2.2.2 Ensure that Auto provisioning of 'Vulnerability assessment for machines' is Set to 'On'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version


Enable automatic provisioning of vulnerability assessment for machines on both Azure and hybrid (Arc enabled) machines.


Vulnerability assessment for machines scans for various security-related configurations and events such as system updates, OS vulnerabilities, and endpoint protection, then produces alerts on threat and vulnerability findings.


Additional licensing is required and configuration of Azure Arc introduces complexity beyond this recommendation.


From Azure Portal

From Azure Home select the Portal Menu

Select Microsoft Defender for Cloud

Then Environment Settings

Select a subscription

Then Auto Provisioning in the left column.

Ensure that Vulnerability assessment for machines is set to On

Repeat the above for any additional subscriptions.

Default Value:

By default, Automatic provisioning of monitoring agent is set to Off.

See Also