{
    "properties": {
        "displayName": "Audit Windows VMs on which Windows Defender Exploit Guard is not enabled",
        "policyType": "BuiltIn",
        "description": "This initiative deploys the policy requirements and audits Windows virtual machines on which Windows Defender Exploit Guard is not enabled. For more information on Guest Configuration policies, please visit https://aka.ms/gcpol",
        "metadata": {
            "version": "1.0.0-deprecated",
            "category": "Guest Configuration",
            "deprecated": true
        },
        "parameters": {
            "NotAvailableMachineState": {
                "type": "string",
                "metadata": {
                    "displayName": "State in which to show VMs on which Windows Defender Exploit Guard is not available",
                    "description": "Windows Defender Exploit Guard is only available starting with Windows 10/Windows Server with update 1709. Setting this value to 'Non-Compliant' will make machines with older versions on which Windows Defender Exploit Guard is not available (such as Windows Server 2012 R2) non-compliant. Setting this value to 'Compliant' will make these machines compliant."
                },
                "defaultValue": "Non-Compliant",
                "allowedValues": [
                    "Compliant",
                    "Non-Compliant"
                ]
            }
        },
        "policyDefinitions": [
            {
                "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/6a7a2bcf-f9be-4e35-9734-4f9657a70f1d",
                "policyDefinitionReferenceId": "Deploy_WindowsDefenderExploitGuard",
                "parameters": {
                    "NotAvailableMachineState": {
                        "value": "[parameters('NotAvailableMachineState')]"
                    }
                }
            },
            {
                "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/0d9b45ff-9ddd-43fc-bf59-fbd1c8423053",
                "policyDefinitionReferenceId": "Audit_WindowsDefenderExploitGuard"
            }
        ]
    },
    "id": "/providers/Microsoft.Authorization/policySetDefinitions/9d2fd8e6-95c8-410d-add0-43ada4241574",
    "name": "9d2fd8e6-95c8-410d-add0-43ada4241574"
}