                Microsoft.Compute/imageSKU
                                Microsoft.Compute
Microsoft.Compute
Microsoft.Compute
                                virtualMachines
virtualMachineScaleSets
disks
                                properties.storageProfile.imageReference.sku
properties.virtualMachineProfile.storageProfile.imageReference.sku
properties.creationData.imageReference.id
                                True
True
True
                                


                                False
False
False
                            
                            
                                Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration
                                Microsoft.Compute
                                virtualMachines
                                properties.osProfile.windowsConfiguration
                                True
                                
                                True
                            
                            
                                Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType
                                Microsoft.Compute
                                virtualMachines
                                properties.storageProfile.osDisk.osType
                                True
                                
                                True
                            
                            
                                Microsoft.ConnectedVMwarevSphere/virtualMachines/osProfile.osType
                                Microsoft.ConnectedVMwarevSphere
                                virtualmachines
                                properties.osProfile.osType
                                True
                                
                                False
                            
                            
                                Microsoft.HybridCompute/imageOffer
                                Microsoft.HybridCompute
                                machines
                                properties.osName
                                True
                                
                                False
                            
                    THEN-ExistenceCondition (1)

                    
                                        
                        Alias
                        Namespace
                        ResourceType
                        Path
                        PathIsDefault
                        DefaultPath
                        Modifiable
                    
                                                
                                Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus
                                Microsoft.GuestConfiguration
                                guestConfigurationAssignments
                                properties.complianceStatus
                                True
                                
                                False
-Alias
+Modifiable
-Microsoft.Compute/imageOffer
+False
False
False
-Microsoft.Compute/imagePublisher
+False
False
False
-Microsoft.Compute/imageSKU
+False
False
False
-Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration
+True
-Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType
+True
-Microsoft.ConnectedVMwarevSphere/virtualMachines/osProfile.osType
+False
-Microsoft.HybridCompute/imageOffer
+False
-Alias
+Modifiable
-Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus
+False
-Rule resource types
+                IF (3)

                                    Microsoft.Compute/virtualMachines
                    Microsoft.ConnectedVMwarevSphere/virtualMachines
                    Microsoft.HybridCompute/machines
-Compliance
+The following 2 compliance controls are associated with this Policy definition 'Windows machines should meet requirements for 'Security Options - Interactive Logon'' (d472d2c9-d6a3-4500-9f5f-b15f123005aa)

                    
Rows: 1-2 / 2
Columns: 
Select all:
Control Domain
Control
Name
MetadataId
Category
Title
Owner
Requirements
Description
Info
Policy#
Close
Columns▼Records: Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators: 
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max GuglielmiClose
?
 Page  of 1
                        
                            

                                Control Domain
                                Control
                                Name
                                MetadataId
                                Category
                                Title
                                Owner
                                Requirements
                                Description
                                Info
                                Policy#
                            
                        
                                        
                        K_ISMS_P_2018
                        2.10.1
                        K_ISMS_P_2018_2.10.1
                        K ISMS P 2018 2.10.1
                        2.10
                        Establish Procedures for Managing the Security of System Operations
                        Shared
                        n/a
                        Establish and implement operating procedures for managing the security of system operations such as designating system administrators, updating policies, changing rulesets, monitoring events, managing policy implementations or exceptions.
                        
                        408
                    
                    
                        SWIFT_CSCF_v2022
                        2.6
                        SWIFT_CSCF_v2022_2.6
                        SWIFT CSCF v2022 2.6
                        2. Reduce Attack Surface and Vulnerabilities
                        Protect the confidentiality and integrity of interactive operator sessions that connect to the local or remote (operated by a service provider) SWIFT infrastructure or service provider SWIFT-related applications
                        Shared
                        n/a
                        The confidentiality and integrity of interactive operator sessions that connect to service provider SWIFT-related applications or into the secure zone are safeguarded.
                        link
                        17
                    
                    
No results
-Control Domain
+Policy#
-K_ISMS_P_2018
+Establish and implement operating procedures for managing the security of system operations such as designating system administrators, updating policies, changing rulesets, monitoring events, managing policy implementations or exceptions.
-SWIFT_CSCF_v2022
+link
-Initiatives usage
+Rows: 1-3 / 3
Records: Use the filters above each column to filter and limit table data. Advanced searches can be performed by using the following operators: 
<, <=, >, >=, =, *, !, {, }, ||,&&, [empty], [nonempty], rgx:
Learn more
TableFilter v0.7.3
https://www.tablefilter.com/
©2015-2025 Max GuglielmiClose
?
 Page  of 1
                            
