Assessment failed

Question

Assessment failed

Eugene Garrison (Admin) 0

I have an on prem machine that is part of a cluster. All VMs successfully installed Microsoft.SoftwareUpdateManagement.WindowsOsUpdateExtension except for one. I don't think its a GP issue or FW issue as all the VMs would experience the same.

Assessment failed due to this reason: Extension failed to install. Install/Update request for Extension: Microsoft.SoftwareUpdateManagement.WindowsOsUpdateExtension not allowed based on allowed/blocked list set on this machine.

Eugene Garrison (Admin) 0 Reputation points

2023-06-30T15:03:47.19+00:00

Looked at the logs and saw this:

Extension Microsoft.SoftwareUpdateManagement/WindowsOsUpdateExtension is not listed in allowed list. Request will be skipped.

1 answer

Your answer

Eugene Garrison (Admin) 0 Reputation points

2023-06-30T15:03:47.19+00:00

Looked at the logs and saw this:

Extension Microsoft.SoftwareUpdateManagement/WindowsOsUpdateExtension is not listed in allowed list. Request will be skipped.

Answer 1

Saurabh Sharma 23,866 Microsoft Employee Moderator

@Eugene Garrison (Admin)

Thanks for using Microsoft Q&A !!

Based on the error message it looks like the Arc agent configuration has been set to block installation of certain extensions or not extensions are allowed to be installed on the machine. You can verify the below setting to see if that is causing the issue -

Check if the extensions.enabled is true on respective Azure ARC instance using the config get extensions.enabled. If disabled, enable it using azcmagent config set extensions.enabled true. Please refer to the documentation.
Check if the extensions is blocked using azcmagent config list cmdlet. If you see 'WindowsOSUpdateExtention' is blocked then you can remove it from the block list using azcmagent config set extensions.blocklist. Please note that if the extension name is listed in both block and allow list then the extension will be blocked. Refer to the documentation- Extension allowlists and blocklists You can refer to azcmagent CLI reference for cmdlets.

Please let us know if you get any issues.

Thanks Saurabh

Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.

Garrison, Eugene 0

PS C:\Windows\system32> azcmagent config set

time="2023-08-23T14:55:38-05:00" level=info msg="Exit Code:  AZCM0101: Command Execution Error"
time="2023-08-23T14:55:38-05:00" level=info msg="For troubleshooting, see https://aka.ms/arc/azcmerror"
time="2023-08-23T14:55:38-05:00" level=fatal msg="accepts 2 arg(s), received 0"

PS C:\Windows\system32> azcmagent config list
Local Configuration Settings
  incomingconnections.enabled (preview)                 : true
  incomingconnections.ports (preview)                   : []
  proxy.url                                             : http://proxy.usstl.acag.ac.altana:8080
  extensions.allowlist                                  : [Microsoft.Azure.Monitor/AzureMonitorWindowsAgent]
  extensions.blocklist                                  : []
  proxy.bypass                                          : []
  guestconfiguration.enabled                            : true
  extensions.enabled                                    : true
  config.mode                                           : full

Garrison, Eugene 0 Reputation points

2023-08-23T20:10:56.06+00:00

This is the result.
Garrison, Eugene 0 Reputation points

2023-09-14T13:50:28.2766667+00:00

All I see at extensions.blocklist is []
Garrison, Eugene 0 Reputation points

2023-09-14T13:51:11.2633333+00:00

Any suggestions?

Share via

Assessment failed

1 answer

Your answer