Skip navigation

Windows VM with Azure secure baseline.

Last updated: 21/10/2021

The template creates a virtual machine running Windows Server in a new virtual network, with a public IP address. Once the machine has deployed, the guest configuration extension is installed and the Azure secure baseline for Windows Server is applied. If the configuration of the machines drifts, you can re-apply the settings by deploying the template again.

This Azure Resource Manager (ARM) template was created by a member of the community and not by Microsoft. Each ARM template is licensed to you under a licence agreement by its owner, not Microsoft. Microsoft is not responsible for ARM templates provided and licensed by community members and does not screen for security, compatibility or performance. Community ARM templates are not supported under any Microsoft support programme or service, and are made available AS IS without warranty of any kind.

Parameters

Parameter Name Description
location The Azure region where resources in the template should be deployed.
subnetName Name for the subnet in the virtual network where the network interface is connected.
networkSecurityGroupName Name of the network security group that sets rules for the network environment.
virtualNetworkName Name of the virtual network.
addressPrefix Network subnet and prefix.
publicIpName Name for the Public IP used to access the Virtual Machine.
publicIPAllocationMethod Allocation method for the Public IP used to access the Virtual Machine.
vmName Name of the virtual machine.
OSVersion The Windows version for the VM. This will pick a fully patched image of this given Windows version.
osDiskStorageAccountType Specifies the storage account type for OS and data disk.
vmSize Size of the virtual machine.
zone Availability zone number.
adminUsername Username for the Virtual Machine.
adminPassword Password for the Virtual Machine.
enableAcceleratedNetworking Enable accelerated networking.

Use the template

PowerShell

New-AzResourceGroup -Name <resource-group-name> -Location <resource-group-location> #use this command when you need to create a new resource group for your deployment
New-AzResourceGroupDeployment -ResourceGroupName <resource-group-name> -TemplateUri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.compute/vm-windows-baseline/azuredeploy.json
Installing and configuring Azure PowerShell

Command line

az group create --name <resource-group-name> --location <resource-group-location> #use this command when you need to create a new resource group for your deployment
az group deployment create --resource-group <my-resource-group> --template-uri https://raw.githubusercontent.com/Azure/azure-quickstart-templates/master/quickstarts/microsoft.compute/vm-windows-baseline/azuredeploy.json
Installing and configuring the Azure cross-platform command-line interface