I am receiving the recommendation to "Review network provider ordering settings." on a fresh Windows Server 2012 R2 OS installed on VMware
I am receiving the recommendation "Review network provider ordering settings." on a fresh Windows Server 2012 R2 operating system install hosted on VMware ESXi 5.5 with the latest version of VMware Tools installed. Since no changes have been made to network provider order, I believe that this is a bug.
After investigation, there are various other permutations with other hypervisors and we don’t have a knowledge of all those cases to make it more reliable in all environments.
Since it triggers false positives, the content owner decided to retire this rule.
This has been fixed and deployed yesterday.
It might take a while to reflect in the result of the analysis as the scan occurs once a week on every agent.
Frank Lesniak commented
I think that's fair. I like the spirit of the rule, but it's not your job to keep up with all the various hypervisors out there.
The only alternative suggestion that I have is to run this rule only if it's a physical server or a Hyper-V VM.
The OpInsights product team would defer to the CSS content owner to determine what the official Microsoft support best practice should be in this particular rule/instance.
In general you might want to consider voting this other idea on our backlog http://feedback.azure.com/forums/267889-azure-operational-insights/suggestions/6682932-allow-to-ignore-override-prioritized-recommendation or ignoring those recommendations yourself by using search filters and saving your own personalized searches to include/exclude what makes sense to you - the thread linked has further info in this regard.
Hope that helps,
Frank Lesniak commented
Raj, I am seeing the following value:
I believe this will be the default on any VMware virtual machine. In my opinion, this rule should consider this provider order to be valid.
Raj Pochiraju commented
Thank you for the feedback, on Windows 2008 and above, we recommend the order below
1.Microsoft Remote Desktop Host Server Network Provider. (rdpnp)
2.Microsoft Windows Network. (lanmanworkstation)
We get this information from the registry location: HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order
Key value name: ProviderOrder
Can you please let us know what value that you are seeing for that registry key?