Forum Discussion
Chandrasekhar_Arya
Nov 11, 2021Iron Contributor
Disable few policies that are applied by default
As we know Azure Security benchmark gets applied by default by Azure defender/Security center and as an organization I am fine with it but at the same time I want to disable few policies that are par...
Eli
Microsoft
Dec 06, 2021It is possible. Here is the recommended practice:
go to MDfC portal -> Environment settings -> select your subscription -> Security policy.
Select the default initiative assignment, it will open the policy initiative assignment page.
Select the Parameters tab, uncheck "Only show parameters that need input or review". After a moment all policies of the initiative get listed. Most are marked as AuditIfNotExists or simply Audit.
Find the one you wish to change and Disable it. When done save and exit.
Wait 12h for all recommendations to refresh and those you have disabled should be disappear.
go to MDfC portal -> Environment settings -> select your subscription -> Security policy.
Select the default initiative assignment, it will open the policy initiative assignment page.
Select the Parameters tab, uncheck "Only show parameters that need input or review". After a moment all policies of the initiative get listed. Most are marked as AuditIfNotExists or simply Audit.
Find the one you wish to change and Disable it. When done save and exit.
Wait 12h for all recommendations to refresh and those you have disabled should be disappear.