Empty default values in azure policy initiative paramters
Hello, I've created an azure policy initiative definition that uses a policy definition to tag resources with default values if some tags do not exist and other conditions. In the azure policy initiative definition, I created initiative…
Azure Policy
Azure Policy
Hello, I do the Azure CSPM integration for my company. I came across two checks for which I had to write codes. Ensures deployed resources and resource groups belong to the list set in the allowed locations for resource groups policy Ensures a…
Azure Policy
Unable to Import Blueprint using PowerShell
I have created a Blueprint, myblueprint1, in tenant1. The scope of Blueprint is at subscription level. BluePrint contains custom policies as Artifacts. I am able to successfully import the BluePrint using PowerShell with identity of global administrator…
Azure Blueprints
Azure Policy
Block Trial Subscriptions Being Created in Tenant
Hi, Visual studio pro subscription are creating without Admin privileges in Tenant. Is there anyway to ban this via policy ?
Azure Policy
Setting SQL Backup Redundancy with DeployIfNotExists - Possible?
I am attempting to use Policy in order to enforce a specific Backup Redundancy setting (Local, Zone or Geo) on Azure SQL Databases based on a tag that is set on that Database. The problem I'm seeing is that I don't believe it's possible to use…
Azure SQL Database
Azure Policy
Azure Policy deny not worked as expected
Hello, I've created an azure policy to deny the creation of a VM by some conditions. This is the policy: { "mode": "All", "policyRule": { "if": { "allOf": [ { "field":…
Azure Policy
Azure Policy: How to deploy an extension "A" on Linux VM only if another extension "B" is sucessfully provisioned?
We want to deploy an extension on VM only if another extension is provisioned successfully using azure policy.
Azure Policy
Groups in Custom Azure Policy Initative
I noticed that in built-in initiative, policies are group into different regulatory compliance. ![109793-image.png][1] When one of the category is clicked, the page will shows the details of the policy groups ![109729-image.png][2] Following that logic,…
Azure Policy
Unable to perform the Exercise - Create a website hosted in Azure
I am trying to perform the Excercise - Create a website hosted in Azure, but it fails with the below error summary. Kindly assist. Resource ‘ServicePlanbcdbb059-88fa’was disallowed by policy. (Code: RequestDisallowedByPolicy) Initiative: web…
Azure Policy
CPU load on virtual machines due to ATP
Hi, I have a curiosity regarding one of the metrics I've came across. Recently, I noticed that my CPU load on my virtual machines is going pretty crazy and after some research I noticed that this is due to the mdatp_audisp_plugin, which is the ATP …
Azure Virtual Machines
Azure Policy
Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
azure policy check all network security group rules for specific protocols.
Is it possible to I check my network rules if either my inbound has ICMPv4 is set to (3,11) or outbound ICMPv4 is set to (8)?
Azure Virtual Network
Azure Policy
Policy to deny adding a specific tag(not upon creation)
Hi Microsoft , i am looking for a solution to deny users to add a tag to existing resources. i have applied this policy at root management group and it works for new resources , but when i try to add a tag (that is not allowed while creation) it…
Azure Policy
Azure Policy for Azure Monitor not recognizing Windows Server 2022
I created an Azure Policy Assignment for the initiative Configure Windows machines to run Azure Monitor Agent and associate them to a Data Collection Rule and it does not recognize any Windows Server 2022 servers. I ran the Start-AzPolicyComplianceScan…
Azure Policy
ARM template does not identify policy function
When trying to deploy policy definitions using New-AzSubscriptionDeployment, it doesn't recognize the built-in policy functions. Below is the deployment json. { "$schema":…
Azure Policy
Force Tags on Subscription Creation?
Hi i tried to create a policy to force tags on subscription creation, somehow it dont worked i can still create the sub without tags. Is there a way to force it on creation?
Azure Policy
Prepay Purchase Done Via PO
One of my customer's just completed a prepay purchase via a PO. The order has been invoiced. I understand the funds will be moved to the enrollment under the master Agreement. Can you tell me how long this process will take? Is this done at the end…
Azure Policy

How to create a policy that filters on Public access level "Blob"
My goal is to create a policy that checks on the setting Microsoft.Storage/storageAccounts/allowBlobPublicAccess ONLY for storage accounts that have containers with Public Access Level "Blob". I tried to add something like: …
Azure Storage
Azure Policy
Configure custom Azure AD Password Policy for M365 Users?
Hello all, Does the present Azure AD Free M365 service allow for custom password policies in tenants? I know we can change the expire or not property, and the default minimum characters is 8 with 1 Capital, lowercase and number, however with recent…
Azure Policy
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Entra | Other
Multiple Log Analytics Workspaces deployment DSC
We are auto deploying Azure Monitor enrolment using Azure Policy. Resource are deployed in two regions, We would like to split the deployment so that the IaaS servers are enrolled into the local LA Workspace. We know about policy exclusions, but we…
Azure Monitor
Azure Automation
Azure Policy
I am trying to create a custom policy in Azure that adds a route to route table if that not exists , but the compliance state is non-compliant even though if it exist why?
I am trying to implement a custom policy, that should create a Route if that does not exist in the Route table. I created a remediation task it is adding the route to the Route table. But when if the route pre-exists it is there still showing non…