sca-azure-vnet-vm

Guides learners through deploying an Azure VNet, NSG, and Windows Server VM with IIS.

2|Updated Jun 1, 2026
One-click install
npx skills add https://github.com/jay-steenbergen/MSSAMentorAgent --skill sca-azure-vnet-vm-jay-steenbergen
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sca-azure-vnet-vm
Source: https://github.com/jay-steenbergen/MSSAMentorAgent/tree/main/.github/skills/tracks/server-cloud-admin/sca-azure-vnet-vm
Command: npx skills add https://github.com/jay-steenbergen/MSSAMentorAgent --skill sca-azure-vnet-vm-jay-steenbergen

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Learners new to Azure infrastructure often struggle to connect networking concepts (VNets, subnets, NSGs) with a concrete, working deployment, and frequently rack up unexpected Azure bills by leaving VMs running. This Skill walks a learner through building a complete, secured Azure IaaS environment from scratch while teaching cost discipline. ## Core Features & Use Cases - Network-first Azure deployment: Create a resource group, VNet (10.20.0.0/16), subnet, and NSG with PowerShell Az module commands, with each concept explained as it is built. - Secure VM deployment with IIS: Deploy a Windows Server 2022 VM restricted to RDP from the learner's own IP, install IIS, and serve a custom page over HTTP to prove end-to-end connectivity. - Cost and cleanup discipline: Teaches the difference between "stopped" and "deallocated" VM states, dynamic vs static public IPs, and full teardown via resource group deletion. - Use Case: An MSSA student in the Server & Cloud Administration track completes their first Azure IaaS project, ending with a browser-reachable web server on infrastructure they built and a deallocated VM that stops billing. ## Quick Start Ask the mentor to start the sca-azure-vnet-vm project and walk you through building your first Azure virtual network and Windows VM step by step.

Frequently Asked Questions about sca-azure-vnet-vm

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I deploy a Windows Server VM in Azure with PowerShell?

Use New-AzVM with parameters for resource group, VNet, subnet, NSG, image (Win2022Datacenter), and size such as Standard_B2s. The command wires existing network resources together and takes about five minutes to complete.

How do I restrict RDP access to an Azure VM with an NSG?

Create an NSG inbound rule allowing TCP port 3389 only from your own public IP as a /32 source prefix, then associate the NSG with the subnet. Never open 3389 to 0.0.0.0/0, since internet-facing RDP is constantly brute-forced.

What is the difference between stopped and deallocated Azure VMs?

Shutting down from inside Windows leaves the VM in Stopped state, which still bills for reserved compute. Running Stop-AzVM deallocates the VM, releasing compute and stopping those charges, though disk storage still costs a small amount.

Why can't I RDP into my Azure VM after deployment?

Check three things in order: the NSG rule allows your current public IP (home IPs change), the VM has finished booting (wait 2-3 minutes), and your local firewall permits outbound port 3389.

Does this project require an Azure subscription and budget?

Yes, it requires an Azure subscription with Contributor permissions and the Az PowerShell module, costing roughly $2-5 if the VM is left running. Learners without budget can use the Microsoft Learn sandbox for the same commands without billing risk.