VM Extension Automation installs the Azure VM extensions your session hosts need as part of provisioning, driven by policy in the Settings Matrix: the Microsoft Antimalware extension, the Azure Monitor Agent, Microsoft Defender for Endpoint onboarding and the Atlas AVD agent. Set the standard once globally, override it per tenant or host pool, and every new or reimaged host is built the same way, with no scripts and no per-VM Azure portal work.
Key capabilities
- Extensions installed automatically when a session host is provisioned or reimaged
- Microsoft Antimalware, Azure Monitor Agent and Defender for Endpoint onboarding controlled by policy
- Global → tenant → host pool inheritance in the Settings Matrix, with per-pool overrides
- The Atlas AVD agent is installed and repaired through the same extension pipeline
- Each VM's installed extensions visible on its detail page
- No scripting and no per-VM Azure portal configuration
Available on: Atlas AVD plan and above
VM Extension Automation is included in every Atlas AVD subscription.