Azure Desired State Configuration (DSC) preventing Forest Recovery (4368932)

Return

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title

Azure Desired State Configuration (DSC) preventing Forest Recovery
Description

The latest advised settings from the CIS security Benchmark have been applied to the Azure Desired State Configuration service. This prevented the local firewall rules from taking effect which effectively cut off communications between the Forest Recovery Console and the Servers being recovered.
Cause

Azure Desired State Configuration policy service has the ability to manage GPO and Firewall settings.

The setting in DCS below was over-riding any of the GPO settings which had been set to allow the application of local firewall rules:

9.3.5 (L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No' (Automated)
Resolution

Either disable Windows Firewall service in Windows to prevent DCS from "managing" settings or change DCS setting to 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'Yes' (Automated)

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title