{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/", "slug": "dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection", "url": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/" }, "title": "Verify the exclusion list after changing a VMware backup disk selection", "summary": "Why can the MABS disk-exclusion script report success without actually changing the protected disk list?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "business-continuity", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "slug": "networks-infrastructure", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:28:21+00:00", "modified_at": "2026-09-10T01:20:45+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 246, "potentially_affected": "Use this check only for an approved VMware disk-exclusion change on the MABS server protecting that VM. Identify the VM and exact datastore/VMDK path from its configuration; do not reuse a sample's indexed object selection.", "dse_recommendation": "Treat the script result and the effective exclusion list as separate acceptance evidence.", "primary_source": { "name": "Back up VMware VMs using Azure Backup Server - Azure Backup | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/backup/backup-azure-backup-server-vmware", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

MABS V3 UR1 and later support excluding individual VMware VM disks through ExcludeDisk.ps1. Microsoft requires stopping DPMRA before running the change; otherwise the script can report success without updating the exclusion list. No jobs should be running before that service stop. For a VM already under protection, adding a disk exclusion also requires a manual consistency check. Microsoft Learn.

\n

Applicability

\n

Use this check only for an approved VMware disk-exclusion change on the MABS server protecting that VM. Identify the VM and exact datastore/VMDK path from its configuration; do not reuse a sample’s indexed object selection.

\n

DSE recommendation

\n

Treat the script result and the effective exclusion list as separate acceptance evidence. Before the maintenance window, obtain workload-owner agreement on which disk will no longer be covered by this protection. Confirm the intended alternative protection or accepted exclusion. Coordinate the service interruption around active jobs and keep the previous list available. Use the documented procedure for the actual MABS version rather than treating a success message as a complete change record.

\n

Verification

\n

Inspect the target VM’s exclusion list after the approved edit and compare the exact disk path with the authorized request. For an already protected VM, record the required consistency-check outcome. Verify the resulting protection selection and a representative recovery plan for the remaining disks. If the list did not change, investigate service state and target identity before repeating the operation.

\n

Official references

\n

Microsoft Learn: Back up VMware VMs using Azure Backup Server.

", "content_text": "Source facts\nMABS V3 UR1 and later support excluding individual VMware VM disks through ExcludeDisk.ps1. Microsoft requires stopping DPMRA before running the change; otherwise the script can report success without updating the exclusion list. No jobs should be running before that service stop. For a VM already under protection, adding a disk exclusion also requires a manual consistency check. Microsoft Learn.\nApplicability\nUse this check only for an approved VMware disk-exclusion change on the MABS server protecting that VM. Identify the VM and exact datastore/VMDK path from its configuration; do not reuse a sample’s indexed object selection.\nDSE recommendation\nTreat the script result and the effective exclusion list as separate acceptance evidence. Before the maintenance window, obtain workload-owner agreement on which disk will no longer be covered by this protection. Confirm the intended alternative protection or accepted exclusion. Coordinate the service interruption around active jobs and keep the previous list available. Use the documented procedure for the actual MABS version rather than treating a success message as a complete change record.\nVerification\nInspect the target VM’s exclusion list after the approved edit and compare the exact disk path with the authorized request. For an already protected VM, record the required consistency-check outcome. Verify the resulting protection selection and a representative recovery plan for the remaining disks. If the list did not change, investigate service state and target identity before repeating the operation.\nOfficial references\nMicrosoft Learn: Back up VMware VMs using Azure Backup Server.", "content_markdown": "## Source facts\n\nMABS V3 UR1 and later support excluding individual VMware VM disks through ExcludeDisk.ps1. Microsoft requires stopping DPMRA before running the change; otherwise the script can report success without updating the exclusion list. No jobs should be running before that service stop. For a VM already under protection, adding a disk exclusion also requires a manual consistency check. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/backup/backup-azure-backup-server-vmware).\n\n## Applicability\n\nUse this check only for an approved VMware disk-exclusion change on the MABS server protecting that VM. Identify the VM and exact datastore/VMDK path from its configuration; do not reuse a sample’s indexed object selection.\n\n## DSE recommendation\n\nTreat the script result and the effective exclusion list as separate acceptance evidence. Before the maintenance window, obtain workload-owner agreement on which disk will no longer be covered by this protection. Confirm the intended alternative protection or accepted exclusion. Coordinate the service interruption around active jobs and keep the previous list available. Use the documented procedure for the actual MABS version rather than treating a success message as a complete change record.\n\n## Verification\n\nInspect the target VM’s exclusion list after the approved edit and compare the exact disk path with the authorized request. For an already protected VM, record the required consistency-check outcome. Verify the resulting protection selection and a representative recovery plan for the remaining disks. If the list did not change, investigate service state and target identity before repeating the operation.\n\n## Official references\n\n[Microsoft Learn: Back up VMware VMs using Azure Backup Server](https://learn.microsoft.com/en-us/azure/backup/backup-azure-backup-server-vmware)." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/", "url": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Verify the exclusion list after changing a VMware backup disk selection", "item": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/", "url": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/", "headline": "Verify the exclusion list after changing a VMware backup disk selection", "description": "Why can the MABS disk-exclusion script report success without actually changing the protected disk list?", "abstract": "Why can the MABS disk-exclusion script report success without actually changing the protected disk list?", "articleBody": "Source facts\nMABS V3 UR1 and later support excluding individual VMware VM disks through ExcludeDisk.ps1. Microsoft requires stopping DPMRA before running the change; otherwise the script can report success without updating the exclusion list. No jobs should be running before that service stop. For a VM already under protection, adding a disk exclusion also requires a manual consistency check. Microsoft Learn.\nApplicability\nUse this check only for an approved VMware disk-exclusion change on the MABS server protecting that VM. Identify the VM and exact datastore/VMDK path from its configuration; do not reuse a sample’s indexed object selection.\nDSE recommendation\nTreat the script result and the effective exclusion list as separate acceptance evidence. Before the maintenance window, obtain workload-owner agreement on which disk will no longer be covered by this protection. Confirm the intended alternative protection or accepted exclusion. Coordinate the service interruption around active jobs and keep the previous list available. Use the documented procedure for the actual MABS version rather than treating a success message as a complete change record.\nVerification\nInspect the target VM’s exclusion list after the approved edit and compare the exact disk path with the authorized request. For an already protected VM, record the required consistency-check outcome. Verify the resulting protection selection and a representative recovery plan for the remaining disks. If the list did not change, investigate service state and target identity before repeating the operation.\nOfficial references\nMicrosoft Learn: Back up VMware VMs using Azure Backup Server.", "datePublished": "2026-09-10T00:28:21+00:00", "dateModified": "2026-09-10T01:20:45+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-215-verify-the-exclusion-list-after-changing-a-vmware-backup-disk-selection/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Verify the exclusion list after changing a VMware backup disk selection" }, "articleSection": [ "Business Continuity", "Networks & Infrastructure" ], "keywords": [ "Business Continuity", "Networks & Infrastructure", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Business Continuity", "url": "https://update.dsesecurity.com/topic/business-continuity/" }, { "@type": "Thing", "name": "Networks & Infrastructure", "url": "https://update.dsesecurity.com/topic/networks-infrastructure/" } ], "wordCount": 246, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Back up VMware VMs using Azure Backup Server - Azure Backup | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/azure/backup/backup-azure-backup-server-vmware" } } ] } }