I'm diving into server management for my on-prem data center while fully embracing Microsoft's ecosystem. So far, my clients' PCs are managed effectively through Intune and Hybrid Azure AD alongside SCCM, giving us multiple management options. For security, we're utilizing Microsoft Sentinel and the full Defender suite. Currently, I'm trialing Defender for Servers Plan 2 to streamline log ingestion into Sentinel, which is working well. My real challenge lies in managing the physical and virtual servers connected through Azure Arc. I'm searching for similar management capabilities as with Intune and SCCM, especially for scenarios like where the Anti-Malware Service Executable is causing high CPU usage. Can anyone suggest tools within Azure Arc, Defender for Cloud, Azure Monitor, or any other Azure services that can grant me the same level of configuration management typically provided by Intune or SCCM? Is such functionality available, or am I just dreaming?
2 Answers
It sounds like you're hoping to centrally manage your software installations, right? Have you checked out Desired State Configuration? While it's not perfect for Windows, tools like Ansible can still be useful. PowerShell DSC can also help you get some level of control over your servers.
Keep exploring different configurations until you find what works best for your setup!
Machine Configuration with Azure Policy could be worth looking into. It mainly focuses on security compliance and establishing baselines, like the Azure Security Baseline. However, I get that you're after a more hands-on approach, like running commands across multiple devices similar to how ConfigMgr does it.
You might also want to dive deeper into Azure Monitor once you've got that set up—it offers robust monitoring features, even though it's not a replacement for something like Group Policy. Managing expectations for this transition is key.

Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures