An assignment mode in Azure Machine Configuration that applies settings a single time and afterwards just reports drift. Audit only reports, while Apply and Autocorrect fixes drift too.
Also called ApplyAndMonitor.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Apply and Monitor in context, with comparison tables and the common traps.
Terms in this definition
- Azure Machine Configuration
Azure Policy capability that checks or enforces settings at the OS level on Azure VMs and Arc-enabled machines; it replaces Automation State Configuration and the DSC extension.
- Audit
Policy effect that lets a request proceed but flags the resource as non-compliant and logs a warning to the activity log. Microsoft suggests beginning there and later moving to something enforcing, like Deny.
- Apply and Autocorrect
Machine Configuration mode that enforces settings and restores conformance whenever a machine drifts.
Related terms
- Local Configuration Manager
The DSC engine running on every managed machine. It applies configurations, chooses between push and pull refresh, and its ConfigurationMode setting (ApplyOnly, ApplyAndMonitor or ApplyAndAutoCorrect) controls what happens when settings drift.
- Machine Configuration assignment types
Machine Configuration offers three modes. Audit only reports compliance, ApplyAndMonitor sets the configuration once and from then on just reports drift, and ApplyAndAutoCorrect sets it and repairs drift on the following evaluation.
- Machine configuration enforcement modes
Azure Machine Configuration offers three ways to assign: Audit only, which just reports; ApplyAndMonitor, applying settings once then flagging drift; and ApplyAndAutoCorrect, fixing drift when it is next evaluated.