Server 2008 Viirtual Machine D drive (disk 2) keeps filling up but can't find any hidden files or folders

I have a virtual machine server running windows server 2008 SP2.  The D drive keeps filling up but i can't find whats taking up the space.  Once I reboot the server the space is recovered.  When i do a properties on the drive it shows 1 folder and basically nothing as far as space.  But when i run chkdsk on the drive it does indeed show disk space and numerous files.  Problem is, i can't see the files even after showing hidden operating system and hidden files.  

I even renamed the drive to E: and I still had the problem.  

I blew the drive away and created another virtual disk.  And low and behold its still doing the same thing.

My virus scan (SEP) doesn't show anything funny going on.  

Any advise would be much appreciated.
Conrad_BelAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Chad FranksSenior System EngineerCommented:
Are you using VSS to take snapshots of the D: drive?  run this and tell me what it says:

vssadmin List Shadows
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Conrad_BelAuthor Commented:
See attachment.
serverdiskdriveissue.PNG
0
Chad FranksSenior System EngineerCommented:
run:

vssadmin Delete Shadows /FOR=D:  

then select yes
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

Conrad_BelAuthor Commented:
THis is a production server.  Will this affect my running apps?
0
Chad FranksSenior System EngineerCommented:
No, this is non-invasive change.  How much data is on the D: drive?
0
Conrad_BelAuthor Commented:
Nothing should be on the drive as of yet.  Only thing showing up is the system volume and recycle bin.  but 2GB are showing used and growing.  Been an ongoing issue for a few months now.
0
Chad FranksSenior System EngineerCommented:
then run the command I said before:

vssadmin Delete Shadows /FOR=D:
0
Conrad_BelAuthor Commented:
Ran the command and output is "No items found that satisfy the query.
0
Chad FranksSenior System EngineerCommented:
usually the System Volume folder contains VSS snapshots or system restore files.  Do you have system restore enabled?  Also please check your recycle bin folder and make sure to get rid of old saved recycle bin files..etc.
0
Conrad_BelAuthor Commented:
system restore is supposed to be disabled on our servers.  I can clear the recycle bin, but that doesnt eplain to me why 40GB gets eaten up over the month.

Is there a way to check system restore on a server 2008 ?  There isn't an option to check that like you can on a workstation.
0
Chad FranksSenior System EngineerCommented:
you can also download TreeSize - its free and really small APP.  scan your D drive and let me know what it says:

http://www.jam-software.com/treesize_free/
0
Conrad_BelAuthor Commented:
yeh, i think we will do that.  Need to see what the heck these files are.
0
Conrad_BelAuthor Commented:
Could it be a trojan or something like that?  Even though my virus scan says it's clean.
0
Chad FranksSenior System EngineerCommented:
its always a possibility, but not likely if you have anti virus software loaded.
0
Chad FranksSenior System EngineerCommented:
what did tree size tell you?
0
Conrad_BelAuthor Commented:
Nothing yet.  I am testing tree size and windirstat on my DevNet servers.  If it's safe, we have to run it through our change control board.  I hate CCB's.   LOL.
0
Chad FranksSenior System EngineerCommented:
I completely understand.  I will check back
0
Conrad_BelAuthor Commented:
Thanks for you assistance though.  Much appreciated.  I will leave this issue open until we can get software approved.
0
Conrad_BelAuthor Commented:
So it turns out there were shadow copies on D drive. To find them it was vssadmin list shadowstorage. Max size was set to unbounded. Changed to 4gb.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.