Edit

Share via

Remediate noncompliant Azure Automation State Configuration servers

  • Article

Note

Azure Automation State Configuration will be retired on September 30, 2027, please transition to Azure Machine Configuration by that date. For more information, see the blog post announcement. The Azure Machine Configuration service combines features of DSC Extension, Azure Automation State Configuration, and the most commonly requested features from customer feedback. Azure Machine Configuration also includes hybrid machine support through Arc-enabled servers.

Important

The Add, Compose configuration, and Gallery navigation links will be removed from the portal on March 31, 2025.

Caution

Azure Automation DSC for Linux has retired on 30 September 2023. For more information, see the announcement.

When servers are registered with Azure Automation State Configuration, the configuration mode is set to ApplyOnly, ApplyAndMonitor, or ApplyAndAutoCorrect. If the mode isn't set to ApplyAndAutoCorrect, servers that drift from a compliant state for any reason remain noncompliant until they're manually corrected.

Azure compute offers a feature named Run Command that allows customers to run scripts inside virtual machines. This document provides example scripts for this feature when manually correcting configuration drift.

Correct drift of Windows virtual machines using PowerShell

You can correct drift of Windows virtual machines using the Run command feature. See Run PowerShell scripts in your Windows VM with Run command.

To force an Azure Automation State Configuration node to download the latest configuration and apply it, use the Update-DscConfiguration cmdlet.

Update-DscConfiguration -Wait -Verbose

Correct drift of Linux virtual machines

For Linux virtual machines, you don't have the option of using the Run command. You can only correct drift for these machines by repeating the registration process.

For Azure nodes, you can correct drift from the Azure portal or using Az module cmdlets. Details about this process are documented in Enable a VM using Azure portal.

For hybrid nodes, you can correct drift using the Python scripts. See Performing DSC operations from the Linux computer.

Next steps