Solved

Determine the source of a locked file

Posted on 2006-07-12
11
817 Views
Last Modified: 2012-05-05
I am trying to determine which machine has some files locked on a Windows 2003 server.  I've tried using Computer Management to compare sessions to open files, but there are so many sessions and open files it's impossible to determine which session has which files open.  I've used FileMon, but that only monitors from the time you start the program, which doesn't help me as these files are currently locked but have no activity.  So does anyone know of a program, preferably free, that will tell me what files are open and from which machine/IP?
0
Comment
Question by:G3m1n1
11 Comments
 
LVL 6

Expert Comment

by:glennbrown2
ID: 17094945
0
 
LVL 23

Expert Comment

by:TheCleaner
ID: 17094977
Can't you use "Open Files" in computer management to obtain the user ID that has the files open and then call the person or figure out which machine they are logged onto?
0
 
LVL 3

Author Comment

by:G3m1n1
ID: 17095059
Thank you for the comments,
glennbrown2, thanks for the links however none of them do what I need.  Unlocker simply unlocks currently open files.  IconLockIt is a program to manually lock or unlock files.  Opened Files View is very similar to FileMon and just shows what's open plus lots of info except for the machine the lock is coming from.
TheCleaner, unfortunately that won't tell me much as the "user" is actually a service account that runs on many servers that hit the fileserver in question.
0
 
LVL 26

Expert Comment

by:Pber
ID: 17098806
Try Netwatch from the NT4 reskit.  It combines the Open files/users/sessions into one view.
http://www.experts-exchange.com/Networking/Microsoft_Network/Q_21903496.html

Then you can use process explorer from systernals to find out what process has the file open and kill those handles to the files:
http://www.sysinternals.com/Utilities/ProcessExplorer.html

0
 
LVL 3

Author Comment

by:G3m1n1
ID: 17138828
But that still will not tell me from which machine(s) the open handles originated.  Before I kill any open files, I need to first determine the exact machine (by name or IP) that has each file open.  Looking at the user will not help me because the same user account runs as a service on multiple machines which all use files stored on a file server.  
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 
LVL 3

Author Comment

by:G3m1n1
ID: 17312099
I've since learned that what I want to do is commonplace in Unix, but it seems impossible to do in Windows.  So I suppose that this question does not have an answer, other than "not possible".  Anyone agree with that?
0
 
LVL 23

Expert Comment

by:TheCleaner
ID: 17312597
I'm guessing the ability might be out there, but you'd have to find a 3rd party app that does it, and I'm not aware of one off the top of my head, unless www.scriptlogic.com has something in their arsenal.

Another thought since it is a service account would be that it is probably some networked process, so maybe a netstat -a -n would help?
0
 
LVL 3

Author Comment

by:G3m1n1
ID: 17512952
I agree, this question has been abandoned.  Feel free to close it anytime.
0
 

Accepted Solution

by:
PAQ_Man earned 0 total points
ID: 17539368
PAQed with points refunded (250)

PAQ_Man
Community Support Moderator
0
 
LVL 1

Expert Comment

by:GHandke
ID: 22581041
Pber gave the correct answer and should have been awarded the points for this question.  Netwatch shows the open files, as well as the user and machine/ip from which they were opened.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Live backup of a server 11 87
Moving Files servers to DFS 11 33
how to check the account lockout counter? 6 50
What is this Task? 4 42
by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now