Include Arc machines explicitly in the built-in Windows time-zone audit

Source facts

Microsoft’s built-in Windows time-zone audit example instructs the operator to enable Include Arc connected servers when the environment includes Arc machines, and to select the desired time zone. It also calls for Machine Configuration prerequisites to be deployed before assignment. Microsoft Learn.

Applicability

Use this review for that documented built-in audit policy, with an approved set of Windows machines. Identify which machines are Azure VMs and which are Arc-enabled. Establish the intended time-zone value from the organization’s requirement rather than copying the documentation’s example value.

DSE recommendation

DSE recommends recording both the machine population and expected time zone in the assignment request. Review the actual definition’s parameters and prerequisites before saving the assignment. Include a representative Arc machine in the pilot when Arc coverage is intended. Treat the audit as evidence collection, and handle any corrective machine change through a separate approved action.

Verification

Read back the assignment parameters and compare them with the approved population. Inspect results for a representative Azure VM and, where in scope, an Arc machine. Confirm that each result belongs to the intended assignment and expected value. Investigate a missing result before counting the machine as assessed, and retain the parameter evidence with the pilot record.

Official references

Microsoft Learn: Discover And Assign Built In Machine Configuration Policies.