# Separate a cluster set’s management plane from its member workloads

> Which responsibilities belong to the management cluster in a Windows cluster set?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260908-139-separate-a-cluster-sets-management-plane-from-its-member-workloads/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-08T18:14:52+00:00
- Modified: 2026-09-08T18:23:27+00:00
- Last reviewed by DSE: 2026-09-08
- Resource type: Guide
- DSE priority: Information
- Topics: IT, Networks & Infrastructure
- Reading time: 1 minutes

## What you need to know

Which responsibilities belong to the management cluster in a Windows cluster set?

## Potentially affected

Architects evaluating a cluster set of Windows Server failover clusters.

## DSE recommendation

Document the management functions and the workloads separately, with an owner and failure response for each.

## Article

## Source facts

A cluster set combines multiple failover clusters into a larger fabric while preserving an individual cluster as the software fault boundary. Its management cluster hosts the available management plane and namespace-referral Scale-Out File Server, separate from member clusters running VM workloads. Member servers in the set must use the same operating-system version; Microsoft does not support live migration across differing operating systems in this configuration. [Microsoft documentation](https://learn.microsoft.com/en-us/windows-server/failover-clustering/cluster-set).

## Applicability

Inventory the proposed member clusters, management cluster, operating-system releases, workloads, and storage paths. Review the source prerequisites before interpreting cluster-set scale as permission to mix incompatible members.

## DSE recommendation

Document the management functions and the workloads separately, with an owner and failure response for each. Have the platform team review the member boundaries and the proposed migration paths. Keep the management-cluster dependency explicit in the design and maintenance plan.

## Verification

Test representative management operations and an approved VM movement within the proposed set. Examine the expected behavior during a controlled member-cluster interruption. Record which functions remain available and any unresolved dependency, then compare those results with the documented fault-boundary design.

## Official references

[Microsoft Learn: Deploy a cluster set for Windows Server Failover Clusters](https://learn.microsoft.com/en-us/windows-server/failover-clustering/cluster-set). Source reviewed September 8, 2026.

## Primary reference

- Name: Deploy a cluster set for Windows Server Failover Clusters
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/windows-server/failover-clustering/cluster-set
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Separate a cluster set’s management plane from its member workloads,” DSE Security, https://update.dsesecurity.com/updates/dse-20260908-139-separate-a-cluster-sets-management-plane-from-its-member-workloads/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.