{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/", "slug": "dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move", "url": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/" }, "title": "Treat an FSRM expiration task as a controlled file move", "summary": "What should be approved before an FSRM task expires matching files?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-08T18:16:15+00:00", "modified_at": "2026-09-08T18:20:21+00:00", "reviewed_on": "2026-09-08", "reading_minutes": 2, "word_count": 223, "potentially_affected": "Use this review when designing an FSRM expiration rule.", "dse_recommendation": "Have the data owner review examples that should match and examples that must remain in place.", "primary_source": { "name": "Create a File Expiration Task", "url": "https://learn.microsoft.com/en-us/windows-server/storage/fsrm/create-file-expiration-task", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Microsoft describes a file-expiration task as moving files that meet selected criteria into an expiration directory, where an administrator can later back up and delete them. A run creates a destination directory grouped by the server that performed the task. The new directory also reflects the task name and run time, while moved files retain their original directory structure. Microsoft documentation.

\n

Applicability

\n

Use this review when designing an FSRM expiration rule. Identify the source paths, selection criteria, data owner, and expiration location. Keep the move decision distinct from a later decision to delete retained files.

\n

DSE recommendation

\n

Have the data owner review examples that should match and examples that must remain in place. Choose a limited pilot scope and confirm the destination can be administered by the intended personnel. Record how users will locate moved material and how an incorrect match will be returned through the approved process. Obtain separate retention and deletion decisions before scheduling subsequent handling.

\n

Verification

\n

After the approved test run, reconcile the moved-file list with the selection examples. Check the destination grouping and retained directory structure, and confirm representative files are readable. Investigate both unexpected moves and expected files left behind. Preserve the rule, run time, and owner acceptance before enabling a recurring expiration schedule.

\n

Official references

\n

Microsoft Learn: Create a File Expiration Task. Source reviewed September 8, 2026.

", "content_text": "Source facts\nMicrosoft describes a file-expiration task as moving files that meet selected criteria into an expiration directory, where an administrator can later back up and delete them. A run creates a destination directory grouped by the server that performed the task. The new directory also reflects the task name and run time, while moved files retain their original directory structure. Microsoft documentation.\nApplicability\nUse this review when designing an FSRM expiration rule. Identify the source paths, selection criteria, data owner, and expiration location. Keep the move decision distinct from a later decision to delete retained files.\nDSE recommendation\nHave the data owner review examples that should match and examples that must remain in place. Choose a limited pilot scope and confirm the destination can be administered by the intended personnel. Record how users will locate moved material and how an incorrect match will be returned through the approved process. Obtain separate retention and deletion decisions before scheduling subsequent handling.\nVerification\nAfter the approved test run, reconcile the moved-file list with the selection examples. Check the destination grouping and retained directory structure, and confirm representative files are readable. Investigate both unexpected moves and expected files left behind. Preserve the rule, run time, and owner acceptance before enabling a recurring expiration schedule.\nOfficial references\nMicrosoft Learn: Create a File Expiration Task. Source reviewed September 8, 2026.", "content_markdown": "## Source facts\n\nMicrosoft describes a file-expiration task as moving files that meet selected criteria into an expiration directory, where an administrator can later back up and delete them. A run creates a destination directory grouped by the server that performed the task. The new directory also reflects the task name and run time, while moved files retain their original directory structure. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/storage/fsrm/create-file-expiration-task).\n\n## Applicability\n\nUse this review when designing an FSRM expiration rule. Identify the source paths, selection criteria, data owner, and expiration location. Keep the move decision distinct from a later decision to delete retained files.\n\n## DSE recommendation\n\nHave the data owner review examples that should match and examples that must remain in place. Choose a limited pilot scope and confirm the destination can be administered by the intended personnel. Record how users will locate moved material and how an incorrect match will be returned through the approved process. Obtain separate retention and deletion decisions before scheduling subsequent handling.\n\n## Verification\n\nAfter the approved test run, reconcile the moved-file list with the selection examples. Check the destination grouping and retained directory structure, and confirm representative files are readable. Investigate both unexpected moves and expected files left behind. Preserve the rule, run time, and owner acceptance before enabling a recurring expiration schedule.\n\n## Official references\n\n[Microsoft Learn: Create a File Expiration Task](https://learn.microsoft.com/en-us/windows-server/storage/fsrm/create-file-expiration-task). Source reviewed September 8, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/", "url": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-08" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Treat an FSRM expiration task as a controlled file move", "item": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/", "url": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/", "headline": "Treat an FSRM expiration task as a controlled file move", "description": "What should be approved before an FSRM task expires matching files?", "abstract": "What should be approved before an FSRM task expires matching files?", "articleBody": "Source facts\nMicrosoft describes a file-expiration task as moving files that meet selected criteria into an expiration directory, where an administrator can later back up and delete them. A run creates a destination directory grouped by the server that performed the task. The new directory also reflects the task name and run time, while moved files retain their original directory structure. Microsoft documentation.\nApplicability\nUse this review when designing an FSRM expiration rule. Identify the source paths, selection criteria, data owner, and expiration location. Keep the move decision distinct from a later decision to delete retained files.\nDSE recommendation\nHave the data owner review examples that should match and examples that must remain in place. Choose a limited pilot scope and confirm the destination can be administered by the intended personnel. Record how users will locate moved material and how an incorrect match will be returned through the approved process. Obtain separate retention and deletion decisions before scheduling subsequent handling.\nVerification\nAfter the approved test run, reconcile the moved-file list with the selection examples. Check the destination grouping and retained directory structure, and confirm representative files are readable. Investigate both unexpected moves and expected files left behind. Preserve the rule, run time, and owner acceptance before enabling a recurring expiration schedule.\nOfficial references\nMicrosoft Learn: Create a File Expiration Task. Source reviewed September 8, 2026.", "datePublished": "2026-09-08T18:16:15+00:00", "dateModified": "2026-09-08T18:20:21+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260908-056-treat-an-fsrm-expiration-task-as-a-controlled-file-move/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Treat an FSRM expiration task as a controlled file move" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 223, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Create a File Expiration Task", "url": "https://learn.microsoft.com/en-us/windows-server/storage/fsrm/create-file-expiration-task" } } ] } }