{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/", "slug": "dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them", "url": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/" }, "title": "Archive Configuration Manager site backups before the next snapshot replaces them", "summary": "Why is a successful Configuration Manager site-backup task insufficient evidence of multiple recovery points?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "continuity-recovery", "label": "Continuity & recovery", "alt": "Paired infrastructure paths converging on a stable recovered service.", "card_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-17T16:34:06+00:00", "modified_at": "2026-09-17T16:38:44+00:00", "reviewed_on": "2026-09-17", "reading_minutes": 1, "word_count": 209, "potentially_affected": "Use this review for Configuration Manager sites using the Backup Site Server maintenance task. Identify the required recovery points and protected archive destination before changing the backup workflow.", "dse_recommendation": "DSE recommends assigning a separate acceptance check to archive creation and retention.", "primary_source": { "name": "Backup sites - Configuration Manager | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/intune/configmgr/core/servers/manage/backup-and-recovery", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

The site-backup task replaces its previous snapshot on the next run rather than maintaining a series of earlier snapshots. Microsoft also warns that the old snapshot is removed before the new backup begins, so a failed task can leave no valid snapshot. A correctly placed AfterBackup.bat script is run after a successful task and can archive that completed snapshot. Microsoft Learn.

\n

Applicability

\n

Use this review for Configuration Manager sites using the Backup Site Server maintenance task. Identify the required recovery points and protected archive destination before changing the backup workflow.

\n

DSE recommendation

\n

DSE recommends assigning a separate acceptance check to archive creation and retention. Define the required generation history, control access to its destination, and make a failed archive visible to the backup owner. Review the post-backup script as operational code, including its error handling and the protection of required credentials.

\n

Verification

\n

Observe an approved backup cycle and confirm that a distinct archived recovery point is retained after a later cycle completes. Test the chosen recovery point through the organization’s approved restoration procedure. Keep backup success, archive success and restoration evidence separate so a passing maintenance task does not conceal a missing archive.

\n

Official references

\n

Microsoft Learn: Back up a Configuration Manager site. Source reviewed September 17, 2026.

", "content_text": "Source facts\nThe site-backup task replaces its previous snapshot on the next run rather than maintaining a series of earlier snapshots. Microsoft also warns that the old snapshot is removed before the new backup begins, so a failed task can leave no valid snapshot. A correctly placed AfterBackup.bat script is run after a successful task and can archive that completed snapshot. Microsoft Learn.\nApplicability\nUse this review for Configuration Manager sites using the Backup Site Server maintenance task. Identify the required recovery points and protected archive destination before changing the backup workflow.\nDSE recommendation\nDSE recommends assigning a separate acceptance check to archive creation and retention. Define the required generation history, control access to its destination, and make a failed archive visible to the backup owner. Review the post-backup script as operational code, including its error handling and the protection of required credentials.\nVerification\nObserve an approved backup cycle and confirm that a distinct archived recovery point is retained after a later cycle completes. Test the chosen recovery point through the organization’s approved restoration procedure. Keep backup success, archive success and restoration evidence separate so a passing maintenance task does not conceal a missing archive.\nOfficial references\nMicrosoft Learn: Back up a Configuration Manager site. Source reviewed September 17, 2026.", "content_markdown": "## Source facts\n\nThe site-backup task replaces its previous snapshot on the next run rather than maintaining a series of earlier snapshots. Microsoft also warns that the old snapshot is removed before the new backup begins, so a failed task can leave no valid snapshot. A correctly placed AfterBackup.bat script is run after a successful task and can archive that completed snapshot. [Microsoft Learn](https://learn.microsoft.com/en-us/intune/configmgr/core/servers/manage/backup-and-recovery).\n\n## Applicability\n\nUse this review for Configuration Manager sites using the Backup Site Server maintenance task. Identify the required recovery points and protected archive destination before changing the backup workflow.\n\n## DSE recommendation\n\nDSE recommends assigning a separate acceptance check to archive creation and retention. Define the required generation history, control access to its destination, and make a failed archive visible to the backup owner. Review the post-backup script as operational code, including its error handling and the protection of required credentials.\n\n## Verification\n\nObserve an approved backup cycle and confirm that a distinct archived recovery point is retained after a later cycle completes. Test the chosen recovery point through the organization’s approved restoration procedure. Keep backup success, archive success and restoration evidence separate so a passing maintenance task does not conceal a missing archive.\n\n## Official references\n\n[Microsoft Learn: Back up a Configuration Manager site](https://learn.microsoft.com/en-us/intune/configmgr/core/servers/manage/backup-and-recovery). Source reviewed September 17, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/", "url": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-17" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Archive Configuration Manager site backups before the next snapshot replaces them", "item": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/", "url": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/", "headline": "Archive Configuration Manager site backups before the next snapshot replaces them", "description": "Why is a successful Configuration Manager site-backup task insufficient evidence of multiple recovery points?", "abstract": "Why is a successful Configuration Manager site-backup task insufficient evidence of multiple recovery points?", "articleBody": "Source facts\nThe site-backup task replaces its previous snapshot on the next run rather than maintaining a series of earlier snapshots. Microsoft also warns that the old snapshot is removed before the new backup begins, so a failed task can leave no valid snapshot. A correctly placed AfterBackup.bat script is run after a successful task and can archive that completed snapshot. Microsoft Learn.\nApplicability\nUse this review for Configuration Manager sites using the Backup Site Server maintenance task. Identify the required recovery points and protected archive destination before changing the backup workflow.\nDSE recommendation\nDSE recommends assigning a separate acceptance check to archive creation and retention. Define the required generation history, control access to its destination, and make a failed archive visible to the backup owner. Review the post-backup script as operational code, including its error handling and the protection of required credentials.\nVerification\nObserve an approved backup cycle and confirm that a distinct archived recovery point is retained after a later cycle completes. Test the chosen recovery point through the organization’s approved restoration procedure. Keep backup success, archive success and restoration evidence separate so a passing maintenance task does not conceal a missing archive.\nOfficial references\nMicrosoft Learn: Back up a Configuration Manager site. Source reviewed September 17, 2026.", "datePublished": "2026-09-17T16:34:06+00:00", "dateModified": "2026-09-17T16:38:44+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260917-054-archive-configuration-manager-site-backups-before-the-next-snapshot-replaces-them/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/continuity-recovery-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Archive Configuration Manager site backups before the next snapshot replaces them" }, "articleSection": [ "Cybersecurity", "IT" ], "keywords": [ "Cybersecurity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 209, "timeRequired": "PT1M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Backup sites - Configuration Manager | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/intune/configmgr/core/servers/manage/backup-and-recovery" } } ] } }