# Check recall-memory pressure before assuming a File Sync read warmed the cache

> File Sync can stop persisting recalled content to disk when its reserved recall memory reaches the documented threshold.

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260909-361-check-recall-memory-pressure-before-assuming-a-file-sync-read-warmed-the-cache/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-10T00:25:55+00:00
- Modified: 2026-09-10T02:01:56+00:00
- Last reviewed by DSE: 2026-09-09
- Resource type: Guide
- DSE priority: Information
- Topics: Cybersecurity, Networks & Infrastructure
- Reading time: 2 minutes

## What you need to know

File Sync can stop persisting recalled content to disk when its reserved recall memory reaches the documented threshold.

## Potentially affected

Azure File Sync servers with cloud-tiered files and substantial recall activity.

## DSE recommendation

Compare actual local file state and recall pressure before treating repeated reads as a durable cache warm-up.

## Article

## Source facts

Azure File Sync reserves ten percent of total memory for persisting recalls to disk. Microsoft says that when sixty percent of this reserved memory is in use, recalls are not persisted to disk. Heavy access to many tiered files can reach this threshold and cause extra egress and degraded performance.

Cloud tiering maintains its own access heatmap. It does not depend on the NTFS last-access-time tracking feature, and Microsoft advises against manually enabling that NTFS feature for this purpose. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-cloud-tiering-overview).

## Applicability

Identify the tiered-file population, concurrent access pattern and server memory context. Keep the percentage of reserved recall memory distinct from the percentage of total system memory.

## DSE recommendation

DSE recommends checking whether recalled content actually remains local before expanding a bulk warm-up job. Review memory pressure and application demand with the file-service owner. Do not attempt to fix the heatmap by enabling unrelated NTFS tracking. If repeated access is expected, establish an approved cache-readiness test rather than equating a completed read with persistence.

## Verification

Use representative harmless files and a bounded access pattern. Observe local file state, repeated access behavior and relevant server pressure during the test. Record whether content persisted and whether concurrency changes the result. Retain the workload conditions with observations so a successful low-load trial is not presented as assurance for a much larger recall burst.

## Official references

[Microsoft Learn: Understand Azure File Sync Cloud Tiering](https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-cloud-tiering-overview). Source retrieved September 9, 2026.

## Primary reference

- Name: Understand Azure File Sync Cloud Tiering | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-cloud-tiering-overview
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Check recall-memory pressure before assuming a File Sync read warmed the cache,” DSE Security, https://update.dsesecurity.com/updates/dse-20260909-361-check-recall-memory-pressure-before-assuming-a-file-sync-read-warmed-the-cache/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.