{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/", "slug": "dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management", "url": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/" }, "title": "Check the preview and access requirements for portal-based WAC management", "summary": "What must be approved before managing an Arc-enabled server with Windows Admin Center in Azure?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-08T18:13:48+00:00", "modified_at": "2026-09-08T18:29:33+00:00", "reviewed_on": "2026-09-08", "reading_minutes": 2, "word_count": 230, "potentially_affected": "Administrators evaluating Windows Admin Center in the Azure portal for Arc-enabled hybrid servers.", "dse_recommendation": "Document the proposed management operations and obtain the environment owner's decision on preview use.", "primary_source": { "name": "Manage Azure Arc-enabled Servers using Windows Admin Center in Azure", "url": "https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-arc-hybrid-machines", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

The cited Microsoft guidance labels Windows Admin Center in the Azure portal as a preview. It describes managing an individual hybrid Windows Server machine without opening inbound firewall ports. The machine must already be connected to Azure Arc and have the WAC agent installed. Installing the extension requires one of the documented Azure roles. Microsoft Learn.

\n

Applicability

\n

Check the current preview status, regional availability, server requirements, and role requirements in the official page before deployment. Identify the target Arc resource and the person authorized to install its management extension. Separate acceptance of a preview feature from ordinary server onboarding.

\n

DSE recommendation

\n

Document the proposed management operations and obtain the environment owner’s decision on preview use. Assign the narrowest suitable documented role and verify the target resource scope with the Azure administrator. Pilot the extension on one approved machine, recording how operators will reach the server if the portal path is unavailable. Include extension ownership and removal criteria in the management plan.

\n

Verification

\n

Verify the extension state and open the intended management tools against the selected server. Confirm an authorized operator can perform the agreed task and an unauthorized identity cannot. Record connectivity and permission failures separately. Retain the observed preview version and revisit acceptance when the feature or its availability changes.

\n

Official references

\n

Microsoft Learn: Manage Azure Arc-enabled Servers using Windows Admin Center in Azure. Source reviewed September 8, 2026.

", "content_text": "Source facts\nThe cited Microsoft guidance labels Windows Admin Center in the Azure portal as a preview. It describes managing an individual hybrid Windows Server machine without opening inbound firewall ports. The machine must already be connected to Azure Arc and have the WAC agent installed. Installing the extension requires one of the documented Azure roles. Microsoft Learn.\nApplicability\nCheck the current preview status, regional availability, server requirements, and role requirements in the official page before deployment. Identify the target Arc resource and the person authorized to install its management extension. Separate acceptance of a preview feature from ordinary server onboarding.\nDSE recommendation\nDocument the proposed management operations and obtain the environment owner’s decision on preview use. Assign the narrowest suitable documented role and verify the target resource scope with the Azure administrator. Pilot the extension on one approved machine, recording how operators will reach the server if the portal path is unavailable. Include extension ownership and removal criteria in the management plan.\nVerification\nVerify the extension state and open the intended management tools against the selected server. Confirm an authorized operator can perform the agreed task and an unauthorized identity cannot. Record connectivity and permission failures separately. Retain the observed preview version and revisit acceptance when the feature or its availability changes.\nOfficial references\nMicrosoft Learn: Manage Azure Arc-enabled Servers using Windows Admin Center in Azure. Source reviewed September 8, 2026.", "content_markdown": "## Source facts\n\nThe cited Microsoft guidance labels Windows Admin Center in the Azure portal as a preview. It describes managing an individual hybrid Windows Server machine without opening inbound firewall ports. The machine must already be connected to Azure Arc and have the WAC agent installed. Installing the extension requires one of the documented Azure roles. [Microsoft Learn](https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-arc-hybrid-machines).\n\n## Applicability\n\nCheck the current preview status, regional availability, server requirements, and role requirements in the official page before deployment. Identify the target Arc resource and the person authorized to install its management extension. Separate acceptance of a preview feature from ordinary server onboarding.\n\n## DSE recommendation\n\nDocument the proposed management operations and obtain the environment owner’s decision on preview use. Assign the narrowest suitable documented role and verify the target resource scope with the Azure administrator. Pilot the extension on one approved machine, recording how operators will reach the server if the portal path is unavailable. Include extension ownership and removal criteria in the management plan.\n\n## Verification\n\nVerify the extension state and open the intended management tools against the selected server. Confirm an authorized operator can perform the agreed task and an unauthorized identity cannot. Record connectivity and permission failures separately. Retain the observed preview version and revisit acceptance when the feature or its availability changes.\n\n## Official references\n\n[Microsoft Learn: Manage Azure Arc-enabled Servers using Windows Admin Center in Azure](https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-arc-hybrid-machines). Source reviewed September 8, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/", "url": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-08" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Check the preview and access requirements for portal-based WAC management", "item": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/", "url": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/", "headline": "Check the preview and access requirements for portal-based WAC management", "description": "What must be approved before managing an Arc-enabled server with Windows Admin Center in Azure?", "abstract": "What must be approved before managing an Arc-enabled server with Windows Admin Center in Azure?", "articleBody": "Source facts\nThe cited Microsoft guidance labels Windows Admin Center in the Azure portal as a preview. It describes managing an individual hybrid Windows Server machine without opening inbound firewall ports. The machine must already be connected to Azure Arc and have the WAC agent installed. Installing the extension requires one of the documented Azure roles. Microsoft Learn.\nApplicability\nCheck the current preview status, regional availability, server requirements, and role requirements in the official page before deployment. Identify the target Arc resource and the person authorized to install its management extension. Separate acceptance of a preview feature from ordinary server onboarding.\nDSE recommendation\nDocument the proposed management operations and obtain the environment owner’s decision on preview use. Assign the narrowest suitable documented role and verify the target resource scope with the Azure administrator. Pilot the extension on one approved machine, recording how operators will reach the server if the portal path is unavailable. Include extension ownership and removal criteria in the management plan.\nVerification\nVerify the extension state and open the intended management tools against the selected server. Confirm an authorized operator can perform the agreed task and an unauthorized identity cannot. Record connectivity and permission failures separately. Retain the observed preview version and revisit acceptance when the feature or its availability changes.\nOfficial references\nMicrosoft Learn: Manage Azure Arc-enabled Servers using Windows Admin Center in Azure. Source reviewed September 8, 2026.", "datePublished": "2026-09-08T18:13:48+00:00", "dateModified": "2026-09-08T18:29:33+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260908-203-check-the-preview-and-access-requirements-for-portal-based-wac-management/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Check the preview and access requirements for portal-based WAC management" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 230, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Manage Azure Arc-enabled Servers using Windows Admin Center in Azure", "url": "https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/azure/manage-arc-hybrid-machines" } } ] } }