diff --git a/byos/containers/deploy/deploy.sh b/byos/containers/deploy/deploy.sh
index 104a63d..c5e3c71 100644
--- a/byos/containers/deploy/deploy.sh
+++ b/byos/containers/deploy/deploy.sh
@@ -138,13 +138,16 @@ then
 fi
 
 # Create VM
-az vm create -n internal-vm -g $teamRG --admin-username azureuser --generate-ssh-keys --public-ip-address "" --image UbuntuLTS --vnet-name vnet --subnet vm-subnet
+az vm create -n internal-vm -g $teamRG --admin-username azureuser --generate-ssh-keys --public-ip-address "" --image UbuntuLTS --vnet-name vnet --subnet vm-subnet --nsg-rule NONE
 
 if [ $? == 0 ];
 then
     echo "VM created successfully in subnet"
 fi
 
+# Deallocate the VM as it is only used in Challenge 3
+az vm deallocate -n internal-vm -g $teamRG
+
 # Create Azure SQL Server instance
 echo "Creating Azure SQL Server instance..."
 az sql server create -l $region -g $teamRG -n $sqlServerName -u $sqlServerUsername -p $sqlServerPassword