{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/", "slug": "dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion", "url": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/" }, "title": "End active disk-restore-point access before an approved restore-point deletion", "summary": "Why can an Azure restore point resist deletion even after its retention review approves removal?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:30:38+00:00", "modified_at": "2026-09-10T00:35:08+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 242, "potentially_affected": "Operators investigating DiskRestorePointUsedByCustomer while deleting an Azure VM restore point.", "dse_recommendation": "Identify and coordinate the outstanding disk access before ending it and retrying the authorized deletion.", "primary_source": { "name": "Troubleshoot restore point failures - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/restore-point-troubleshooting", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Azure blocks deletion of a restore point while any underlying disk restore point has an active shared access signature. Microsoft identifies this condition with DiskRestorePointUsedByCustomer and directs the operator to call EndGetAccess before deletion. The documented resolution ends shared access on the disk restore points and then retries the operation. Microsoft Learn.

\n

Applicability

\n

Use this check for the specific active-access error, not every restore-point failure. Confirm that retention and recovery owners have already approved deletion of the exact restore point. Identify whether an export, investigation, or recovery process still depends on the access being granted.

\n

DSE recommendation

\n

Identify and coordinate the outstanding disk access before ending it and retrying the authorized deletion. Ask the access owner whether the consuming operation has finished and preserve its outcome. Keep resource identifiers and approval evidence in the ticket, but exclude the SAS URL itself. Do not respond to this error by broadening administrative permissions or deleting unrelated recovery material.

\n

Verification

\n

After the approved access-ending operation, retry deletion only for the selected restore point and inspect its result. Reconcile the final restore-point inventory with the retention decision and confirm that no unrelated item changed. If deletion still fails, preserve the new error and investigate its stated cause rather than repeatedly ending access across the collection. Close the cleanup record only when both the consumer handoff and the intended resource disposition are accounted for.

\n

Official references

\n

Microsoft Learn: Troubleshoot restore point failures. Source reviewed September 9, 2026.

", "content_text": "Source facts\nAzure blocks deletion of a restore point while any underlying disk restore point has an active shared access signature. Microsoft identifies this condition with DiskRestorePointUsedByCustomer and directs the operator to call EndGetAccess before deletion. The documented resolution ends shared access on the disk restore points and then retries the operation. Microsoft Learn.\nApplicability\nUse this check for the specific active-access error, not every restore-point failure. Confirm that retention and recovery owners have already approved deletion of the exact restore point. Identify whether an export, investigation, or recovery process still depends on the access being granted.\nDSE recommendation\nIdentify and coordinate the outstanding disk access before ending it and retrying the authorized deletion. Ask the access owner whether the consuming operation has finished and preserve its outcome. Keep resource identifiers and approval evidence in the ticket, but exclude the SAS URL itself. Do not respond to this error by broadening administrative permissions or deleting unrelated recovery material.\nVerification\nAfter the approved access-ending operation, retry deletion only for the selected restore point and inspect its result. Reconcile the final restore-point inventory with the retention decision and confirm that no unrelated item changed. If deletion still fails, preserve the new error and investigate its stated cause rather than repeatedly ending access across the collection. Close the cleanup record only when both the consumer handoff and the intended resource disposition are accounted for.\nOfficial references\nMicrosoft Learn: Troubleshoot restore point failures. Source reviewed September 9, 2026.", "content_markdown": "## Source facts\n\nAzure blocks deletion of a restore point while any underlying disk restore point has an active shared access signature. Microsoft identifies this condition with DiskRestorePointUsedByCustomer and directs the operator to call EndGetAccess before deletion. The documented resolution ends shared access on the disk restore points and then retries the operation. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/restore-point-troubleshooting).\n\n## Applicability\n\nUse this check for the specific active-access error, not every restore-point failure. Confirm that retention and recovery owners have already approved deletion of the exact restore point. Identify whether an export, investigation, or recovery process still depends on the access being granted.\n\n## DSE recommendation\n\nIdentify and coordinate the outstanding disk access before ending it and retrying the authorized deletion. Ask the access owner whether the consuming operation has finished and preserve its outcome. Keep resource identifiers and approval evidence in the ticket, but exclude the SAS URL itself. Do not respond to this error by broadening administrative permissions or deleting unrelated recovery material.\n\n## Verification\n\nAfter the approved access-ending operation, retry deletion only for the selected restore point and inspect its result. Reconcile the final restore-point inventory with the retention decision and confirm that no unrelated item changed. If deletion still fails, preserve the new error and investigate its stated cause rather than repeatedly ending access across the collection. Close the cleanup record only when both the consumer handoff and the intended resource disposition are accounted for.\n\n## Official references\n\n[Microsoft Learn: Troubleshoot restore point failures](https://learn.microsoft.com/en-us/azure/virtual-machines/restore-point-troubleshooting). Source reviewed September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/", "url": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "End active disk-restore-point access before an approved restore-point deletion", "item": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/", "url": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/", "headline": "End active disk-restore-point access before an approved restore-point deletion", "description": "Why can an Azure restore point resist deletion even after its retention review approves removal?", "abstract": "Why can an Azure restore point resist deletion even after its retention review approves removal?", "articleBody": "Source facts\nAzure blocks deletion of a restore point while any underlying disk restore point has an active shared access signature. Microsoft identifies this condition with DiskRestorePointUsedByCustomer and directs the operator to call EndGetAccess before deletion. The documented resolution ends shared access on the disk restore points and then retries the operation. Microsoft Learn.\nApplicability\nUse this check for the specific active-access error, not every restore-point failure. Confirm that retention and recovery owners have already approved deletion of the exact restore point. Identify whether an export, investigation, or recovery process still depends on the access being granted.\nDSE recommendation\nIdentify and coordinate the outstanding disk access before ending it and retrying the authorized deletion. Ask the access owner whether the consuming operation has finished and preserve its outcome. Keep resource identifiers and approval evidence in the ticket, but exclude the SAS URL itself. Do not respond to this error by broadening administrative permissions or deleting unrelated recovery material.\nVerification\nAfter the approved access-ending operation, retry deletion only for the selected restore point and inspect its result. Reconcile the final restore-point inventory with the retention decision and confirm that no unrelated item changed. If deletion still fails, preserve the new error and investigate its stated cause rather than repeatedly ending access across the collection. Close the cleanup record only when both the consumer handoff and the intended resource disposition are accounted for.\nOfficial references\nMicrosoft Learn: Troubleshoot restore point failures. Source reviewed September 9, 2026.", "datePublished": "2026-09-10T00:30:38+00:00", "dateModified": "2026-09-10T00:35:08+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-078-end-active-disk-restore-point-access-before-an-approved-restore-point-deletion/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "End active disk-restore-point access before an approved restore-point deletion" }, "articleSection": [ "Business Continuity", "IT" ], "keywords": [ "Business Continuity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 242, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Troubleshoot restore point failures - Azure Virtual Machines | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/virtual-machines/restore-point-troubleshooting" } } ] } }