Skip to main content

Remediation

From Azure Portal​

  1. Go to Virtual machines.
  2. For each virtual machine, go to Settings.
  3. Click on Extensions + applications.
  4. If there are unapproved extensions, uninstall them.

From Azure CLI​

From the audit command identify the unapproved extensions, and use the below CLI command to remove an unapproved extension attached to VM:

az vm extension delete --resource-group <resourceGroupName> --vm-name <vmName> --name <extensionName>

From PowerShell​

For each VM and each insecure extension from the Audit Procedure run the following command:

Remove-AzVMExtension -ResourceGroupName <ResourceGroupName> -Name <ExtensionName> -VMName <VirtualMachineName>