Mysterious move of 50 GB of data ?

This is on a windows 2008 box. So we had a share that had sub folders some how the sub folders were moved to another share, over 50 gb worth.  I personally think someone accidentally moved them, but the head of that department is convinced that something technical happened to caused it, he thinks its either the backups or some automated process in windows server causing it.  

His arguments-
-To move 50 gb of data would have taken over an hour --- Isn't a move immediate unlike a copy?
- All users in the share would have been kicked out or it would have locked up ?

So can someone give me some responses to his argument, plus is there anything technical that could move 50 gig  of data ?

level9techAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Darius GhassemCommented:
You must physically move data there is not a process that could move the data. Backup processes only copy data over to another device not move.

Moving data will still take time.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
B HCommented:
if you MOVE (cut/paste) on the same hard drive/volume, yes it's instant
if any files were open, the move would have errored out and cancelled most likely, unless a user hit "skip all"

there's unlimited numbers of ways a script can move data, and no way we could know if there was one... check your scheduled tasks... xcopy could do it too...

a backup program will let you archive (move from source) to a backup location but it doesn't typically move it from one folder to another random one

you could check your event logs for information entries related to permissions of who moved it.... it should have been logged as an audit.
0
aleghartCommented:
On the same logical volume, it would not take any noticeable time at all.  A share just points to a location.  You can map it locally to a different drive letter, but on the server it can be on the same drive.

Server Drive D:
-FolderF (user mapped to F: drive)
--FileF
-FolderG (user mapped to G: drive)
--FileG

Move FileF into FolderG, and it "magically" appears to have changed drive letters to the clients.  It took a fraction of a second that can't be measured.  Not an hour, or even a minute.

As for an automated routine or backup to do this....doubtful.  In my experience it's usually user error or an admin working locally that accidentally drags things between folders.

I'm guilty of it too.  It isn't the end of the world.  And, near impossible to track if you don't have detailed auditing and/or workstation monitoring.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.