Windows 2003 Domain Controller drive full - but it really is not

I have a Windows 2003 DC - it is showing as only 35mb are free on the partition that holds sysvol but I can only see about 4 gb of real used space.  The partition is 25 gb.  I can't figure out where the data is...if it is really there and how to correct this problem.
mrsmileynsAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

TheCleanerCommented:
Are you certain the actual partition size is 25GB?

What if you go to that partition, click Folder options, and show all files and folders?

THen do a search (F3) and do a search for *.* over 20MB in size.  That will give you a list of all the major files in that partition...
0
mrsmileynsAuthor Commented:
yes it is 27gb actually.  when i go to the partition i have 6 folders on it.  I am showing all hidden as well.  The total of the 6 folders added up is about 3gb.  

0
TheCleanerCommented:
Did you check to see if there are errors in the system log?  What about running chkdsk on the partition?
0
Cloud Class® Course: Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

Netman66Commented:
Sounds like Malware.  Some of this scumware hides itself by misrepresenting the drive size in Explorer.

Try running some scans with:

Spybot:  http://www.safer-networking.org/en/download/
Adaware: http://www.lavasoft.de/software/adaware/
CWShredder: http://www.intermute.com/spysubtract/cwshredder_download.html

and as a last resort - RootKit Revealer:  http://www.sysinternals.com/Utilities/RootkitRevealer.html

Of course, the latest AV definitions and a scan there would be a good thing.

Let us know.
0
mrsmileynsAuthor Commented:
no errors that would relate to this situation

i would...if possible prefer to solve this without downing the server to run a chkdsk
0
mrsmileynsAuthor Commented:
I suppose it could be spyware - but 23gb worth?  On a server that never browses the internet at all and is in a secure network.  I am not sure.
0
TheCleanerCommented:
you can run chkdsk from the cmd prompt, no need to reboot.  Just run it without any parameters on the volume in question.
0
mrsmileynsAuthor Commented:
after showing protected OS files I have found it is the VSS files - I need to reconfigure the limits on this
0
Netman66Commented:
That would do it, yes.

I wasn't suggesting there was 23GB of Malware.  Some types of malware mask their presence by changing the reported free space to something other than it really is.  This serves to confuse those looking for it.

VSS would certainly eat up space - hopefully you get this sorted out before the server shuts down due to insufficient free space.

Keep us posted.
0
mrsmileynsAuthor Commented:
I see...sorry for the misunderstanding :)

We are all squared away and have the VSS settings set properly with realistic limitations etc.  We are back to about 20gb free space.
0
Netman66Commented:
Super job!

Sometimes all it takes is someone else to listen!

0
GranModCommented:
Closed, 500 points refunded.
GranMod
The Experts Exchange
Community Support Moderator of all Ages
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.