Can I use an automation account wuth DSC across vnets?

Kevin Blackwell 0 Reputation points
2025-04-23T22:15:20.48+00:00

I trying to come up with a hub and spoke model for our environments. They would all be in different vnets.

I'm trying to use an automation account in one vnet (vnet1) to utilize DSC on a windows machine in a second vnet( vnet2).

My first question is, is that even possible?

I've poked around, tried private endpoints, peered vnets, but no matter, the add button in State configuration is greyed out, so I can't add any configs.

There's some NSG on each vnet, not sure if that's might be a problem.

Azure Automation
Azure Automation
An Azure service that is used to automate, configure, and install updates across hybrid environments.
1,353 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Marcin Policht 45,400 Reputation points MVP Moderator
    2025-04-23T22:31:43.8166667+00:00

    An Azure Automation account doesn't deploy into a VNet and doesn't have any VNet dependencies - so you should be able to use it to target any Azure VMs (regardless of their location/VNet they are connected to).

    That aside, considering that Azure Automation State Configuration has a retirement date set (September 30, 2027), rather than troubleshooting your existing setup, you might want to consider using Azure Machine Configuration instead. More at https://learn.microsoft.com/en-us/azure/governance/machine-configuration/overview


    If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

    hth

    Marcin

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.