Is it supported to remove the preinstalled .NET 6 Hosting Bundle from existing Windows Server 2022 Azure Marketplace VMs?

Kishor kumar Reddy Akki 55 Reputation points
2026-11-02T12:54:27.0866667+00:00

We are looking for Microsoft guidance regarding the supported remediation of .NET 6 Windows Server Hosting Bundle components on existing Windows Server 2022 Azure VMs.

We have identified existing VMs deployed using the following Azure Marketplace image:

  • Publisher: MicrosoftWindowsServer
  • Offer: WindowsServer
  • SKU: 2022-Datacenter

For example, we observed:

  • Image version 20348.5622.260906 containing Microsoft.NETCore.App 6.0.46 and Microsoft.AspNetCore.App 6.0.46
  • Image version 20348.5761.261013 containing Microsoft.NETCore.App 6.0.47 and Microsoft.AspNetCore.App 6.0.47

We understand that for new deployments, customers can consider moving to the newer MicrosoftWindowsServer / windowsserver2022 / 2022-datacenter Marketplace offer.

However, we need clarification regarding the existing VM estate, where replacing otherwise functioning VMs solely to remove .NET 6 may not be practical.

Could Microsoft please clarify the following:

Is .NET 6 required by the Windows Server 2022 operating system on VMs deployed from the older WindowsServer Marketplace offer, or was it included as an additional preinstalled component?

If applications running on the VM have no dependency on .NET 6, is uninstalling the .NET 6 Windows Server Hosting Bundle from an existing VM a Microsoft-supported remediation?

Would removal of the .NET 6 Hosting Bundle have any impact on:

  • Windows Server supportability
    • Azure VM functionality
      • Windows servicing or Windows Update
        • Other Microsoft components installed as part of the Marketplace image
        Is there a Microsoft-supported/recommended procedure for removing the preinstalled .NET 6 Hosting Bundle and associated .NET 6 runtimes from these existing VMs? Are there any Azure VM agents, extensions, Windows components, or other Microsoft components included with these Marketplace images that depend on .NET 6 and therefore need to be identified before removal?

The objective is to establish a supported remediation path for the existing Windows Server 2022 VM estate affected by .NET 6 end-of-support vulnerability findings, while using the newer Marketplace offer for future deployments.

We would appreciate Microsoft guidance or official documentation confirming the supported approach.We are looking for Microsoft guidance regarding the supported remediation of .NET 6 Windows Server Hosting Bundle components on existing Windows Server 2022 Azure VMs.

Azure Virtual Machines
Azure Virtual Machines

An Azure service that is used to provision Windows and Linux virtual machines.

0 comments No comments

1 answer

Sort by: Newest
  1. AI answer

    2026-11-02T12:56:21.5233333+00:00

    Microsoft advises removing .NET 6 from affected Windows Server 2022 VMs, but for a formal supportability decision covering your exact legacy image builds and installed extensions, validate dependencies on a clone and obtain written confirmation through an Azure Support request before estate-wide removal.^1^

    What the published guidance establishes

    • .NET 6 is an additional Marketplace-image component, not a documented Windows Server 2022 operating-system requirement. Microsoft’s refreshed windowsserver2022 images exclude end-of-support .NET packages while remaining Windows Server 2022 images. The legacy images included .NET 6, and Microsoft explicitly advises users to migrate and remove it.^1^
    • .NET 6 reached end of support on November 12, 2024.^2^
    • The Azure Windows VM Agent does not require .NET 6. Its documented prerequisite is .NET Framework 4.0 on supported Windows Server versions, including Windows Server 2022.^3^
    • No blanket conclusion can be made for every extension or installed Microsoft workload. Microsoft states that extensions can have their own dependencies, so each installed extension and application must be checked individually.^4^

    Consequently, removing .NET 6 should not inherently remove Windows Server or Azure VM support. However, the available documentation does not certify that every first-party component in image versions 20348.5622.260906 and 20348.5761.261013 is independent of .NET 6.

