Windows Offline Files Recovery via CSCCMD

Hello,

I have a client who's server died, no backups.  They did have offline files turned on for their main network drive, so the data was cached onto one PC.

The c:\windows\csc folder is over 7GB, so the data is most certainly there.

When I run csccmd /enum it shows \\originalserver\sharewewant however when I want to extract, it only extracts one file.

I've tried every suggestion I could find on the net, nothing I have tried has worked.  csccmd does not give an error, it appears happy just thinking that within this 7gb of data, only one single file is all we want, which it isn't :)

I took a snapshot of the folder prior to doing anything, so I haven't messed up the original csc folder in the process of trying to restore it.

Do the files in the root folder of CSC represent the database that maps the files to file names & locations?  

Anybody have any more suggestions?
djcsysAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

B HCommented:
those should be copies of the actual files, what is the command you ran to try to csccmd them back?
0
SemperWiFiCommented:
I just did this about a month ago. Not the most fun I ever had but it is doable so don't worry.

First, Windows stores offline files as cache in a hidden directory on the local client system (this you obviously know already). Windows also has a built in cache reader which is what allows you to view and interact with the files while in the user environment on the local system. The EASY way to get these files back is to log into the user account on the local machine and simply copy the files out of My Documents and any other redirected folders to a neutral location on the root of the primary or off to an external drive (basically just move them out of the redirect and save elsewhere)

If the machine is hosed (this was my case) and you cannot access the user account to complete the above mention procedure then this is where the fun starts. First thing you will want to do is copy the contents of the CSC directory to another machine. then make sure you download csccmd v1.1 as the extract cmd doesn't exist in the earlier one (if you need this I can provide for you).

1. Type csccmd /enable

2. Create a target directory, for example C:\Restore

3. Type csccmd /extract /target:C:\Restore /recurse

Your done.
0
SemperWiFiCommented:
[POST EDIT]

0. Open a command prompt.

1. Type csccmd /enable

2. Create a target directory, for example C:\Restore

3. Type csccmd /extract /target:C:\Restore /recurse

Your done.
0
Cloud Class® Course: Ruby Fundamentals

This course will introduce you to Ruby, as well as teach you about classes, methods, variables, data structures, loops, enumerable methods, and finishing touches.

djcsysAuthor Commented:
Hi all, sorry for not being descriptive in my 1st post.

Offline files are enabled.

I did csccmd /extract /target:c:\restore /recurse
** and it restored one flie

csccmd /enum
** shows the correct server / share

I've done:
csccmd /resid

Re-applying permissions to the csc folder & all contents to ensure that administrators have full access, ownership, etc.

I then tried using system restore to take the system back to a previous time when the server was running, however doing this means that the CSC command wont restore anything, it completes successfully, it just doesn't think there are any files to restore.

There's still 7GB worth of data in this location though :/

0
SemperWiFiCommented:
You should be able to log into the system with the users domain account without the presence of the DC (which it sounds as though you have). Have you in fact done this? Were the files not in My Documents?
0
SemperWiFiCommented:
Also, have you tried moving the CSC directory to another machine and attempting the extraction?

Have you tried:
csccmd /EXTRACT[:\\server\share[\path]] /TARGET:<path> [/RECURSE]
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
djcsysAuthor Commented:
Not sure how but moving it to another box did the trick, good suggestion :)
0
SemperWiFiCommented:
CMDLET - csccmd /EXTRACT[:\\server\share[\path]] /TARGET:<path> [/RECURSE]
0
SemperWiFiCommented:
Yeah, it can be hanky sometimes... always best to move it! Glad you're good to go!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.