For managed disks and NICs, Azure’s Delete option permanently removes the associated resource when the VM is deleted; Detach leaves that resource available for reuse. Microsoft documents configurable behavior for managed disks, NICs, and public IPs. The public IP’s Delete behavior is linked to deletion of its associated NIC. Shared disks cannot use Delete as their deleteOption. The documentation also warns against force deletion when virtual hard disks are intended for reuse. Microsoft Learn.
\nIdentify the exact VM and every attached resource before approving retirement. Distinguish resources that must be retained for investigation, replacement, or recovery from those approved for removal. Inspect the actual options rather than inferring them from the creation tool or a different VM’s defaults.
\nApprove a resource-by-resource survival list and compare it with the VM’s actual delete options before deletion. Have the data and network owners review their respective entries, including any shared disk and whether the NIC itself will be retained. Resolve a disagreement between the intended outcome and configured behavior before proceeding. Keep replacement planning separate from expedited cleanup, and do not select force deletion merely to shorten a task that depends on disk reuse.
\nUse a disposable representative VM to validate the approved policy pattern first. After an authorized retirement, reconcile every previously attached resource against its intended retained or removed state. Record the identifiers of retained disks and interfaces and assign their next owner or disposition. Investigate an unexpected survivor or missing resource explicitly; deletion of the VM object alone is not the completion criterion for the retirement record.
\nMicrosoft Learn: Delete a VM and attached resources. Source reviewed September 9, 2026.
", "content_text": "Source facts\nFor managed disks and NICs, Azure’s Delete option permanently removes the associated resource when the VM is deleted; Detach leaves that resource available for reuse. Microsoft documents configurable behavior for managed disks, NICs, and public IPs. The public IP’s Delete behavior is linked to deletion of its associated NIC. Shared disks cannot use Delete as their deleteOption. The documentation also warns against force deletion when virtual hard disks are intended for reuse. Microsoft Learn.\nApplicability\nIdentify the exact VM and every attached resource before approving retirement. Distinguish resources that must be retained for investigation, replacement, or recovery from those approved for removal. Inspect the actual options rather than inferring them from the creation tool or a different VM’s defaults.\nDSE recommendation\nApprove a resource-by-resource survival list and compare it with the VM’s actual delete options before deletion. Have the data and network owners review their respective entries, including any shared disk and whether the NIC itself will be retained. Resolve a disagreement between the intended outcome and configured behavior before proceeding. Keep replacement planning separate from expedited cleanup, and do not select force deletion merely to shorten a task that depends on disk reuse.\nVerification\nUse a disposable representative VM to validate the approved policy pattern first. After an authorized retirement, reconcile every previously attached resource against its intended retained or removed state. Record the identifiers of retained disks and interfaces and assign their next owner or disposition. Investigate an unexpected survivor or missing resource explicitly; deletion of the VM object alone is not the completion criterion for the retirement record.\nOfficial references\nMicrosoft Learn: Delete a VM and attached resources. Source reviewed September 9, 2026.", "content_markdown": "## Source facts\n\nFor managed disks and NICs, Azure’s Delete option permanently removes the associated resource when the VM is deleted; Detach leaves that resource available for reuse. Microsoft documents configurable behavior for managed disks, NICs, and public IPs. The public IP’s Delete behavior is linked to deletion of its associated NIC. Shared disks cannot use Delete as their deleteOption. The documentation also warns against force deletion when virtual hard disks are intended for reuse. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/delete).\n\n## Applicability\n\nIdentify the exact VM and every attached resource before approving retirement. Distinguish resources that must be retained for investigation, replacement, or recovery from those approved for removal. Inspect the actual options rather than inferring them from the creation tool or a different VM’s defaults.\n\n## DSE recommendation\n\nApprove a resource-by-resource survival list and compare it with the VM’s actual delete options before deletion. Have the data and network owners review their respective entries, including any shared disk and whether the NIC itself will be retained. Resolve a disagreement between the intended outcome and configured behavior before proceeding. Keep replacement planning separate from expedited cleanup, and do not select force deletion merely to shorten a task that depends on disk reuse.\n\n## Verification\n\nUse a disposable representative VM to validate the approved policy pattern first. After an authorized retirement, reconcile every previously attached resource against its intended retained or removed state. Record the identifiers of retained disks and interfaces and assign their next owner or disposition. Investigate an unexpected survivor or missing resource explicitly; deletion of the VM object alone is not the completion criterion for the retirement record.\n\n## Official references\n\n[Microsoft Learn: Delete a VM and attached resources](https://learn.microsoft.com/en-us/azure/virtual-machines/delete). Source reviewed September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-045-approve-attached-resource-delete-policies-before-retiring-an-azure-vm/", "url": "https://update.dsesecurity.com/updates/dse-20260909-045-approve-attached-resource-delete-policies-before-retiring-an-azure-vm/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-045-approve-attached-resource-delete-policies-before-retiring-an-azure-vm/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Approve attached-resource delete policies before retiring an Azure VM", "item": "https://update.dsesecurity.com/updates/dse-20260909-045-approve-attached-resource-delete-policies-before-retiring-an-azure-vm/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-045-approve-attached-resource-delete-policies-before-retiring-an-azure-vm/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-045-approve-attached-resource-delete-policies-before-retiring-an-azure-vm/", "url": "https://update.dsesecurity.com/updates/dse-20260909-045-approve-attached-resource-delete-policies-before-retiring-an-azure-vm/", "headline": "Approve attached-resource delete policies before retiring an Azure VM", "description": "Which Azure disks and network resources should survive when a VM is deleted?", "abstract": "Which Azure disks and network resources should survive when a VM is deleted?", "articleBody": "Source facts\nFor managed disks and NICs, Azure’s Delete option permanently removes the associated resource when the VM is deleted; Detach leaves that resource available for reuse. Microsoft documents configurable behavior for managed disks, NICs, and public IPs. The public IP’s Delete behavior is linked to deletion of its associated NIC. Shared disks cannot use Delete as their deleteOption. The documentation also warns against force deletion when virtual hard disks are intended for reuse. Microsoft Learn.\nApplicability\nIdentify the exact VM and every attached resource before approving retirement. Distinguish resources that must be retained for investigation, replacement, or recovery from those approved for removal. Inspect the actual options rather than inferring them from the creation tool or a different VM’s defaults.\nDSE recommendation\nApprove a resource-by-resource survival list and compare it with the VM’s actual delete options before deletion. Have the data and network owners review their respective entries, including any shared disk and whether the NIC itself will be retained. Resolve a disagreement between the intended outcome and configured behavior before proceeding. Keep replacement planning separate from expedited cleanup, and do not select force deletion merely to shorten a task that depends on disk reuse.\nVerification\nUse a disposable representative VM to validate the approved policy pattern first. After an authorized retirement, reconcile every previously attached resource against its intended retained or removed state. Record the identifiers of retained disks and interfaces and assign their next owner or disposition. Investigate an unexpected survivor or missing resource explicitly; deletion of the VM object alone is not the completion criterion for the retirement record.\nOfficial references\nMicrosoft Learn: Delete a VM and attached resources. Source reviewed September 9, 2026.", "datePublished": "2026-09-10T00:31:11+00:00", "dateModified": "2026-09-10T00:32:01+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-045-approve-attached-resource-delete-policies-before-retiring-an-azure-vm/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-045-approve-attached-resource-delete-policies-before-retiring-an-azure-vm/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Approve attached-resource delete policies before retiring an Azure VM" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Checklist", "Information priority" ], "genre": "Checklist", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 276, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Delete a VM and attached resources - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/delete" } } ] } }