    Proposed removal procedure

    Perform this first on a restored copy or temporary clone. Removing the Hosting Bundle can break IIS applications, services, agents, or scheduled tasks that use .NET 6.

    1. Inventory installed architectures and removable components
         dotnet --info
         dotnet --list-runtimes
         dotnet --list-sdks
      
         dotnet-core-uninstall list --hosting-bundle
         dotnet-core-uninstall list --runtime --x64
         dotnet-core-uninstall list --runtime --x86
         dotnet-core-uninstall list --aspnet-runtime --x64
         dotnet-core-uninstall list --aspnet-runtime --x86
      
      The Uninstall Tool supports separate Hosting Bundle, runtime, ASP.NET runtime, x64, and x86 inventory.^5^
    2. Assess workload dependencies Check:
      • IIS sites and application pools, including applications hosted inside w3wp.exe.
      • Application directories for *.runtimeconfig.json files specifying net6.0 or Microsoft.NETCore.App/Microsoft.AspNetCore.App 6.x.
      • Windows services and scheduled tasks whose executable or command line points to dotnet.exe or an application built for .NET 6.
      • Self-contained or apphost-based executables; these might not appear as a process named dotnet.
      • Installed Azure extensions and other Microsoft server products against their individual system requirements.
    3. Dry-run the Hosting Bundle removal Substitute the exact version returned by list:
         dotnet-core-uninstall dry-run 6.0.47 --hosting-bundle
      
      dry-run reports what would be removed without changing the machine.^6^
    4. Remove the Hosting Bundle first
         dotnet-core-uninstall remove 6.0.47 --hosting-bundle
      
      Do not immediately run separate runtime-removal commands: Hosting Bundle removal can also remove associated runtime components. The tool documents --hosting-bundle as removing the runtime and Hosting Bundle.^7^
    5. Reinventory and remove only residual 6.x components Run the list commands again. If unrelated x64 or x86 .NET 6 runtimes remain, dry-run and remove those specific entries. Avoid --force unless Microsoft Support directs it; the tool normally retains components that might be required by Visual Studio or other SDKs.^7^
    6. Validate
      • Restart the VM during the approved maintenance window.
      • Confirm the Azure VM Agent and every installed extension report healthy.
      • Test IIS sites, services, scheduled tasks, monitoring, backup, security, and management tooling.
      • Run dotnet --list-runtimes and the vulnerability scan again.

    For large-scale compliance remediation, Microsoft provides .NET Install Manager (DNIM), designed to identify, remove, and update vulnerable .NET installations across Windows estates. It also offers process/runtime diagnostics, although it does not report the ASP.NET Core Module, so Hosting Bundle checks remain necessary.^8^^9^

    Obtain image-specific confirmation

    Open an Azure Portal → Help + support → Create a support request under Virtual Machines or Marketplace images. Include:

    • Publisher, offer, SKU, and both exact image versions.
    • Installed Azure extensions and Microsoft products.
    • dotnet --info and Uninstall Tool inventory.
    • The proposed Hosting Bundle removal and test results.

    Ask Microsoft to confirm in writing that:

    1. Removing the .NET 6 Hosting Bundle preserves Windows Server and Azure VM supportability for those builds.
    2. No component baked into those exact images depends on .NET 6.
    3. No installed first-party extension or product in your supplied inventory requires it.
    4. Windows servicing and Windows Update remain supported after removal.

    That case response is the appropriate authoritative record for audit and compliance purposes; the public documentation supports removal generally but does not provide build-by-build dependency certification.


    References

    1. Windows Server images for June 2026 | Microsoft Support
    2. Ending Support in 2024
    3. Azure Windows VM Agent overview
    4. Virtual machine extensions and features for Windows
    5. dotnet-core-uninstall list (os-windows)
    6. dotnet-core-uninstall dry-run (os-windows)
    7. dotnet-core-uninstall remove (os-windows)
    8. .NET Install Manager overview
    9. .NET Install Manager FAQ
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.