Recovering deleted file on windows server
Trying to improve my network security, I want to know what should I do to recovery a file that someone create on windows server 2003 network and deleted the file before the backup. I have to install others programs ?
deroode
You could use Volume Shadow Services to make a shadow copy every hour or so, or you could use tools like Restoration (http://www.snapfiles.com/get/restoration.html) to recover files.
ASKER
The restauration program didn´t work on windows 2003 server only on windows 98/ME/2000/XP/Vista. And Shadow copy impact too much on my system performance doing that at every hour.
If your server is running NTFS. Look into (incremental backups) this will backup only files that have recently changed.
If you are going to write your own application than you could use
NTFS Change Journal(for performing incremental backups) complicated.
ReadDirectoryChangesW( tells you which files have been added/removed) Easier to implement for small tasks.
If you are going to write your own application than you could use
NTFS Change Journal(for performing incremental backups) complicated.
ReadDirectoryChangesW( tells you which files have been added/removed) Easier to implement for small tasks.
You could also go for a commercial solution like "Emergency Undelete"
http://www.diskeeper.com/support/emergency-undelete.aspx
However, Undelete programs cannot always undelete your files if they are overwritten.
Incremental backups are also good, but will also have and impact on system performance.
http://www.diskeeper.com/support/emergency-undelete.aspx
However, Undelete programs cannot always undelete your files if they are overwritten.
Incremental backups are also good, but will also have and impact on system performance.
ASKER
The tools are onll for deleted files, I want something more specific. A file that someone change or replace, deleted, ....
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Without frequent VSS or backup (we make backups of crucial directories every 10 minutes) there is no way to recover changed files. Depending on the program used there may or may not be any info left about previous versions.
OTOH you could use tools like Word Reviewing to preserve the change history in a document. But that is very application specific.
OTOH you could use tools like Word Reviewing to preserve the change history in a document. But that is very application specific.
ASKER
Thanks