Azure Arc Hybrid Management Foundation: Centralized Server Onboarding

Azure Arc Hybrid Management Foundation guides the customer through enabling and centrally managing Windows and Linux servers distributed on-premises, in multicloud environments, or on virtualization platforms outside Azure, using the Azure Arc control plane. Through Azure Arc, these machines are represented as Azure resources and can be organized, governed, and managed consistently with native Azure platform tools. This package is designed as a controlled-scope foundation service: it enables the initial layer required for onboarding, organization, governance, and operational readiness of hybrid servers, leaving more advanced project extensions to later phases. In this context, Azure Arc also enables the use of VM extensions on non-Azure servers and forms the basis for services such as Azure Update Manager, Azure Policy, and Azure Monitor Agent. Microsoft Azure licenses, subscriptions, and any required tools are not included and remain the customer's responsibility. What the implementation includes Connecting pilot servers to Azure through Azure Arc. Centralizing the inventory of hybrid machines. Setting up a governance and organization baseline. Preparing the foundation for patching, monitoring, and security. Configuring Azure Policy for periodic checking of missing system updates. Configuring Azure Update Manager with two maintenance plans, one for Windows VMs and one for Linux VMs. Defining Azure Monitor rules to track CPU, RAM, and disk usage. Creating an action group with a related alert rule. Deliverables Pilot servers connected to Azure through Azure Arc. Centralized inventory of hybrid machines. Governance and organization baseline for hybrid servers. Configured Azure Policy for update compliance checking. Two Azure Update Manager maintenance plans (Windows and Linux). Azure Monitor rules, action group, and alert rule for CPU, RAM, and disk. Customer requirements Active Azure subscription. Pilot servers (Windows and/or Linux) identified for onboarding, on-premises, multicloud, or on external virtualization platforms. Network connectivity from pilot servers to Azure. Required administrative access on the Azure subscription and target servers. Licenses, tools, certifications, and software beyond what is listed are not included unless otherwise specified. This service does not include onboarding of servers beyond the agreed pilot scope, integration with Microsoft Defender for Cloud, advanced security hardening, or ongoing operational management after the foundation setup. Microsoft Defender for Cloud integration can optionally be added as a separate engagement.