Member Avatar for Blue Storm

So I deleted some files that are on a drive mapping of remote computer. Where do they get put? I looked in both recycle bins, and there is nothing. Anyone know?

  • 3 Contributors
  • 3 Replies
  • 86 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by DimaYasny

Dani AI

Generated

Follow-up practical notes and a short recovery checklist that build on and without repeating the basics.

First, triage: identify the host machine, the exact share and path, the approximate deletion time and the user account that performed the delete. If the host is a Windows server, ask the administrator to check server-side snapshots/Volume Shadow Copies or any scheduled backup catalog before doing anything else. If the host is a NAS, many vendors provide a trash/recycle feature or snapshots that live on the device — those are the fastest restore routes.

Preservation and recovery workflow: stop all writes to the affected volume (unmap the share from clients, suspend services that write to it). If possible, have the admin take a block-level snapshot or forensic image of the volume and work from that image. Preferred order of attempts: 1) restore from server snapshot or backup; 2) run an NTFS/MFT-aware undelete tool against the image (this preserves names and folders when MFT entries remain); 3) if that fails, use file-carving tools (this can recover file content but usually loses filenames and folder structure). Recovery success drops as the disk is written to, so preservation is critical.

Cautions: EFS-encrypted files require the original keys to recover; permissions and audit logs on the server can help track what happened; if there is no admin access, escalate to whoever manages the host. For future protection, enable server-side snapshots and regular backups, and consider a share-level trash/snapshot policy on NAS or file servers.

Recommended Answers

All 3 Replies

Member Avatar for Blue Storm

Anyone????

Member Avatar for jbennet

Bad news. Items deleted over a network do not go to a recyle bin. They are deleted permanently. You may (but its unlikely) be able to recover the files using specialist utilities.

Member Avatar for DimaYasny

restore the files form a backup. if backup is unavailable... well I use R-Studio

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.