Server 2008 Viirtual Machine D drive (disk 2) keeps filling up but can't find any hidden files or folders

Conrad_Bel
Conrad_Bel used Ask the Experts™
on
I have a virtual machine server running windows server 2008 SP2.  The D drive keeps filling up but i can't find whats taking up the space.  Once I reboot the server the space is recovered.  When i do a properties on the drive it shows 1 folder and basically nothing as far as space.  But when i run chkdsk on the drive it does indeed show disk space and numerous files.  Problem is, i can't see the files even after showing hidden operating system and hidden files.  

I even renamed the drive to E: and I still had the problem.  

I blew the drive away and created another virtual disk.  And low and behold its still doing the same thing.

My virus scan (SEP) doesn't show anything funny going on.  

Any advise would be much appreciated.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Senior System Engineer
Commented:
Are you using VSS to take snapshots of the D: drive?  run this and tell me what it says:

vssadmin List Shadows

Author

Commented:
See attachment.
serverdiskdriveissue.PNG
Chad FranksSenior System Engineer

Commented:
run:

vssadmin Delete Shadows /FOR=D:  

then select yes
Exploring ASP.NET Core: Fundamentals

Learn to build web apps and services, IoT apps, and mobile backends by covering the fundamentals of ASP.NET Core and  exploring the core foundations for app libraries.

Author

Commented:
THis is a production server.  Will this affect my running apps?
Chad FranksSenior System Engineer

Commented:
No, this is non-invasive change.  How much data is on the D: drive?

Author

Commented:
Nothing should be on the drive as of yet.  Only thing showing up is the system volume and recycle bin.  but 2GB are showing used and growing.  Been an ongoing issue for a few months now.
Chad FranksSenior System Engineer

Commented:
then run the command I said before:

vssadmin Delete Shadows /FOR=D:

Author

Commented:
Ran the command and output is "No items found that satisfy the query.
Chad FranksSenior System Engineer

Commented:
usually the System Volume folder contains VSS snapshots or system restore files.  Do you have system restore enabled?  Also please check your recycle bin folder and make sure to get rid of old saved recycle bin files..etc.

Author

Commented:
system restore is supposed to be disabled on our servers.  I can clear the recycle bin, but that doesnt eplain to me why 40GB gets eaten up over the month.

Is there a way to check system restore on a server 2008 ?  There isn't an option to check that like you can on a workstation.
Chad FranksSenior System Engineer

Commented:
you can also download TreeSize - its free and really small APP.  scan your D drive and let me know what it says:

http://www.jam-software.com/treesize_free/

Author

Commented:
yeh, i think we will do that.  Need to see what the heck these files are.

Author

Commented:
Could it be a trojan or something like that?  Even though my virus scan says it's clean.
Chad FranksSenior System Engineer

Commented:
its always a possibility, but not likely if you have anti virus software loaded.
Chad FranksSenior System Engineer

Commented:
what did tree size tell you?

Author

Commented:
Nothing yet.  I am testing tree size and windirstat on my DevNet servers.  If it's safe, we have to run it through our change control board.  I hate CCB's.   LOL.
Chad FranksSenior System Engineer

Commented:
I completely understand.  I will check back

Author

Commented:
Thanks for you assistance though.  Much appreciated.  I will leave this issue open until we can get software approved.

Author

Commented:
So it turns out there were shadow copies on D drive. To find them it was vssadmin list shadowstorage. Max size was set to unbounded. Changed to 4gb.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial