One of the patterns we have observed is customers assign ing an audit policy but forgetting to assign the policy that handles automatically onboar d ing servers. Iterating upon our first release of the solution includes m ultiple areas where we believe we can m ak e life easier for customers. I hope to have more to share on this area in the future. We are considering our options in this area and taking the feedback seriously. It is important for many people to understand what the options will be to use DSC in disconnected scenarios going forward. If you would like to continue reading about how this service is technically implemented, the two technical write-ups are published to accompany this post.Īzure Policy Guest Configuration – ServiceĪzure Policy Guest Configuration – Client High level direction forwardįor the next semester (the second half of 2019 calendar year) we are focused on iterating upon our first release of this solution, introducing the ability for you to use your own content for auditing machines, and to enable you to also enforce settings inside virtual machines using Azure Policy.
#JULY 2018 JUNE 2019 DESKTOP CALENDAR FULL#
The full documentation for this service is available at the following short url. Azure Policy Guest Configuration currently provides an audit platform to validate settings inside virtual machines. We can include operational requirements such as making sure all servers have a healthy monitoring agent, logging configuration, and the correct certificates in place to function in an enterprise environment.ĭSC has been the basis for other Azure solutions such as the Azure DSC Extension and Azure Automation State Configuration, that help you to configure virtual machines. Building this platform on a tool that was designed with operations in mind helps us to look beyond the types of settings that we thought about in platforms such as Group Policy.
#JULY 2018 JUNE 2019 DESKTOP CALENDAR FREE#
The intention for this service is to build confidence so application developers/owners are free to deploy servers when they need them without putting the organization at risk. It is best to think of Azure Policy Guest Configuration as based on the DSC syntax but functionally a new platform. The DSC codebase we have been working on is now fully GA as Azure Policy Guest Configuration but this is not the DSC you have known up to this point. We also disclosed that the platform would be used in Azure Policy Guest Configuration. Previously we have referred to the new DSC codebase under different names. Your skill set and your DSC scripts/modules can be used in a new way.The solution is GA for built-in content and is moving towards a preview for custom content.The new implementation of DSC is Azure Policy Guest Configuration.If you take nothing else away, here are the top-level items:
In two parts, I would like to explain the implementation of the Guest Configuration client/service and exactly how the new DSC engine functions. I am accompanying this post with write-ups that are for the more technical audience. In this post we will review what has been shipped and the high-level direction we are heading. There has been a lot going on, many decisions being made, and it just didn’t make sense to post earlier in this calendar year. It has been almost a year since the last DSC Planning update.
0 kommentar(er)
