Plan private network access for Windows Admin Center inside an Azure VM

Source facts

Windows Admin Center in the Azure portal manages operating-system functions inside an Azure VM. Microsoft installs Windows Admin Center in each VM that will be managed through this feature. The source recommends connecting through the VM’s private address. That approach does not require an inbound port rule but does require access to the VM’s virtual network. Microsoft documentation.

Applicability

Identify the Azure subscription, target VM, browser, authorized user, and route to the virtual network. Review the feature’s platform and permission requirements before enabling the extension.

DSE recommendation

Have the Azure and network owners document the management path from the administrator’s device to the VM. Prefer the approved private-access arrangement and record how that access will be maintained. Keep this guest-management path separate from registering an on-premises Windows Admin Center gateway with Azure.

Verification

Connect through the intended private path and perform an approved read-only operating-system inspection. Confirm the target VM identity and the user’s permitted management scope. Record connectivity or permission failures and verify that the management operation remains confined to the intended VM before enabling the workflow for more operators.

Official references

Microsoft Learn: Manage a Windows VMs using Windows Admin Center in Azure. Source reviewed September 8, 2026.