Blog Post

ITOps Talk Blog
2 MIN READ

Using OSConfig to manage Windows Server 2025 security baselines

OrinThomas's avatar
OrinThomas
Icon for Microsoft rankMicrosoft
May 21, 2025

OSConfig is a security configuration and compliance management tool introduced as a PowerShell module for use with Windows Server 2025. It enables you to enforce security baselines, automate compliance, and prevent configuration drift on Windows Server 2025 computers.

OSConfig is a security configuration and compliance management tool introduced as a PowerShell module for use with Windows Server 2025. It enables you to enforce security baselines, automate complian...
Updated May 21, 2025
Version 3.0
powershell
security
Windows Server
box57l's avatar
box57l
Copper Contributor
Jul 10, 2025

OrinThomas​ can you describe how OSConfig is applied / controlled at scale via Azure Policy / Machine Configuration. https://learn.microsoft.com/en-us/windows-server/security/osconfig/osconfig-overview mentions "It integrates with Azure Policy" but no detail on how. Current scenario is Azure Arc-connected devices, testing via local authority (pwsh) is fine but how does OSConfig security baselines integrate to Azure Policy for an overall compliance view? Or further still how can the OSConfig security baselines be applied via Azure Policy / Machine Configuration?