Now Azure Machines can be Managed via ConfigMgr 2012 SP1 and Above

ConfigMgr - Azure Support
ConfigMgr - Azure Support

This is interesting stuff, Now Microsoft Azure Virtual machines (windows and Linux) can be managed through on premises ConfigMgr SCCM 2012 SP1 and above. The Endpoint protection 2012 SP1 can be used for Azure Vms. Microsoft has released a KB article on the support scenarios. Read more from here (kb/2889321).

Two supported scenarios here….

1. Use an existing on-premises Configuration Manager infrastructure to manage Windows Azure Virtual Machines that are running Windows Server or Linux through a secure site-to-Site connection.

2. Set up a single stand-alone Primary site in the Windows Azure Virtual Machines environment to manage Windows Azure Virtual Machines that are running Windows Server or Linux in the same virtual network.


  1. Hello Anoop,
    Wanted to check if this scenario is supported? If yes, is there some additional configuration required for this.
    — CAS on Azure.
    — 3-4 Primary sites on premises(in customer datacenter) in different regions.
    — Clients report to these Primaries.

    Any suggestion would be valuable. Many Thanks.

    — Ravi

    • Hi Ravi ! – This is interesting. Why do you need CAS on Azure? Any specific reason. I’m not sure whether this is supported scenario or not. However, what I can tell you is worth checking the Firewall ports which you need to open between on premises servers and clients with CAS server in Azure. Would Microsoft be able to open SQL and other required ports?

      Please let us know !


      • Hey Anoop,

        Honestly not very sure why my client wants to put the top site in Azure??? 😛
        As far as I know, we can define the port configurations. We can decide which ports needs to be opened. But will definitely double check on that…!!

        Many thanks.

  2. Hi Anoop.

    As Multi-casting and PXE is not supported in AZURE. So, is it possible that we can create a SCCM Primary server in Azure Env. to patch Azure VM. Because what i think the setup may stuck in SCCM Pre-request check.



Please enter your comment!
Please enter your name here

This site uses Akismet to reduce spam. Learn how your comment data is processed.