VM Started Automatically to Create/Update/Delete Virtual Machine Extension by SQLVMResourceProviderAuth

tonypinter 0 Reputation points
2025-10-03T14:45:50.17+00:00

I noticed that 3 of my VMs were automatically started by a system process and left running. It seems to be related to creating or updating and then deleting virtual machine extensions by the SQLVMResourceProviderAuth entity.

Events (both on the same day):

"Create or Update Virtual Machine Extension"

"Delete Virtual Machine Extension"

Can you give me any information about why they may have been turned on and left on without me requesting it?

SQL Server on Azure Virtual Machines
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. hossein jalilian 13,120 Reputation points Volunteer Moderator
    2025-10-03T16:09:17.86+00:00

    Thanks for posting your question in the Microsoft Q&A forum.

    Azure may automatically start a stopped VM when extensions (like the SQL IaaS Agent) need to be created, updated, or deleted. These operations require the VM to be running so scripts/agents inside the OS can execute. The actions show up under SQLVMResourceProviderAuth because they’re triggered by the SQL VM Resource Provider, not by a user.

    Afterward, Azure does not stop the VM again, you need to shut it down manually if you don’t want it left running. This is expected behavior.


    Please don't forget to close up the thread here by upvoting and accept it as an answer if it is helpful

    0 comments No comments

  2. Swapnesh Panchal 740 Reputation points Microsoft External Staff Moderator
    2025-10-03T16:34:31.0233333+00:00

    Hi tonypinter ,
    Welcome to the Microsoft Q&A Platform.

    why it happened

    • azure started the vm under SQLVMResourceProviderAuth to run the vm agent and install/update/remove the SQL IaaS Agent extension
    • you’ll see “create/update” and sometimes “delete” for the extension
    • after that the vm stays running; it isn’t auto-stopped

    common triggers

    • an azure policy like “deploy SQL IaaS Agent extension for SQL server vms” ran a remediation
    • you registered the vm as a sql vm or changed ahb/licensing, backup, or auto-patching
    • automatic upgrade or migration of the sql iaas extension

    how to confirm (quick checks)

    • vm > activity log: filter for start virtual machine and virtual machine extension; caller = SQLVMResourceProviderAuth
    • azure policy > compliance: look for sql vm extension policies and any remediation tasks
    • vm > extensions: find SqlIaaSExtension and check its recent timestamp/version
    • sql virtual machines (resource): review auto-patching, backup, and ahb settings

    this is expected platform behavior, not user activity


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.