{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/", "slug": "dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit", "url": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/" }, "title": "Include Arc machines explicitly in the built-in Windows time-zone audit", "summary": "Review the example policy's machine-population parameter along with its expected time zone.", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "managed-it", "label": "Managed IT operations", "alt": "A controlled technology lifecycle progressing from assessment to approved production.", "card_url": "https://update.dsesecurity.com/assets/editorial/managed-it-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/managed-it-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-17T16:32:14+00:00", "modified_at": "2026-09-17T16:46:29+00:00", "reviewed_on": "2026-09-17", "reading_minutes": 1, "word_count": 215, "potentially_affected": "Use this review for that documented built-in audit policy, with an approved set of Windows machines. Identify which machines are Azure VMs and which are Arc-enabled. Establish the intended time-zone value from the organization's requirement rather than copying the documentation's example value.", "dse_recommendation": "DSE recommends recording both the machine population and expected time zone in the assignment request.", "primary_source": { "name": "Discover And Assign Built In Machine Configuration Policies - Azure Machine Configuration | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-built-in-policies", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft’s built-in Windows time-zone audit example instructs the operator to enable Include Arc connected servers when the environment includes Arc machines, and to select the desired time zone. It also calls for Machine Configuration prerequisites to be deployed before assignment. Microsoft Learn.

\n

Applicability

\n

Use this review for that documented built-in audit policy, with an approved set of Windows machines. Identify which machines are Azure VMs and which are Arc-enabled. Establish the intended time-zone value from the organization’s requirement rather than copying the documentation’s example value.

\n

DSE recommendation

\n

DSE recommends recording both the machine population and expected time zone in the assignment request. Review the actual definition’s parameters and prerequisites before saving the assignment. Include a representative Arc machine in the pilot when Arc coverage is intended. Treat the audit as evidence collection, and handle any corrective machine change through a separate approved action.

\n

Verification

\n

Read back the assignment parameters and compare them with the approved population. Inspect results for a representative Azure VM and, where in scope, an Arc machine. Confirm that each result belongs to the intended assignment and expected value. Investigate a missing result before counting the machine as assessed, and retain the parameter evidence with the pilot record.

\n

Official references

\n

Microsoft Learn: Discover And Assign Built In Machine Configuration Policies.

", "content_text": "Source facts\nMicrosoft’s built-in Windows time-zone audit example instructs the operator to enable Include Arc connected servers when the environment includes Arc machines, and to select the desired time zone. It also calls for Machine Configuration prerequisites to be deployed before assignment. Microsoft Learn.\nApplicability\nUse this review for that documented built-in audit policy, with an approved set of Windows machines. Identify which machines are Azure VMs and which are Arc-enabled. Establish the intended time-zone value from the organization’s requirement rather than copying the documentation’s example value.\nDSE recommendation\nDSE recommends recording both the machine population and expected time zone in the assignment request. Review the actual definition’s parameters and prerequisites before saving the assignment. Include a representative Arc machine in the pilot when Arc coverage is intended. Treat the audit as evidence collection, and handle any corrective machine change through a separate approved action.\nVerification\nRead back the assignment parameters and compare them with the approved population. Inspect results for a representative Azure VM and, where in scope, an Arc machine. Confirm that each result belongs to the intended assignment and expected value. Investigate a missing result before counting the machine as assessed, and retain the parameter evidence with the pilot record.\nOfficial references\nMicrosoft Learn: Discover And Assign Built In Machine Configuration Policies.", "content_markdown": "## Source facts\n\nMicrosoft’s built-in Windows time-zone audit example instructs the operator to enable Include Arc connected servers when the environment includes Arc machines, and to select the desired time zone. It also calls for Machine Configuration prerequisites to be deployed before assignment. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-built-in-policies).\n\n## Applicability\n\nUse this review for that documented built-in audit policy, with an approved set of Windows machines. Identify which machines are Azure VMs and which are Arc-enabled. Establish the intended time-zone value from the organization’s requirement rather than copying the documentation’s example value.\n\n## DSE recommendation\n\nDSE recommends recording both the machine population and expected time zone in the assignment request. Review the actual definition’s parameters and prerequisites before saving the assignment. Include a representative Arc machine in the pilot when Arc coverage is intended. Treat the audit as evidence collection, and handle any corrective machine change through a separate approved action.\n\n## Verification\n\nRead back the assignment parameters and compare them with the approved population. Inspect results for a representative Azure VM and, where in scope, an Arc machine. Confirm that each result belongs to the intended assignment and expected value. Investigate a missing result before counting the machine as assessed, and retain the parameter evidence with the pilot record.\n\n## Official references\n\n[Microsoft Learn: Discover And Assign Built In Machine Configuration Policies](https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-built-in-policies)." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/", "url": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-17" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Include Arc machines explicitly in the built-in Windows time-zone audit", "item": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/", "url": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/", "headline": "Include Arc machines explicitly in the built-in Windows time-zone audit", "description": "Review the example policy's machine-population parameter along with its expected time zone.", "abstract": "Review the example policy's machine-population parameter along with its expected time zone.", "articleBody": "Source facts\nMicrosoft’s built-in Windows time-zone audit example instructs the operator to enable Include Arc connected servers when the environment includes Arc machines, and to select the desired time zone. It also calls for Machine Configuration prerequisites to be deployed before assignment. Microsoft Learn.\nApplicability\nUse this review for that documented built-in audit policy, with an approved set of Windows machines. Identify which machines are Azure VMs and which are Arc-enabled. Establish the intended time-zone value from the organization’s requirement rather than copying the documentation’s example value.\nDSE recommendation\nDSE recommends recording both the machine population and expected time zone in the assignment request. Review the actual definition’s parameters and prerequisites before saving the assignment. Include a representative Arc machine in the pilot when Arc coverage is intended. Treat the audit as evidence collection, and handle any corrective machine change through a separate approved action.\nVerification\nRead back the assignment parameters and compare them with the approved population. Inspect results for a representative Azure VM and, where in scope, an Arc machine. Confirm that each result belongs to the intended assignment and expected value. Investigate a missing result before counting the machine as assessed, and retain the parameter evidence with the pilot record.\nOfficial references\nMicrosoft Learn: Discover And Assign Built In Machine Configuration Policies.", "datePublished": "2026-09-17T16:32:14+00:00", "dateModified": "2026-09-17T16:46:29+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260917-166-include-arc-machines-explicitly-in-the-built-in-windows-time-zone-audit/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/managed-it-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Include Arc machines explicitly in the built-in Windows time-zone audit" }, "articleSection": [ "Cybersecurity", "IT" ], "keywords": [ "Cybersecurity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 215, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Discover And Assign Built In Machine Configuration Policies - Azure Machine Configuration | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/governance/machine-configuration/how-to/assign-built-in-policies" } } ] } }