Enforce VM security configuration with Azure Machine Configuration

  • Module
  • 6 Units
Intermediate
Security Engineer
Azure Virtual Machines
Azure Arc
Azure

Audit and enforce OS security configuration on Azure virtual machines and Arc-enabled servers using Azure Machine Configuration. Apply built-in Windows and Linux security baseline policies, configure audit and enforce modes, and author custom machine configurations for organization-specific security requirements.

Learning objectives

After completing this module, you can:

  • Explore how Azure Machine Configuration audits and enforces OS-level settings using Azure Policy
  • Deploy the Azure Machine Configuration extension and configure required prerequisites
  • Assign built-in Windows and Linux security baseline policies in audit and enforce modes
  • Author and publish a custom machine configuration for organization-specific requirements

Prerequisites

  • Understanding of Azure Policy fundamentals, including policy effects and initiative assignments
  • Familiarity with Azure Virtual Machines and Azure Arc-enabled servers
  • Basic understanding of OS configuration concepts for Windows and Linux

Get started with Azure

Choose the Azure account that's right for you. Pay as you go or try Azure free for up to 30 days. Sign up.

Start