Forum Widgets
Latest Discussions
Azure Arc - SQL Server instances - Error SqlServerDatabases_Update
Hi, I've been getting intermittent errors on the SQL section of Arc for a few days now. Also the section becomes inactive for me; then for a few minutes it seems to get back up and running and then it becomes inactive again; do any of you have similar problems? For the machine management part via Arc, on the other hand, no problem.
Microsoft Entra authentication on Windows Server onboarded on Azure Arc
I've been trying to enforce authentication with entra id credentials on on-premise servers instead of local user credentials by managing the vms using Azure Arc. It works just fine with linux servers by adding the extension aadloginforlinux but the same does not seem to be possible for windows servers. The equivalent extension aadloginforwindows does not seem to be supported on the hybrid azure arc machine. I could not find any relevant documentation for it either, only for native windows vms. Nevertheless, I used this command az connectedmachine extension image list --publisher Microsoft.Azure.ActiveDirectory --extension-type AADLoginForWindows --location <machinelocation> --output table and I can see the list of available versions for the extension but when trying to install it using az connectedmachine extension create it fails. Specifically it returns a null reference error when trying to retrieve the MDM ID. But this is strange to me since in this case Azure Arc is the device management solution.
WAC in Azure
I am looking for info on how to get access to the Windows Admin Center on Azure. I am finally getting back to getting this implemented and thought I read that I can enroll my on-prem servers into WAC on Azure. I want to be able to manage my patching, see vulnerabilities, and also get my Hyper V host workload metrics. Was I reading this in correctly and it still needs to be installed on a local server?
Azure Arc and Azure update manager
Hi Wondered if anything can help. I use Azure Update manager to patch my on-prem Windows servers. Recently several of them have starting failing, cant patch or do an assessment on them. They fail with the error "not able to run in specified time" The VMs are definitely connected as I can see them online and heartbeat is active. The only thing I can spot in the activity log for one of the failing VMs is the "Read Azure Arc extensions" has been running for a long time and never seems to complete (See below). I guessing this is why the patching is failing as its queued up before this. I've tried to remove the azure arc agent and re-install but this always comes back. Does anyone have any ideas how to resolve this?
Azure Arc Machine still showing in Security Recommendations after Deletion
I removed the extensions then removed the Machine from Azure Arc. Even deleted all of the folders associated with the agent. However, the machine still shows up in our Security Recommendations in Defender. The recommendation is forVulnerabilities in security configuration on your Windows machines should be remediated (powered by Guest Configuration). I guess something was missed during the delete process of the machine? How do I get this recommendation to stop showing. The machine is deleted. Thank you
Firewall Whitelist for Connect VM to Arc
Hi, I need to set up a whitelist of addresses on the router firewall that are necessary for accessing Arc. In the documentation, I found addresses for entire subdomains, such as *.blob.core.windows.net, which the router can't handle. I also can't feasibly cache all the addresses from the subdomains with a script. Another resource I found is the Azure IP Ranges list here, but it's not clear which addresses are needed for Arc. Moreover, creating a whitelist manually from IP addresses that might soon become outdated due to resource migration is not the best solution. How can this be resolved more elegantly? Thank you.
Azure Arc enabled Servers unable to assess Updates
Starting yesterday, several of my Arc-enabled Win 2019 and 2022 Servers are unable to assess Windows Updates anymore. Error: "Assessment failed due to this reason: Not able to complete assessment within specified time." Is there anything I can do to reinstall "WindowsPatchExtension" as it won't automatically install itself after removing it from the Extensions? (It's not available for manual install, at least not via "Install extension" GUI)Azure Update Manager - dynamic scope not adding the machines
Hello, I am trying to create a maintenance configuration to distribute the Definition Updates to a bunch of machines but when I use a dynamic scope to get the machines, the configuration is never applied to the machines. Example : I create a dynamic scope and it returns a list of machines : But when I look in Manage - Machines, the associated schedules stays empty : On the other hand, if I had the machines in the configuration, then you can see the associated schedule : Now you can see the schedule : Is there something that I am missing ? Thanks in advance for your help MarcAlert notifications Azure Arc
Just setup Azure Arc and have several vms being patched via Azure Update manager w/Extended Security updates. One thing needed is for individuals to that have vms being patched is to be notified via email: 1. Machine updates kicked off 2. Machine updates succeeded/failed report upon completion Not sure where to set this up, and not sure if there is an additional cost. Please assist.
