diff --git a/pkg/api/vlabs/const.go b/pkg/api/vlabs/const.go
index 7a0ad88a44..a67d7724b1 100644
--- a/pkg/api/vlabs/const.go
+++ b/pkg/api/vlabs/const.go
@@ -87,5 +87,5 @@ const (
 	// DefaultNetworkPolicy defines the network policy to use by default
 	DefaultNetworkPolicy = "azure"
 	// DefaultNetworkPolicyWindows defines the network policy to use by default for clusters with Windows agent pools
-	DefaultNetworkPolicyWindows = "none"
+	DefaultNetworkPolicyWindows = "azure"
 )
diff --git a/pkg/api/vlabs/validate.go b/pkg/api/vlabs/validate.go
index c4babe1265..c34f7e6eb0 100644
--- a/pkg/api/vlabs/validate.go
+++ b/pkg/api/vlabs/validate.go
@@ -674,7 +674,7 @@ func (a *Properties) validateNetworkPolicy() error {
 	}
 
 	// Temporary safety check, to be removed when Windows support is added.
-	if (networkPolicy == "calico" || networkPolicy == "azure") && a.HasWindows() {
+	if (networkPolicy == "calico") && a.HasWindows() {
 		return fmt.Errorf("networkPolicy '%s' is not supporting windows agents", networkPolicy)
 	}