# Confirm a managed disk is unattached before a Storage Explorer download

> DSE recommends separating the export request from any operational decision to detach a workload disk.

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-17T16:34:35+00:00
- Modified: 2026-09-17T16:35:03+00:00
- Last reviewed by DSE: 2026-09-17
- Resource type: Guide
- DSE priority: Information
- Topics: IT
- Reading time: 1 minutes

## What you need to know

DSE recommends separating the export request from any operational decision to detach a workload disk.

## Potentially affected

This check is for an operator exporting an Azure managed disk through Storage Explorer, with an approved target disk and local destination already identified.

## DSE recommendation

DSE recommends separating the export request from any operational decision to detach a workload disk.

## Article

## Source facts

Microsoft’s Storage Explorer workflow requires a managed disk to be in the Unattached state before downloading it as an on-premises VHD. The download is selected from the disk’s resource group, and progress is shown in Activities. [Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/disks-use-storage-explorer-managed-disks)

## Applicability

This check is for an operator exporting an Azure managed disk through Storage Explorer, with an approved target disk and local destination already identified.

## DSE recommendation

DSE recommends separating the export request from any operational decision to detach a workload disk. Record the subscription, resource group, disk identifier, and intended local file path before proceeding. If the disk is attached, coordinate the appropriate workload change with its owner rather than interpreting the export task as permission to interrupt it. Arrange the destination’s capacity, access, and handling requirements before starting the transfer.

## Verification

Inspect the disk state immediately before the download and retain the observed identifier with the transfer record. Follow the operation in Activities, then confirm the expected VHD exists at the approved destination. Compare the completed operation with the requested disk and record any error or incomplete result. Treat a successful transfer as file-delivery evidence, with any boot or recovery test handled separately.

## Official references

- [Microsoft: Use Azure Storage Explorer to manage Azure managed disks – Azure Virtual Machines | Microsoft Learn](https://learn.microsoft.com/en-us/azure/virtual-machines/disks-use-storage-explorer-managed-disks)

## Primary reference

- Name: Use Azure Storage Explorer to manage Azure managed disks - Azure Virtual Machines | Microsoft Learn
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/azure/virtual-machines/disks-use-storage-explorer-managed-disks
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Confirm a managed disk is unattached before a Storage Explorer download,” DSE Security, https://update.dsesecurity.com/updates/dse-20260917-025-confirm-a-managed-disk-is-unattached-before-a-storage-explorer-download/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.