# Model VM Application dependencies with order and failure behavior together

> Which later VM Applications will still install if an earlier package fails?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260909-098-model-vm-application-dependencies-with-order-and-failure-behavior-together/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-10T00:30:18+00:00
- Modified: 2026-09-10T00:35:08+00:00
- Last reviewed by DSE: 2026-09-09
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 2 minutes

## What you need to know

Which later VM Applications will still install if an earlier package fails?

## Potentially affected

Azure VM Application deployments with multiple packages and installation dependencies.

## DSE recommendation

Assign distinct increasing order values to real prerequisites and document which packages may run independently.

## Article

## Source facts

VM Applications without an order value install after ordered applications, but their relative order is not guaranteed and other application failures do not block them. Packages sharing an order value have no guaranteed sequence within that group. Failure at a lower order blocks higher-order installation. The mechanism requires a VM Agent that can receive goal states. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/vm-applications).

## Applicability

Review the complete applicationProfile for the VM or scale set, including omitted and duplicate order values. Identify genuine prerequisites separately from packages that can operate independently. Confirm agent readiness and that each application version is available for the deployment region before interpreting an ordering failure.

## DSE recommendation

Assign distinct increasing order values to real prerequisites and document which packages may run independently. Have the application owners agree what should happen when each prerequisite fails. Avoid placing a dependent package in the unordered group merely to have it run last. Preserve the intended dependency map beside the actual profile so ordering is reviewable without reading installation logs first.

## Verification

Test the sequence with harmless representative packages, including an intentional early failure. Check which later ordered packages are skipped and whether any unordered packages still run. Verify success through each application’s own acceptance criteria rather than installation order alone. Retain the profile, package versions, observed execution sequence, and failure outcome so a later edit cannot silently change the dependency behavior.

## Official references

[Microsoft Learn: VM Applications overview](https://learn.microsoft.com/en-us/azure/virtual-machines/vm-applications). Source reviewed September 9, 2026.

## Primary reference

- Name: Overview of Azure VM Applications in the Azure Compute Gallery - Azure Virtual Machines | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/virtual-machines/vm-applications
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Model VM Application dependencies with order and failure behavior together,” DSE Security, https://update.dsesecurity.com/updates/dse-20260909-098-model-vm-application-dependencies-with-order-and-failure-behavior-together/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.