Primary references
Use the original standards below to check terminology and requirements. These references explain the standards; they do not endorse CISGuard or independently verify its product coverage.
All answers
Can CISGuard monitor Azure Virtual Desktop session hosts for CIS benchmark drift?
Yes. Azure Virtual Desktop (AVD) session hosts are Windows virtual machines, and CISGuard monitors them continuously with its agent, like any other Windows endpoint. Hosts running Windows 11 Enterprise, including multi-session, are checked against the CIS Windows 11 Enterprise Benchmark, and Windows Server 2022 hosts against the CIS Windows Server 2022 Benchmark. Configuration changes are detected in real time, so drift on a host shows up as it happens rather than at the next audit.
The longer answer.
The Azure layer around the hosts is covered as well. The CIS Azure Foundations Benchmark covers the subscription the host pool runs in (identity, Defender for Cloud, logging and networking settings), and the CIS Azure Compute Benchmark covers the session host virtual machines, for example disk encryption and managed identities. CISGuard scans both agentlessly through the Azure Resource Manager API, alongside the agent on each host. Microsoft Edge and Google Chrome on the hosts can be checked against their CIS benchmarks too.
A session host can drift from its baseline after deployment, through a Group Policy or Intune change, a local administrator or an application installer, even when the host pool was built from a hardened image. CISGuard records each change as a dated event for that host, and the results map to NIST 800-53, ISO 27001 and SOC 2 for audit evidence.
Azure Virtual Desktop also supports Windows 10 and Windows Server 2016, 2019 and 2025 as session host operating systems. CISGuard's coverage follows its 22 CIS Benchmarks, so check your host image against the benchmark list when you plan a rollout.
More questions on Deployment?
Our compliance engineers can show you exactly how CISGuard handles Deployment in a briefing scoped to your environment.