[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1017
  • Last Modified:

Windows Offline Files Recovery via CSCCMD

Hello,

I have a client who's server died, no backups.  They did have offline files turned on for their main network drive, so the data was cached onto one PC.

The c:\windows\csc folder is over 7GB, so the data is most certainly there.

When I run csccmd /enum it shows \\originalserver\sharewewant however when I want to extract, it only extracts one file.

I've tried every suggestion I could find on the net, nothing I have tried has worked.  csccmd does not give an error, it appears happy just thinking that within this 7gb of data, only one single file is all we want, which it isn't :)

I took a snapshot of the folder prior to doing anything, so I haven't messed up the original csc folder in the process of trying to restore it.

Do the files in the root folder of CSC represent the database that maps the files to file names & locations?  

Anybody have any more suggestions?
0
djcsys
Asked:
djcsys
  • 6
  • 2
1 Solution
 
B HCommented:
those should be copies of the actual files, what is the command you ran to try to csccmd them back?
0
 
SemperWiFiCommented:
I just did this about a month ago. Not the most fun I ever had but it is doable so don't worry.

First, Windows stores offline files as cache in a hidden directory on the local client system (this you obviously know already). Windows also has a built in cache reader which is what allows you to view and interact with the files while in the user environment on the local system. The EASY way to get these files back is to log into the user account on the local machine and simply copy the files out of My Documents and any other redirected folders to a neutral location on the root of the primary or off to an external drive (basically just move them out of the redirect and save elsewhere)

If the machine is hosed (this was my case) and you cannot access the user account to complete the above mention procedure then this is where the fun starts. First thing you will want to do is copy the contents of the CSC directory to another machine. then make sure you download csccmd v1.1 as the extract cmd doesn't exist in the earlier one (if you need this I can provide for you).

1. Type csccmd /enable

2. Create a target directory, for example C:\Restore

3. Type csccmd /extract /target:C:\Restore /recurse

Your done.
0
 
SemperWiFiCommented:
[POST EDIT]

0. Open a command prompt.

1. Type csccmd /enable

2. Create a target directory, for example C:\Restore

3. Type csccmd /extract /target:C:\Restore /recurse

Your done.
0
Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
djcsysAuthor Commented:
Hi all, sorry for not being descriptive in my 1st post.

Offline files are enabled.

I did csccmd /extract /target:c:\restore /recurse
** and it restored one flie

csccmd /enum
** shows the correct server / share

I've done:
csccmd /resid

Re-applying permissions to the csc folder & all contents to ensure that administrators have full access, ownership, etc.

I then tried using system restore to take the system back to a previous time when the server was running, however doing this means that the CSC command wont restore anything, it completes successfully, it just doesn't think there are any files to restore.

There's still 7GB worth of data in this location though :/

0
 
SemperWiFiCommented:
You should be able to log into the system with the users domain account without the presence of the DC (which it sounds as though you have). Have you in fact done this? Were the files not in My Documents?
0
 
SemperWiFiCommented:
Also, have you tried moving the CSC directory to another machine and attempting the extraction?

Have you tried:
csccmd /EXTRACT[:\\server\share[\path]] /TARGET:<path> [/RECURSE]
0
 
djcsysAuthor Commented:
Not sure how but moving it to another box did the trick, good suggestion :)
0
 
SemperWiFiCommented:
CMDLET - csccmd /EXTRACT[:\\server\share[\path]] /TARGET:<path> [/RECURSE]
0
 
SemperWiFiCommented:
Yeah, it can be hanky sometimes... always best to move it! Glad you're good to go!
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 6
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now