What you need to know
DSE recommends drawing each NIC-to-subnet relationship and recording the common virtual network before selecting the VM size.
Potentially affected
Use this review when a Windows Azure VM design calls for separate front-end and back-end subnets or an additional network interface on an existing machine.
DSE recommendation
DSE recommends drawing each NIC-to-subnet relationship and recording the common virtual network before selecting the VM size.
Source facts
Microsoft’s multi-NIC Windows VM guide requires all attached NIC subnets to belong to the same virtual network. The supported number of NICs depends on the VM size. Adding a NIC to an existing VM requires deallocating it before attachment and starting it afterward. Microsoft Learn
Applicability
Use this review when a Windows Azure VM design calls for separate front-end and back-end subnets or an additional network interface on an existing machine.
DSE recommendation
DSE recommends drawing each NIC-to-subnet relationship and recording the common virtual network before selecting the VM size. Verify the intended interface count and decide which NIC is primary. For an existing VM, have the workload owner approve the deallocation window and recovery approach. Include the required guest routing review in the implementation plan, and avoid treating a NIC attachment as proof that the intended application traffic path is ready.
Verification
Inspect the deployed NICs, subnet identifiers, VM size, and primary-interface designation against the approved diagram. After the authorized restart, check the guest routes and test each intended application path. Record any unexpected path or connectivity result and resolve it before declaring the additional interface operational.
Official references
Review the official source
Create and manage Windows VMs in Azure that use multiple NICs - Azure Virtual Machines | Microsoft Learn · Verified September 17, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE