[[["わかりやすい","easyToUnderstand","thumb-up"],["問題の解決に役立った","solvedMyProblem","thumb-up"],["その他","otherUp","thumb-up"]],[["わかりにくい","hardToUnderstand","thumb-down"],["情報またはサンプルコードが不正確","incorrectInformationOrSampleCode","thumb-down"],["必要な情報 / サンプルがない","missingTheInformationSamplesINeed","thumb-down"],["翻訳に関する問題","translationIssue","thumb-down"],["その他","otherDown","thumb-down"]],["最終更新日 2025-09-04 UTC。"],[[["\u003cp\u003eThis document contrasts VM Manager's OS policy feature with the legacy guest policy feature.\u003c/p\u003e\n"],["\u003cp\u003eBoth features are part of the VM Manager suite, but the OS policy requires a specific agent version (\u003ccode\u003e20210427\u003c/code\u003e or later), while the legacy guest policy works with any version.\u003c/p\u003e\n"],["\u003cp\u003eOS policy is zonal, whereas legacy guest policy is global.\u003c/p\u003e\n"],["\u003cp\u003eThe legacy guest policy only supports enforcement, while OS Policy is also able to provide policy compliance and rollout features.\u003c/p\u003e\n"],["\u003cp\u003eOS policies allow for more diverse use cases compared to legacy guest policies as they offer exclusion filters when selecting target VMs, as well as the ability to define a single policy for multiple operating systems.\u003c/p\u003e\n"]]],[],null,["This document compares the OS policy feature of VM Manager with the legacy\nguest policy feature.\n\nComparison table\n\nBoth the OS policy and guest policy (legacy) features are part of the\nVM Manager suite, and can be enabled by setting up VM Manager.\nFor more information, see [Set up VM Manager](/compute/vm-manager/docs/setup).\n\nHowever, there are a few differences between the two options. These differences\nare summarized in the following table.\n\n| | **Guest policy (legacy)** | **OS policy** |\n|-------------------------------------------------------------|---------------------------------------------------------------------------|-----------------------------------------------------|\n| OS Config agent version | Any | Version dated `20210427` or later ^1^ |\n| Resource type^2^ | Global | Zonal |\n| Policy enforcement and compliance supported | Enforcement only | |\n| Rollout supported ^3^ | | |\n| Compliance reports available | | |\n| Single policy can be defined for multiple operating systems | | |\n| Exclusion filters available when selecting target VMs | | |\n| Supported resources | - Packages - Package repository - Software recipes^4^ - File - Executable | - Packages - Package repository - Executable - File |\n\n\n^1^To view agent version, see\n[View OS Config agent version](/compute/vm-manager/docs/upgrade-vm-manager#view-version).\n\n^2^For information about resource types, see\n[Global, regional, and zonal resources](/compute/docs/regions-zones/global-regional-zonal-resources).\n\n^3^For information about rollouts, see\n[Understanding rollouts](/compute/vm-manager/docs/os-policies/create-os-policy-assignment#rollouts).\n\n^4^A software recipe only runs when a guest policy is first created.\nTo rerun a software recipe, you would need to delete and recreate the guest policy.\nFor this reason, OS policy uses an executable that can be\ncontinuously checked and enforced.\n\n\u003cbr /\u003e\n\nWhat's next?\n\n- Learn more about [OS policies](/compute/vm-manager/docs/os-policies)."]]