                                

                                    Initiative DisplayName
                                    Initiative Id
                                    Initiative Category
                                    State
                                    Type
                                    polSet in AzUSGov
                                
                            
                            
                                [Preview]: Windows machines should meet requirements for the Azure compute security baseline
                                be7a78aa-3e10-4153-a5fd-8c6506dbc821
                                Guest Configuration
                                Preview                                     BuiltIn
                                    true
                            
                            
                                K ISMS P 2018
                                e0782c37-30da-4a78-9f92-50bfe7aa2553
                                Regulatory Compliance
                                GA                                     BuiltIn
                                    unknown
                            
                            
                                SWIFT CSP-CSCF v2022
                                7bc7cd6c-4114-ff31-3cac-59be3157596d
                                Regulatory Compliance
                                GA                                     BuiltIn
                                    unknown
                            
                        
No results
-Initiative DisplayName
+polSet in AzUSGov
-[Preview]: Windows machines should meet requirements for the Azure compute security baseline
+true
-K ISMS P 2018
+unknown
-SWIFT CSP-CSCF v2022
+unknown
-History
+                                Date/Time (UTC ymd) (i)
                                Change type
                                Change detail
                            
                                                    
                                2022-01-28 17:51:01
                                change
                                Major (2.0.0 > 3.0.0)
                            
                            
                                2020-09-15 14:06:41
                                change
                                Previous DisplayName: [Preview]: Windows machines should meet requirements for 'Security Options - Interactive Logon' 
                            
                            
                                2020-08-20 14:05:01
                                add
                                d472d2c9-d6a3-4500-9f5f-b15f123005aa
-Date/Time (UTC ymd) (i)
+Change detail
--01-28 17:51:01
+Major (2.0.0 > 3.0.0)
--09-15 14:06:41
+Previous DisplayName: [Preview]: Windows machines should meet requirements for 'Security Options - Interactive Logon'
--08-20 14:05:01
+d472d2c9-d6a3-4500-9f5f-b15f123005aa
-JSON compare
+    "mode": "Indexed",
@@ -4,9 +4,9 @@
     "mode": "Indexed",
     "description": "Windows machines should have the specified Group Policy settings in the category 'Security Options - Interactive Logon' for displaying last user name and requiring ctrl-alt-del. This policy requires that the Guest Configuration prerequisites have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.",
     "metadata": {
         "category": "Guest Configuration",
-        "version": "2.0.0",
         "requiredProviders": [
             "Microsoft.GuestConfiguration"
         ],
         "guestConfiguration": {
@@ -18,9 +18,10 @@
         "IncludeArcMachines": {
             "type": "String",
             "metadata": {
                 "displayName": "Include Arc connected servers",
-                "description": "By selecting this option, you agree to be charged monthly per Arc connected machine."
             },
             "allowedValues": [
                 "true",
                 "false"
@@ -94,9 +95,9 @@
                                             "equals": "microsoft-dsvm"
                                         },
                                         {
                                             "field": "Microsoft.Compute/imageOffer",
-                                            "equals": "dsvm-windows"
                                         }
                                     ]
                                 },
                                 {
@@ -208,14 +209,34 @@
                             "value": "[parameters('IncludeArcMachines')]",
                             "equals": "true"
                         },
                         {
-                            "field": "type",
-                            "equals": "Microsoft.HybridCompute/machines"
-                        },
-                        {
-                            "field": "Microsoft.HybridCompute/imageOffer",
-                            "like": "windows*"
                         }
                     ]
                 }
             ]
     "mode": "Indexed",
     "description": "Windows machines should have the specified Group Policy settings in the category 'Security Options - Interactive Logon' for displaying last user name and requiring ctrl-alt-del. This policy requires that the Guest Configuration prerequisites have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.",
     "metadata": {
         "category": "Guest Configuration",
+        "version": "3.0.0",
         "requiredProviders": [
             "Microsoft.GuestConfiguration"
         ],
         "guestConfiguration": {
         "IncludeArcMachines": {
             "type": "String",
             "metadata": {
                 "displayName": "Include Arc connected servers",
+                "description": "By selecting this option, you agree to be charged monthly per Arc connected machine.",
+                "portalReview": "true"
             },
             "allowedValues": [
                 "true",
                 "false"
                                             "equals": "microsoft-dsvm"
                                         },
                                         {
                                             "field": "Microsoft.Compute/imageOffer",
+                                            "like": "dsvm-win*"
                                         }
                                     ]
                                 },
                                 {
                             "value": "[parameters('IncludeArcMachines')]",
                             "equals": "true"
                         },
                         {
+                            "anyOf": [
+                                {
+                                    "allOf": [
+                                        {
+                                            "field": "type",
+                                            "equals": "Microsoft.HybridCompute/machines"
+                                        },
+                                        {
+                                            "field": "Microsoft.HybridCompute/imageOffer",
+                                            "like": "windows*"
+                                        }
+                                    ]
+                                },
+                                {
+                                    "allOf": [
+                                        {
+                                            "field": "type",
+                                            "equals": "Microsoft.ConnectedVMwarevSphere/virtualMachines"
+                                        },
+                                        {
+                                            "field": "Microsoft.ConnectedVMwarevSphere/virtualMachines/osProfile.osType",
+                                            "like": "windows*"
+                                        }
+                                    ]
+                                }
+                            ]
                         }
                     ]
                 }
             ]
-JSON
+                                api-version=2021-06-01

