The Machine Configuration extension performs audit and configuration operations inside virtual machines. Policies such as security baseline definitions for Linux and Windows can't check settings inside machines until the extension is installed.

IMPORTANT
The Machine Configuration extension requires each machine to have a managed identity. Deploying the Machine Configuration extension using the portal does not provision a managed identity on the target machine. To verify if an identity exists or to add a new identity, click on the Identity item from the virtual machine page.