# Investigate detached Storage Spaces Direct volumes beyond physical-disk health

> Why should a detached virtual disk be investigated even when physical disks report healthy?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260908-071-investigate-detached-storage-spaces-direct-volumes-beyond-physical-disk-health/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-08T18:16:00+00:00
- Modified: 2026-09-08T18:20:22+00:00
- Last reviewed by DSE: 2026-09-08
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 1 minutes

## What you need to know

Why should a detached virtual disk be investigated even when physical disks report healthy?

## Potentially affected

Use this review when virtual-disk availability and physical-disk health appear inconsistent.

## DSE recommendation

Preserve both virtual-disk and physical-disk observations before attempting repair.

## Article

## Source facts

Microsoft documents a Storage Spaces Direct condition in which Get-VirtualDisk reports Detached while Get-PhysicalDisk reports the underlying disks as Healthy. It separately describes virtual disks failing to come online with insufficient redundancy information after unexpected node restarts. The troubleshooting guidance calls for checking drive support, hardware condition, firmware, updates, and the Storage Spaces Direct section of cluster validation. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/storage/storage-spaces/troubleshooting-storage-spaces).

## Applicability

Use this review when virtual-disk availability and physical-disk health appear inconsistent. Identify the affected virtual disk, pool, nodes, and recent restart or power events. Select the source section matching the observed symptom and software version.

## DSE recommendation

Preserve both virtual-disk and physical-disk observations before attempting repair. Build a timeline of the preceding node events and gather the corresponding validation and hardware information. Assign the investigation to the storage owner and involve the vendor when hardware support or health is uncertain. Keep an unrelated healthy physical-disk result from closing a virtual-disk availability incident.

## Verification

After an approved corrective action, inspect the virtual disk’s operational state and verify the intended workload access. Compare the result with the original symptom and retained event timeline. Record redundancy and hardware findings separately. Escalate unresolved disagreement between layers instead of repeatedly changing storage settings without an identified cause.

## Official references

[Microsoft Learn: Storage Spaces Direct troubleshooting](https://learn.microsoft.com/en-us/windows-server/storage/storage-spaces/troubleshooting-storage-spaces). Source reviewed September 8, 2026.

## Primary reference

- Name: Storage Spaces Direct troubleshooting
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/windows-server/storage/storage-spaces/troubleshooting-storage-spaces
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Investigate detached Storage Spaces Direct volumes beyond physical-disk health,” DSE Security, https://update.dsesecurity.com/updates/dse-20260908-071-investigate-detached-storage-spaces-direct-volumes-beyond-physical-disk-health/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.