Skip to content

Commit 0cfdf39

Browse files
Merge pull request #229264 from timwarner-msft/timwarner-multassign2
Add table listing MA-enabled policy definitions
2 parents 16d6021 + f5198fb commit 0cfdf39

File tree

1 file changed

+22
-1
lines changed

1 file changed

+22
-1
lines changed

articles/governance/machine-configuration/overview.md

Lines changed: 22 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
title: Understand Azure Automanage Machine Configuration
33
description: Learn how Azure Policy uses the machine configuration feature to audit or configure settings inside virtual machines.
44
author: timwarner-msft
5-
ms.date: 03/01/2023
5+
ms.date: 03/02/2023
66
ms.topic: conceptual
77
ms.author: timwarner
88
ms.service: machine-configuration
@@ -331,6 +331,27 @@ For more information about troubleshooting machine configuration, see
331331

332332
At this time, only some built-in Guest Configuration policy definitions support multiple assignments. However, all custom policies support multiple assignments by default if you used the latest version of [the `GuestConfiguration` PowerShell module](/azure/governance/machine-configuration/machine-configuration-create-setup) to create Guest Configuration packages and policies.
333333

334+
Following is the list of built-in Guest Configuration policy definitions that support multiple assignments:
335+
336+
| ID | DisplayName |
337+
|--------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------|
338+
| /providers/Microsoft.Authorization/policyDefinitions/5fe81c49-16b6-4870-9cee-45d13bf902ce | Local authentication methods should be disabled on Windows Servers |
339+
| /providers/Microsoft.Authorization/policyDefinitions/fad40cac-a972-4db0-b204-f1b15cced89a | Local authentication methods should be disabled on Linux machines |
340+
| /providers/Microsoft.Authorization/policyDefinitions/f40c7c00-b4e3-4068-a315-5fe81347a904 | [Preview]: Add user-assigned managed identity to enable Guest Configuration assignments on virtual machines |
341+
| /providers/Microsoft.Authorization/policyDefinitions/63594bb8-43bb-4bf0-bbf8-c67e5c28cb65 | [Preview]: Linux machines should meet STIG compliance requirement for Azure compute |
342+
| /providers/Microsoft.Authorization/policyDefinitions/50c52fc9-cb21-4d99-9031-d6a0c613361c | [Preview]: Windows machines should meet STIG compliance requirements for Azure compute |
343+
| /providers/Microsoft.Authorization/policyDefinitions/e79ffbda-ff85-465d-ab8e-7e58a557660f | [Preview]: Linux machines with OMI installed should have version 1.6.8-1 or later |
344+
| /providers/Microsoft.Authorization/policyDefinitions/934345e1-4dfb-4c70-90d7-41990dc9608b | Audit Windows machines that do not contain the specified certificates in Trusted Root |
345+
| /providers/Microsoft.Authorization/policyDefinitions/08a2f2d2-94b2-4a7b-aa3b-bb3f523ee6fd | Audit Windows machines on which the DSC configuration is not compliant |
346+
| /providers/Microsoft.Authorization/policyDefinitions/c648fbbb-591c-4acd-b465-ce9b176ca173 | Audit Windows machines that do not have the specified Windows PowerShell execution policy |
347+
| /providers/Microsoft.Authorization/policyDefinitions/3e4e2bd5-15a2-4628-b3e1-58977e9793f3 | Audit Windows machines that do not have the specified Windows PowerShell modules installed |
348+
| /providers/Microsoft.Authorization/policyDefinitions/58c460e9-7573-4bb2-9676-339c2f2486bb | Audit Windows machines on which Windows Serial Console is not enabled |
349+
| /providers/Microsoft.Authorization/policyDefinitions/e6ebf138-3d71-4935-a13b-9c7fdddd94df | Audit Windows machines on which the specified services are not installed and 'Running' |
350+
| /providers/Microsoft.Authorization/policyDefinitions/c633f6a2-7f8b-4d9e-9456-02f0f04f5505 | Audit Windows machines that are not set to the specified time zone |
351+
352+
> [!NOTE]
353+
> Please check this page periodically for updates to the list of built-in Guest Configuration policy definitions that support multiple assignments.
354+
334355
### Assignments to Azure management groups
335356

336357
Azure Policy definitions in the category `Guest Configuration` can be assigned

0 commit comments

Comments
 (0)