This document compares the OS policy feature of VM Manager with the legacy
guest policy feature.
Comparison table
Both the OS policy and guest policy (legacy) features are part of the
VM Manager suite, and can be enabled by setting up VM Manager.
For more information, seeSet up VM Manager.
However, there are a few differences between the two options. These differences
are summarized in the following table.
Guest policy (legacy)
OS policy
OS Config agent version
Any
Version dated20210427or later1
Resource type2
Global
Zonal
Policy enforcement and compliance supported
Enforcement only
Rollout supported3
Compliance reports available
Single policy can be defined for multiple operating systems
Exclusion filters available when selecting target VMs
4A software recipe only runs when a guest policy is first created.
To rerun a software recipe, you would need to delete and recreate the guest policy.
For this reason, OS policy uses an executable that can be
continuously checked and enforced.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-11-13 UTC."],[],[]]
