• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 290
  • Last Modified:

2003 sbs server restoring deleted files

i have a 2003 sbs server and a user has deleted all the files under a directory.

it happened sometime last week they think.

i have forgotten how to go in from the server and restore the deleted files or maybe it is the workstation.

i cannot remember how to roll back that one diorectory and recover the files without going to tape?
0
russgarrett
Asked:
russgarrett
  • 7
  • 6
1 Solution
 
mikeewaltonCommented:
Do you have shadow copies turned on?

If so go to the properties of the drive, click the shadow copies tab, find a date where the dir was still there, and restore just that dir.
0
 
russgarrettAuthor Commented:
yes but at the server can you select individual directories back several days like on the workstatation?
i only see the shadow copy restore at the server going back until yesterday morning.

if i gi to the directory and right click properties of the folder i can only go back until yesterday morning.

workstation shadow copies go back a long time.
0
 
mikeewaltonCommented:
That is odd, as they should be the same. Can you access and restore the missing directory from a workstation?
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
russgarrettAuthor Commented:
i would have to roll back the machine maybe a week and see if more options to reciver the files are there.


at the server if i click on d: and roll it back to yesterday i think it says it is going to roll the whole d: drive on the server back.
0
 
mikeewaltonCommented:
Hang on, before you do that.

From the server you need to navigate to the share of the drive.

For example //sbs/D$

Then right click in the white space and view properties

Now you should see "previous Versions" (if not install the Microsoft Shadow Copy Client" on the server.

Choose the date you want to look at, and then click view.  Now you can look at that dates shadow copy to just copy the folder you need to restore out instead of restoring the whole drive.
0
 
russgarrettAuthor Commented:
ok.

at the server if i open windows explorer and highlight drive D: which is the shared network drive and then click on a folder and then right click on the folder i do not see previous version like i do on a work station.

i do see a service called VOLUME SHADOW COPY and the starup is MANUAL.

OK.stupid question is i do not see where Microsoft Shadow Copy Client is installed. i looked in ADD REMOVE PROGRAMS and did not see it. where do i get it ?

when i do click on the D: drive and go to Shadow Copies i do see where restore points are there for yesterday and today even though the schedule under settings is set to the default of Monday through Friday. i would have thought it would still have had last weeks copies. but i am not doing anything with this.

0
 
mikeewaltonCommented:
You should see Shadow Copy Client in Add/Remove Programs, if not you can get it here:

http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=16220

After installing the only way you will see "previous versions" is if you go to the admin root share of the drive, i.e.

\\sbs\D$

Then right click inside and view properties

You will see it if you just click through the D drive from "My Computer"
0
 
russgarrettAuthor Commented:
i see it in there now. when i click it only goes back to yesterday morning at 7:00 am like the shadow copy for the entire D: drive.

i guess it won't go back any further than doing a system restore like on a XP machine?

how come there are no more VOLUME SHADOW COPIES BEFORE YESTERDAY at 7:00 am.

bad news is even though Backup Exec connected and checked the back there seems to be a problem.
the Exchange backup runs as a seperate job after the regular backup and is set to append but it looks like it is over writting the regular data backup job.

0
 
mikeewaltonCommented:
It's because the space you have set in volume shadow copy settings is only large enough to accompany the one day. You will need to increase the space allowed for it to catch more days.


Do you not have daily backups that are not over writing, or that were copied to something external for offsite that you can restore that directory from?
0
 
russgarrettAuthor Commented:
no. lucky i found this out now before a real disaster occured.

so if i go to the users workstation and roll it back 2 weeks i still will not see any previous versions to restore from correct?

when a user deletes files from the server from the workstation where does the file go?
it can only be retrieved by a shadow copy or tape correct?
0
 
mikeewaltonCommented:
The users desktop should be the same as the server as far as viewing previous versions, the only way that would be different is if you had offline files turned on for that drive on the users workstations.

When a user deletes from a network share, it is a permanent delete, it doesn't hit the recycle bin.

Since the data was on a separate drive then the OS drive, you may be able to find some 3rd party software that can recover previous versions of that drive and allow you to select that folder out of it.
0
 
russgarrettAuthor Commented:
ok.

i doubled the shadow copy space on the server from 3892 so i will see if more shadow copies are retained.

i almost bet the files were moved somewhere but she cannot remember the name of 1 file even to look for.

i do have the ONTRACK pro tools. i wonder if they will work on a server.
0
 
russgarrettAuthor Commented:
excellent !

sorry for the slow response back.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 7
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now