Server Disk Space Search tools for Windows Server 2008

I have SBS2008 server that has a Data drive partition (physical drive letter E: ) that’s setup as RAID 5 with 410GB available.

Just recently on 6/19/2015, the server alerted that there’s less than 10 %of available disk space.
-      We believe know the day before, the server had near 40% of available disk space
-      We feel that sometime on the 19th, someone had inadvertently copied a large amount of data onto the server’s E-Drive but not sure where
-      Some time ago, I moved all the WSUS repositories onto the E-Drive. I recall  several weeks ago that this WSUS folder was over 100Gb but I don’t recall exactly. Today its 160GB’s in size. I doubt very much that it grew by 20 or 30 GB’s in a few weeks. I believe there’s a wizard to shrink the repository. I’ll have to look into this.
-      There’s also a few log files from SHAREPOINT that are very large. One log file was 19.9GB’s in size and it’s last modified date was on 6/19/2015. Ironically, we don’t use SHAREPOINT. I also know that you can’t just uninstall it. Supposedly there are tools that shrink it

I ran “diruse” and Sysinternals “Du”
-      However these to programs outputs didn’t help me
-      I tried a GUI tool called “WinDIrStat”. It was very complex to follow. I’m not familiar with this tool

I looked a t my backups to see what changed
-      I use two backup programs. MozyPro for cloud backups. Not everything on the E-Drive is tagged for backup. The backup data barely changed from the day before or the day after the 19th
-      The other backup method is the built-in “Windows Backup”. I use it to back up the entire server onto the locally attached USB drive. The logs are very basic and don’t provide much information. However, interestingly, it showed a massive amount of data that changed during that backup but not clues as to what these changes were (at least I was not able to determine)

So here’s what I’m trying to accomplish
-      Is there a command or tool I can use to determine what data changed or was added on the 19th?  I need to determine if a large chunk of data was copied into a folder under the E-Drive of the server

Any help would be appreciated
Andreas GieryicComputer Networking, OwnerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

NVITEnd-user supportCommented:
>  I tried a GUI tool called “WinDIrStat”. It was very complex to follow.
You can sort by Size (and other fields) by picking the column header.

I guess that doesn't do it for you?

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
NVITEnd-user supportCommented:
> other backup method is the built-in “Windows Backup”. I use it to back up the entire server... The logs are very basic and don't provide much information. ...interestingly, it showed a massive amount of data that changed during that backup but not clues as to what these changes were

Can you browse the backup file? Maybe that will help.
Seth SimmonsSr. Systems AdministratorCommented:
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

Andreas GieryicComputer Networking, OwnerAuthor Commented:
I'm trying to determine what data was added or changed.

"indows Backup" there is no option to browse the backup file

“WinDIrStat" - I am aware that you sort by clicking on the column. but I still need to know what changed on that particular day.

Had a used a more informative backup solution, it might have been able let me know what was added that day.
NVITEnd-user supportCommented:
Without a reference, you may have to manually search. Even that may be tedious.
Andreas GieryicComputer Networking, OwnerAuthor Commented:
I believe the only option I have is to perform a restore on to an external USB drive from a date prior to noticing Drive size increasing and then compare all the folders.
Andreas GieryicComputer Networking, OwnerAuthor Commented:
There is no option to browse a Windows backup log. What I ended up doing is to initiate a restored using the Windows server backup and chose several earlier times of restored dates. The Windows server backup tool will calculate the amount of data that will be restored. Once I get that number, I would stop the restore and choose to restore times.

I still was not able to narrow down where the server grew over 100 GB. I thought maybe they were hidden temporary files
the server has a WSUS folder on it which grows about the gigabyte every few weeks. It grew about 23 GB in the last month or so. Other than that I could not find work else it has grown.

There are tools with more expensive server backup programs that will report how much data is backing up for a particular backup job. The tool I use for backups, does a great job but does not report in that depth. The vendor of this program states it would use up a lot of this space maintaining such a log. To me it wasn't the worth the price to get a more expensive backup solution. However I will need to find a better way to keep track of large data growths.

I appreciate everyone's input
Andreas GieryicComputer Networking, OwnerAuthor Commented:
Thanks for your input
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.