• Container: machineconfig-packages

• Blob: CloudGPO_LocalSecurity.zip

• Private access only

• Restricted to VM VNet + Trusted MS services

• No anonymous public access

Built locally using DSC v2 + GuestConfiguration tools

📄 CloudGPO_LocalSecurity.ps1

📄 CloudGPO_LocalSecurity.mof

📦 CloudGPO_LocalSecurity.zip

📄 CloudGPO_LocalSecurity_Audit.json

Azure Policy – Guest Configuration (Audit Mode)

• Policy Definition: CloudGPO_LocalSecurity_Audit

• Effect: auditIfNotExists

• name: CloudGPO_LocalSecurity

• contentUri: <blob URL>

• contentManagedIdentity: system

• Windows Server 2022

• Machine Configuration Extension Enabled

• System-Assigned Managed Identity

• Reports compliance status

• Resource evaluated: tstDataParser

• Compliance result: Compliant / Non-compliant

• Drift Detection: Reports deviations from DSC baseline

• Guest Assignment Details Visible