• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 299
  • Last Modified:

Missing document from one use on SBS 2008 server

I am working with some clients who are having an issue with one user on a Windows 2008 SBS server with a Windows 7 client.  This use has a folder on the server -USER1.  As of 4 days ago, he has been missing all documents and an Access database that was in this folder but not in a sub folder.  All Sub folders are fine. In the interest of full disclosure, I am not the normal Admin.  Also SHADOW COPIES are turned off and we have found that there have been NO backups since the server was brought online.  I have tried to restore the files with a few different file recovery programs with no luck.  I have been able to find a lot of other deleted files, but not these missing files.  What could have happened and are these files recoverable? Thanks in advance!
0
jallender
Asked:
jallender
  • 2
1 Solution
 
Cliff GaliherCommented:
With no backups, no shadow copies, and recovery tools coming up blank, there is very little chance that you can recover these files.

As far as what could have happened, without having tools or processes in place to audit, the answers are broad. Everything from intentional or accidental user error to a malfunctioning program, or even a virus are all potential answers, and there is no way to prove one or disprove another due to the "after the fact" circumstances you find yourself in now. Although, truth be told, 95% of the time it is user error. Files get drag-n-dropped accidentally quite often.

-Cliff
0
 
jallenderAuthor Commented:
That is what I was afraid of. Any idea why the recovery programs would find long deleted items but not these recently deleted items?  
0
 
Cliff GaliherCommented:
It'd be wild speculation. Keep in mind that recovery programs try to do this by looking at data that has been scrubbed. That data exists into something else gets written into its spot, and the OS decides that based on performance, so old data can exist longer than new data if the OS decided that the newer "space" was a better fit for a new write. Age of a deleted file no longer has any bearing on how long it sticks around on a disk.

-Cliff
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now