last sync: 2020-Nov-30 15:25:09 UTC

Azure Policy Initiative

[Deprecated]: Audit Windows VMs in which the Administrators group contains any of the specified members

Name[Deprecated]: Audit Windows VMs in which the Administrators group contains any of the specified members
Azure Portal
Idadd1999e-a61c-46d3-b8c3-f35fb8398175
Version1.0.0-deprecated
details on versioning
CategoryGuest Configuration
Microsoft docs
DescriptionThis initiative deploys the policy requirements and audits Windows virtual machines in which the Administrators group contains any of the specified members. For more information on Guest Configuration policies, please visit https://aka.ms/gcpol
TypeBuiltIn
DeprecatedTrue
PreviewFalse
History
Date/Time (UTC ymd) (i) Changes
2020-09-09 11:24:08 Name change: 'Audit Windows VMs in which the Administrators group contains any of the specified members' to '[Deprecated]: Audit Windows VMs in which the Administrators group contains any of the specified members'
Policy count Total Policies: 2
Builtin Policies: 2
Static Policies: 0
Policy used
Policy DisplayName Policy Id Category Effect State
[Deprecated]: Deploy prerequisites to audit Windows VMs if the Administrators group contains any of the specified members 144f1397-32f9-4598-8c88-118decc3ccba Guest Configuration Fixed: deployIfNotExists Deprecated
[Deprecated]: Show audit results from Windows VMs if the Administrators group contains any of the specified members bde62c94-ccca-4821-a815-92c1d31a76de Guest Configuration Fixed: auditIfNotExists Deprecated
Json
{
  "properties": {
  "displayName": "[Deprecated]: Audit Windows VMs in which the Administrators group contains any of the specified members",
    "policyType": "BuiltIn",
    "description": "This initiative deploys the policy requirements and audits Windows virtual machines in which the Administrators group contains any of the specified members. For more information on Guest Configuration policies, please visit https://aka.ms/gcpol",
    "metadata": {
      "version": "1.0.0-deprecated",
      "category": "Guest Configuration",
      "deprecated": true
    },
    "parameters": {
      "MembersToExclude": {
        "type": "String",
        "metadata": {
        "displayName": "[Deprecated]: Members to exclude",
          "description": "A semicolon-separated list of members that should be excluded in the Administrators local group. Ex: Administrator; myUser1; myUser2"
        }
      }
    },
    "policyDefinitions": [
      {
        "policyDefinitionReferenceId": "Deploy_AdministratorsGroupMembersToExclude",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/144f1397-32f9-4598-8c88-118decc3ccba",
        "parameters": {
          "MembersToExclude": {
          "value": "[parameters('MembersToExclude')]"
          }
        }
      },
      {
        "policyDefinitionReferenceId": "Audit_AdministratorsGroupMembersToExclude",
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bde62c94-ccca-4821-a815-92c1d31a76de"
      }
    ]
  },
  "id": "/providers/Microsoft.Authorization/policySetDefinitions/add1999e-a61c-46d3-b8c3-f35fb8398175",
  "type": "Microsoft.Authorization/policySetDefinitions",
  "name": "add1999e-a61c-46d3-b8c3-f35fb8398175"
}