Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
A cloud-native solution that protects workloads across hybrid and multi-cloud environments with threat detection and security recommendations
Should I have the AzureSecurityWindowsAgent extension installed?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 64%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERS%3C/text%3E%3C/svg%3E)
Ryan Steele
0
Reputation points
Most, but not all, of the servers we have enrolled in Azure Arc have an extension named "AzureSecurityWindowsAgent" installed on them. On the servers where it is installed, there is a corresponding folder named "Microsoft.Azure.Security.Monitoring.AzureSecurityWindowsAgent" in C:\Packages\Plugins with a LastWriteTime from January 2023. The only official reference I can find which mentions this extension is the policy definition at https://github.com/Azure/azure-policy/blob/master/built-in-policies/policyDefinitions/Security%20Center/ASC_AzureSecurityWindowsAgent_DINE.json, which has a DisplayName of "[Deprecated]: Configure supported Windows machines to automatically install the Azure Security agent".
Can anyone confirm whether this extension is deprecated, and should be removed from all of our servers? Or is it needed?
Microsoft Security | Microsoft Defender | Microsoft Defender for Cloud
Sign in to answer