Table of Contents

1. Challenge

   Create a Maintenance Configuration

   1. Create a maintenance configuration to schedule weekly updates on Arc-enabled VMs/servers using the default classifications, inclusions, and exclusions.
   2. Make a note of the maintenance configuration Resource ID, as it will be required to complete the following objectives.
2. Challenge

   Assign Azure Policies

   1. Assign three Policies to the lab Resource Group:
      • Configure periodic checking for missing system updates on Azure Arc-enabled servers for Windows VMs/Servers.
      • Configure periodic checking for missing system updates on Azure Arc-enabled servers for Linux VMs/Servers.
      • Schedule recurring updates using Azure Update Manager for Arc-enabled Servers, and exclude Azure Virtual Machines from this policy.

   Important: Ensure policy remediation is performed using the existing Managed identity named id-policyremediation. This user assigned Managed identity has the approprate role-based access control assignements to perform Policy remedation.

3. Challenge

   Review Configuration in Azure Update Manager

   1. Review the configuration in Azure Update Manager:
      • Ensure that Periodic assessment is enabled for the Arc-enabled Servers.
      • Ensure that the maintenance configuration is associated with the Arc-enabled Servers.
4. Challenge

   Remediate Non-compliant Resources

   1. Remediate any non-compliant policie assignments using Remediation tasks.

   Note: Change the scope of the Remediation tasks blade to the Resource Group to remove the Access is denied to the requested resource... when the remediation tasks list is scoped to the Subscription. You have access to the Resource Group in this lab, not the entire Subscription.