# Map the layers behind a Storage Spaces Direct pool

> Which Windows components contribute to a Storage Spaces Direct storage path?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260908-122-map-the-layers-behind-a-storage-spaces-direct-pool/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-08T18:15:09+00:00
- Modified: 2026-09-08T18:23:27+00:00
- Last reviewed by DSE: 2026-09-08
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 1 minutes

## What you need to know

Which Windows components contribute to a Storage Spaces Direct storage path?

## Potentially affected

Use this review when documenting the architecture of a supported Storage Spaces Direct environment.

## DSE recommendation

Create a component map that follows the workload to its volume, pool, server storage, and interserver network.

## Article

## Source facts

Storage Spaces Direct combines servers with internal storage into a clustered software-defined storage solution. Its overview describes pooling drives across physical servers and providing cache, tiers, and resiliency within that pool. The design uses Failover Clustering, Cluster Shared Volumes, SMB3, and Storage Spaces, together with the Software Storage Bus. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/storage/storage-spaces/storage-spaces-direct-overview).

## Applicability

Use this review when documenting the architecture of a supported Storage Spaces Direct environment. Identify the servers, local drives, network paths, pool, and consuming workload. Review the current hardware and scale requirements separately from the conceptual diagram.

## DSE recommendation

Create a component map that follows the workload to its volume, pool, server storage, and interserver network. Assign an owner for each layer and record where its health evidence is obtained. Use the map to organize incident information before changing settings. Keep architecture explanation separate from the installation procedure and from later decisions about volume size or resiliency.

## Verification

Compare the map with the actual cluster, pool, and volume inventory. Trace one representative workload and verify that its documented path matches the deployment. Record discrepancies and update ownership before relying on the map during an outage. Use a separately approved failure exercise to assess availability; a component diagram alone is not an observed recovery result.

## Official references

[Microsoft Learn: Storage Spaces Direct overview](https://learn.microsoft.com/en-us/windows-server/storage/storage-spaces/storage-spaces-direct-overview). Source reviewed September 8, 2026.

## Primary reference

- Name: Storage Spaces Direct overview
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/windows-server/storage/storage-spaces/storage-spaces-direct-overview
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Map the layers behind a Storage Spaces Direct pool,” DSE Security, https://update.dsesecurity.com/updates/dse-20260908-122-map-the-layers-behind-a-storage-spaces-direct-pool/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.