Looking for deleted file recovery program
Hi, I have a 2008 R2 file server that someone moved or deleted files from. Tape backup was too far back.
Question, what is a good recommendation for a deleted file recovery program, hopefully under a hundred bucks.
Thanks all.
Question, what is a good recommendation for a deleted file recovery program, hopefully under a hundred bucks.
Thanks all.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
If nothing else was written to the drive since deletion then GetDataBack from Runtime.org is the best solution.
ASKER
thanks guys, I'm trying them now. Yaw, I couldn't shut down the server and they are vague and ever changing on how important they are. But this will be super important in the future
As already mentioned, getdataback is the best recovery tool. But on a server there are complications. Whenever you need to recover deleted files, the first thing to do is to stop using the PC in questions. Then remove the disk and scan it using another PC, so nothing gets written on the disk.
On servers this is usually not possible, and besides that, RAID is normally used there, so you can't just remove a disk and scan it, as it is part of an array of several disks.
In such a situation you would have to install an OS to a separate disk of the same server, and then install the raid controller's driver so you can search the array. This takes a lot of time (as does the search), and the server wouldn't be accessible during that time.
You also say the backup is too far back, so chances of recovery are very low, since the space the files lived in has likely been used in the meantime.
For the future I suggest enabling shadow copies on the server. That way you will be able to go back more easily in the future.
On servers this is usually not possible, and besides that, RAID is normally used there, so you can't just remove a disk and scan it, as it is part of an array of several disks.
In such a situation you would have to install an OS to a separate disk of the same server, and then install the raid controller's driver so you can search the array. This takes a lot of time (as does the search), and the server wouldn't be accessible during that time.
You also say the backup is too far back, so chances of recovery are very low, since the space the files lived in has likely been used in the meantime.
For the future I suggest enabling shadow copies on the server. That way you will be able to go back more easily in the future.
FWIW, I installed GetDataBack and confirmed it restores per an earlier test here https://www.experts-exchange.com/questions/28540678/NTFS-Server-Drive-How-to-undelete-a-file.html?anchorAnswerId=40393271#a40393271
GetDataBack was installed on the server C:.
The test file was on the server data drive D:.
The test file was deleted by a workstation client.
Of course, I ran GDB right after deleting the file. YMMV.
GetDataBack was installed on the server C:.
The test file was on the server data drive D:.
The test file was deleted by a workstation client.
Of course, I ran GDB right after deleting the file. YMMV.
ASKER
Thanks all, they all worked great, I didn't get the files back, I think as someone mentioned the drive is active and fullish, they just had to eat it. I now know for the future
http://www.powerdatarecovery.com/
http://www.ontrackdatarecovery.com/