Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Missing document from one use on SBS 2008 server

Posted on 2011-10-06
Medium Priority
Last Modified: 2012-05-12
I am working with some clients who are having an issue with one user on a Windows 2008 SBS server with a Windows 7 client.  This use has a folder on the server -USER1.  As of 4 days ago, he has been missing all documents and an Access database that was in this folder but not in a sub folder.  All Sub folders are fine. In the interest of full disclosure, I am not the normal Admin.  Also SHADOW COPIES are turned off and we have found that there have been NO backups since the server was brought online.  I have tried to restore the files with a few different file recovery programs with no luck.  I have been able to find a lot of other deleted files, but not these missing files.  What could have happened and are these files recoverable? Thanks in advance!
Question by:jallender
  • 2
LVL 60

Accepted Solution

Cliff Galiher earned 400 total points
ID: 36925388
With no backups, no shadow copies, and recovery tools coming up blank, there is very little chance that you can recover these files.

As far as what could have happened, without having tools or processes in place to audit, the answers are broad. Everything from intentional or accidental user error to a malfunctioning program, or even a virus are all potential answers, and there is no way to prove one or disprove another due to the "after the fact" circumstances you find yourself in now. Although, truth be told, 95% of the time it is user error. Files get drag-n-dropped accidentally quite often.


Author Comment

ID: 36925431
That is what I was afraid of. Any idea why the recovery programs would find long deleted items but not these recently deleted items?  
LVL 60

Expert Comment

by:Cliff Galiher
ID: 36925452
It'd be wild speculation. Keep in mind that recovery programs try to do this by looking at data that has been scrubbed. That data exists into something else gets written into its spot, and the OS decides that based on performance, so old data can exist longer than new data if the OS decided that the newer "space" was a better fit for a new write. Age of a deleted file no longer has any bearing on how long it sticks around on a disk.


Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
There are literally thousands of Exchange recovery applications out there. So how do you end up picking one that’s ideal for your business & purpose? By carefully scouting the product’s features, the benefits it offers you, & reading ample reviews f…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
Suggested Courses

581 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question