Azure Machine Configuration review
A focused configuration-as-code service for Azure Policy and Arc-based compliance.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Azure Machine Configuration audits or configures operating-system, application, and environment settings as code. It manages Azure virtual machines and hybrid Arc-enabled machines directly or through Azure Policy assignments. Its audience is teams responsible for configuration governance, security baselines, and compliance evidence across Azure and supported operating systems, including Windows Server, Windows 10 and 11, Ubuntu Server, RHEL, SUSE Linux Enterprise Server, and other listed platforms.
The published plans separate Azure and Arc resources. Azure resources carry no charge, while Arc resources cost $6 USD per server per month. Arc billing applies to servers with one or more guest configurations and is prorated hourly. This makes the service a straightforward fit for Azure estates, while hybrid deployments need to account for per-server Arc charges. The product is available through web and API access, with Azure Policy, Azure Arc, Azure Resource Graph, and Azure Automation forming its surrounding Microsoft ecosystem.
Its strongest capability is the range of configuration outcomes: audit settings, apply configuration packages with monitoring, or apply and autocorrect drift. Teams can create custom packages with PowerShell DSC, use built-in security baselines, and review results through Azure Policy, Guest Assignments, and Azure Resource Graph, including exportable reporting. Azure Machine Configuration is a focused choice for policy-as-code, drift detection, and compliance reporting rather than general infrastructure operations; patch management is not part of its listed feature set. Choose it when Azure and Arc policy enforcement are central, and consider a broader configuration tool when patch management is also required.
Azure Machine Configuration pros and cons
- Where it wins
- Configuration-as-code auditing with enforcement and drift autocorrection
- Azure Policy assignments scale configuration across machines
- Machine-level compliance evidence and Resource Graph queries
- Where it doesn't
- Patch management is outside its feature set
- Arc resources cost $6 per server per month
- Custom packages use PowerShell Desired State Configuration
Azure Machine Configuration fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update