You can enable the DSC extension via Azure Policy as you can add the DSC extension when the right conditions apply when a resource is a VM. e.g. the operating system being windows. You can use the deploy if not exists pattern to deploy the extension.
Hope this helps in solving your issue