Recovering deleted files from Client/Server Environment

Posted on 2003-10-30
Last Modified: 2010-04-11
Hi Admins,

I have a question for you all.

I am on network which has 5 file servers, 1 backup server and 1 exchange server with 200 + clients of Windows XP and the servers are windows 2000 and 2003. I have tried recovering deleted files with the shadow facility of windows 2003. But it is taking 10 % space of the actual backup. Is there any Client/Server service software which should work after recycle bin. For example, if iam the client side user using windows XP system, and i have deleted 15 days before one important network shared file unknowingly. I can get the old version of the file from the shadow, but i need software which maintains all the deleted files in server. I mean if i say delete file from recycle bin that should go and store somewhere in deleted folded of server so that system administrator can keep track of that and get back when it is required. Hope you have understanded my problem.

Could anyone help me out with this.... I want to make secure of my network.

Thanks ---- Rakesh.

Question by:brakesh
  • 3
  • 2
LVL 57

Expert Comment

by:Pete Long
ID: 9653510
Hi brakesh,
File Recovery

When a file is deleted either from the Network, By a program or from the Command Line, is does not get put into the recycle bin. However the file is NOT erased, instead the information that points to the file is erased. By erasing the pointer, the file becomes "Invisible" to the Operating system. Using Third party software these files can be recovered.

**********FreeWare Recovery Tools**********

Deleted File Analysis

PC Inspector
(FAT 12/16/32 NTFS)

(Also have a Netware version - NOT FREE)

**********TrialWare Recovery Tools**********

Undelete 3.0 (30 Day trial available)
(NT/2K/XP) - Can run direct from the CD

File Recover

(FAT12/16/32 NTFS NTFS5 and Ext2FS)

Recover My Files

**********Shareware Recovery Tools**********

File Scavenger
(NT/2K/XP) - Supports Reformatted Volumes -Limited to 32Kb file size!

GetDataBack for FAT
(FAT) Works Even After FDisk and Format, Can run Over the network.

GetDataBack for NTFS
(NTFS) Works Even After FDisk and Format, Can run Over the network.

(FAT 12/16/32 NTFS) Runs From MMC Console

(FAT 12/16/32 NTFS) Runs from DOS Bootdisk

FinalData Plus

************Commercial Products************

File Restore ($39.00)

HDR Data Recovery ($485.00) Trail available

**********Good Link to More Info***********


Author Comment

ID: 9698655
Hey PeteL,

Thanks for the lost file recovery information but these days Iam in search of such a script which works as recycle bin. I mean which stop deleted file to enter into recycle bin insteas of that, the deleted file should route to some other safe folder of server where sys admin only has access to it and get back the deleted file.

Could u pls helpout me regarding this, if u have any exposure in system scripting or programming.

LVL 57

Expert Comment

by:Pete Long
ID: 9706647
Hello Rakesh, There are third party tools to do this but they are not cheap, M$ has finally relised this is a problem (NOvell have had deleted file recovery since i was in short trousers) and included this functioality in Server 2003


Author Comment

ID: 9736726
Hey PeteL,

May i know some third party tool names or sites which exactly fulfil my need.

I have tried this with WINDOWS 2000 SERVER, shadow files facility. But the main reason i want to avoid this facility is the volume of the disk it occupies ( It occupies 10% of the path which we give) with this i cannot secure all the netowrk.

Do you have any Window Shell Script which runs when client user switch on the system, the script should fire and change the original windows delete script and make the deleted items to route to the server destination path??

I would appreciate you if you could give me any more ideas about this.

LVL 57

Accepted Solution

Pete Long earned 125 total points
ID: 9741666
Hello Rakesh

Most third part apps (like the ones you just mentioned) as opposed to the ones I posted above dont work retrospectively, ie its pointless putting th software on once the files are lost

heres an example

Undelete 2.0 server version includes advanced functionality that allows the system administrator to connect to and run every other Undelete program installed throughout a Windows NT/2000 network. System administrators can remotely customize Undelete features such as exclusion lists and size of the Recovery Bin and can remotely view and recover all files contained in any NT/2000 Recovery Bin on the network.


Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Open Encryption Software Advice needed 4 69
reverse email lookup 8 66
exchange, activesync 2 46
Website Question - New Site 3 13
February 24, 2017 — On February 23, Travis Ormandy, a vulnerability researcher at Google, reported on Twitter ( that massive stores of data have been leaked by CloudFlare, a company that provide…
Many businesses neglect disaster recovery and treat it as an after-thought. I can tell you first hand that data will be lost, hard drives die, servers will be hacked, and careless (or malicious) employees can ruin your data.
Sending a Secure fax is easy with eFax Corporate ( First, just open a new email message. In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question