Only install organization-approved extensions on VMs.
Perform the following in the Azure Console:
Perform the following in Azure Command Line Interface 2.0:
From the audit command identify the unapproved extensions, and use the below CLI command to remove an unapproved extension attached to VM.
az vm extension delete –resource-group <resourceGroupName> –vm-name <vmName> –name <extensionName>