File Servers
On-prem file server shares are backed up through a lightweight local agent, separate from the Microsoft 365 workloads.
What's captured
A small local agent runs on or alongside the file server, enrolls with BYOVault, and backs up file content from configured shares. It never accepts inbound connections — every call it makes is outbound, the same as any other client checking in with a server.
What's not captured
Installing and enrolling the agent
Installation is a standard Windows MSI. Running it prompts for a Microsoft sign-in to pair the machine with the right tenant — no manual token or command line required for the default enrollment flow.
Once paired, the agent shows up in the operator dashboard immediately.
It starts backing up once at least one share is scoped, and then either the tenant’s next scheduled backup runs, or an operator triggers an on-demand run from the dashboard.
Agent updates
The agent updates itself automatically — no manual reinstall step is required for a routine release.
An update is only ever applied between complete backup/restore cycles, never in the middle of one.
See Agent: Updates & Lifecycle for more, including:
- The update schedule
- How staged rollout to a single machine works
- How BYOVault detects an agent that has gone silent