                                  EPAC
                                
                            
                        
                        
                            
                                {7 itemsdisplayName: "Windows machines should meet requirements for 'Security Options - Interactive Logon'",
policyType: "BuiltIn",
mode: "Indexed",
description: "Windows machines should have the specified Group Policy settings in the category 'Security Options - Interactive Logon' for displaying last user name and requiring ctrl-alt-del. This policy requires that the Guest Configuration prerequisites have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.",
metadata: {4 itemscategory: "Guest Configuration",
version: "3.0.0",
requiredProviders: [1 item"Microsoft.GuestConfiguration"
],
guestConfiguration: {2 itemsname: "AzureBaseline_SecurityOptionsInteractiveLogon",
version: "1.*"
}
},
parameters: {2 itemsIncludeArcMachines: {4 itemstype: "String",
metadata: {3 itemsdisplayName: "Include Arc connected servers",
description: "By selecting this option, you agree to be charged monthly per Arc connected machine.",
portalReview: "true"
},
allowedValues: [2 items"true",
"false"
],
defaultValue: "false"
},
effect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of this policy"
},
allowedValues: [2 items"AuditIfNotExists",
"Disabled"
],
defaultValue: "AuditIfNotExists"
}
},
policyRule: {2 itemsif: {1 itemanyOf: [2 items{1 itemallOf: [2 items{2 itemsfield: "type",
equals: "Microsoft.Compute/virtualMachines"
},
{1 itemanyOf: [10 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
in: [7 items"esri",
"incredibuild",
"MicrosoftDynamicsAX",
"MicrosoftSharepoint",
"MicrosoftVisualStudio",
"MicrosoftWindowsDesktop",
"MicrosoftWindowsServerHPCPack"
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "MicrosoftWindowsServer"
},
{2 itemsfield: "Microsoft.Compute/imageSKU",
notLike: "2008*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "MicrosoftSQLServer"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
notLike: "SQL2008*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "microsoft-dsvm"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
like: "dsvm-win*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "microsoft-ads"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
in: [2 items"standard-data-science-vm",
"windows-data-science-vm"
]
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "batch"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
equals: "rendering-windows2016"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "center-for-internet-security-inc"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
like: "cis-windows-server-201*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "pivotal"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
like: "bosh-windows-server*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "cloud-infrastructure-services"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
like: "ad*"
}
]
},
{1 itemallOf: [2 items{1 itemanyOf: [2 items{2 itemsfield: "Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration",
exists: "true"
},
{2 itemsfield: "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
like: "Windows*"
}
]
},
{1 itemanyOf: [2 items{2 itemsfield: "Microsoft.Compute/imageSKU",
exists: "false"
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imageSKU",
notLike: "2008*"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
notLike: "SQL2008*"
}
]
}
]
}
]
}
]
}
]
},
{1 itemallOf: [2 items{2 itemsvalue: "[parameters('IncludeArcMachines')]",
equals: "true"
},
{1 itemanyOf: [2 items{1 itemallOf: [2 items{2 itemsfield: "type",
equals: "Microsoft.HybridCompute/machines"
},
{2 itemsfield: "Microsoft.HybridCompute/imageOffer",
like: "windows*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "type",
equals: "Microsoft.ConnectedVMwarevSphere/virtualMachines"
},
{2 itemsfield: "Microsoft.ConnectedVMwarevSphere/virtualMachines/osProfile.osType",
like: "windows*"
}
]
}
]
}
]
}
]
},
then: {2 itemseffect: "[parameters('effect')]",
details: {3 itemstype: "Microsoft.GuestConfiguration/guestConfigurationAssignments",
name: "AzureBaseline_SecurityOptionsInteractiveLogon",
existenceCondition: {2 itemsfield: "Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus",
equals: "Compliant"
}
}
}
}
}
                                 api-version=2021-06-01

