Undelete a file from a network drive

One of our users deleted a pdf on a shared network drive.  The drive is on a Windows 2003 server.  Is there any way to get this file back.  No backups were made on this drive either.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

I would use http://www.piriform.com/recuva
Install it, point it to the directory and recover.
Provided your server was setup with shadow copies enabled, it would be possible to recover files. The Link below gives you some idea on this feature and how it is used:


But as it probably hasn't been setup, it'll be very unlikely the data is recoverable, and it would also mean a lot of work and server down time just to find out whether it can be recovered.

The first and most important rule with data recovery is to stop writing to the disks where the data was on. Otherwise the chances will be high that the area the file was on will be overwritten with new data. That means you'd have to disable all access to the server from your Clients (shut the server down). Then you would have to scan the server's disks when booted from another OS, so the server's disks aren't used. Usually this means you have to take the disk out and put it in another PC as a 2nd HD. Put this can be a problem when the disk(s) come from a server with RAID. Then you'd have to scan the disk using a data recovery utility like getdataback (or the one mentioned above, but I have had the best recovery rates with the one I'm mentioning):


Once the file has been found you can register the utility so you can copy the data to a location on your PC. After that you would have to return the disks back to your server, boot it up, and then copy the file from the PC you recovered it to back to the server.

So generally in a server environment that is usually not an option. But for the future enable the shadow copies...


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kheaneyAuthor Commented:
I knew this would not be an easy task or something in-expensive.

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Wireless Networking

From novice to tech pro — start learning today.