sca-azure-vnet-vm

Guides learners through deploying an Azure VNet, NSG, and Windows Server VM with IIS.

2|Updated Jun 1, 2026
One-click install
npx skills add https://github.com/jay-steenbergen/MSSAMentorAgent --skill sca-azure-vnet-vm-jay-steenbergen
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sca-azure-vnet-vm
Source: https://github.com/jay-steenbergen/MSSAMentorAgent/tree/main/.github/skills/tracks/server-cloud-admin/sca-azure-vnet-vm
Command: npx skills add https://github.com/jay-steenbergen/MSSAMentorAgent --skill sca-azure-vnet-vm-jay-steenbergen

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Learners new to Azure infrastructure often struggle to connect networking concepts (VNets, subnets, NSGs) with a concrete, working deployment, and frequently rack up unexpected Azure bills by leaving VMs running. This Skill walks a learner through building a complete, secured Azure IaaS environment from scratch while teaching cost discipline. ## Core Features & Use Cases - Network-first Azure deployment: Create a resource group, VNet (10.20.0.0/16), subnet, and NSG with PowerShell Az module commands, with each concept explained as it is built. - Secure VM deployment with IIS: Deploy a Windows Server 2022 VM restricted to RDP from the learner's own IP, install IIS, and serve a custom page over HTTP to prove end-to-end connectivity. - Cost and cleanup discipline: Teaches the difference between "stopped" and "deallocated" VM states, dynamic vs static public IPs, and full teardown via resource group deletion. - Use Case: An MSSA student in the Server & Cloud Administration track completes their first Azure IaaS project, ending with a browser-reachable web server on infrastructure they built and a deallocated VM that stops billing. ## Quick Start Ask the mentor to start the sca-azure-vnet-vm project and walk you through building your first Azure virtual network and Windows VM step by step.

Frequently Asked Questions about sca-azure-vnet-vm

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy a Windows Server VM in Azure with PowerShell?▼

Use New-AzVM with parameters for resource group, VNet, subnet, NSG, image (Win2022Datacenter), and size such as Standard_B2s. The command wires existing network resources together and takes about five minutes to complete.

How do I restrict RDP access to an Azure VM with an NSG?▼

Create an NSG inbound rule allowing TCP port 3389 only from your own public IP as a /32 source prefix, then associate the NSG with the subnet. Never open 3389 to 0.0.0.0/0, since internet-facing RDP is constantly brute-forced.

What is the difference between stopped and deallocated Azure VMs?▼

Shutting down from inside Windows leaves the VM in Stopped state, which still bills for reserved compute. Running Stop-AzVM deallocates the VM, releasing compute and stopping those charges, though disk storage still costs a small amount.

Why can't I RDP into my Azure VM after deployment?▼

Check three things in order: the NSG rule allows your current public IP (home IPs change), the VM has finished booting (wait 2-3 minutes), and your local firewall permits outbound port 3389.

Does this project require an Azure subscription and budget?▼

Yes, it requires an Azure subscription with Contributor permissions and the Az PowerShell module, costing roughly $2-5 if the VM is left running. Learners without budget can use the Microsoft Learn sandbox for the same commands without billing risk.