                                  EPAC
                                 {7 itemsdisplayName: "Windows machines should meet requirements for 'Security Options - Interactive Logon'",
policyType: "BuiltIn",
mode: "Indexed",
description: "Windows machines should have the specified Group Policy settings in the category 'Security Options - Interactive Logon' for displaying last user name and requiring ctrl-alt-del. This policy requires that the Guest Configuration prerequisites have been deployed to the policy assignment scope. For details, visit https://aka.ms/gcpol.",
metadata: {4 itemscategory: "Guest Configuration",
version: "3.0.0",
requiredProviders: [1 item"Microsoft.GuestConfiguration"
],
guestConfiguration: {2 itemsname: "AzureBaseline_SecurityOptionsInteractiveLogon",
version: "1.*"
}
},
parameters: {2 itemsIncludeArcMachines: {4 itemstype: "String",
metadata: {3 itemsdisplayName: "Include Arc connected servers",
description: "By selecting this option, you agree to be charged monthly per Arc connected machine.",
portalReview: "true"
},
allowedValues: [2 items"true",
"false"
],
defaultValue: "false"
},
effect: {4 itemstype: "String",
metadata: {2 itemsdisplayName: "Effect",
description: "Enable or disable the execution of this policy"
},
allowedValues: [2 items"AuditIfNotExists",
"Disabled"
],
defaultValue: "AuditIfNotExists"
}
},
policyRule: {2 itemsif: {1 itemanyOf: [2 items{1 itemallOf: [2 items{2 itemsfield: "type",
equals: "Microsoft.Compute/virtualMachines"
},
{1 itemanyOf: [10 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
in: [7 items"esri",
"incredibuild",
"MicrosoftDynamicsAX",
"MicrosoftSharepoint",
"MicrosoftVisualStudio",
"MicrosoftWindowsDesktop",
"MicrosoftWindowsServerHPCPack"
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "MicrosoftWindowsServer"
},
{2 itemsfield: "Microsoft.Compute/imageSKU",
notLike: "2008*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "MicrosoftSQLServer"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
notLike: "SQL2008*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "microsoft-dsvm"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
like: "dsvm-win*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "microsoft-ads"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
in: [2 items"standard-data-science-vm",
"windows-data-science-vm"
]
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "batch"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
equals: "rendering-windows2016"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "center-for-internet-security-inc"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
like: "cis-windows-server-201*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "pivotal"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
like: "bosh-windows-server*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imagePublisher",
equals: "cloud-infrastructure-services"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
like: "ad*"
}
]
},
{1 itemallOf: [2 items{1 itemanyOf: [2 items{2 itemsfield: "Microsoft.Compute/virtualMachines/osProfile.windowsConfiguration",
exists: "true"
},
{2 itemsfield: "Microsoft.Compute/virtualMachines/storageProfile.osDisk.osType",
like: "Windows*"
}
]
},
{1 itemanyOf: [2 items{2 itemsfield: "Microsoft.Compute/imageSKU",
exists: "false"
},
{1 itemallOf: [2 items{2 itemsfield: "Microsoft.Compute/imageSKU",
notLike: "2008*"
},
{2 itemsfield: "Microsoft.Compute/imageOffer",
notLike: "SQL2008*"
}
]
}
]
}
]
}
]
}
]
},
{1 itemallOf: [2 items{2 itemsvalue: "[parameters('IncludeArcMachines')]",
equals: "true"
},
{1 itemanyOf: [2 items{1 itemallOf: [2 items{2 itemsfield: "type",
equals: "Microsoft.HybridCompute/machines"
},
{2 itemsfield: "Microsoft.HybridCompute/imageOffer",
like: "windows*"
}
]
},
{1 itemallOf: [2 items{2 itemsfield: "type",
equals: "Microsoft.ConnectedVMwarevSphere/virtualMachines"
},
{2 itemsfield: "Microsoft.ConnectedVMwarevSphere/virtualMachines/osProfile.osType",
like: "windows*"
}
]
}
]
}
]
}
]
},
then: {2 itemseffect: "[parameters('effect')]",
details: {3 itemstype: "Microsoft.GuestConfiguration/guestConfigurationAssignments",
name: "AzureBaseline_SecurityOptionsInteractiveLogon",
existenceCondition: {2 itemsfield: "Microsoft.GuestConfiguration/guestConfigurationAssignments/complianceStatus",
equals: "Compliant"
}
}
}
}
}