Hi all,

We have 4 W10 pc's and 2 W11 laptops. We also have a W10 server with all
of our files. We all work through the network to the server.
When I'm working on my pc and delete a file on the server, it won't show
up in my recycle bin, and not in the recycle bin on the server.
Is there an application which should make it possible to recover such a
deleted network file?

Thanks for your answers.

With regards,
Fokke Nauta

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Wed, 10/23/2024 10:31 AM, Fokke Nauta wrote:

Hi all,

We have 4 W10 pc's and 2 W11 laptops. We also have a W10 server with all of our files. We all work through the network to the server.
When I'm working on my pc and delete a file on the server, it won't show up in my recycle bin, and not in the recycle bin on the server.
Is there an application which should make it possible to recover such a deleted network file?

Thanks for your answers.

With regards,
Fokke Nauta

You need an "undelete" run locally on the server.

https://www.ccleaner.com/recuva

If the server is Windows based, that's going to be easier to do.
A NAS for example, check the manual for suggestions.

How deleting works, is a single byte is flipped on a $MFT entry.
If the $MFT entry is "re-used" by the file system, all chance of
recovery is lost (then you are in PhotoRec territory, with poor
odds of success).

The green button shown in the interface, is a measure of how
many "clusters" for the file, are still present and have not
been stomped upon. A green color is "perfection". Asking
to recover the file, the file is 100% good.

As the disk drive receives writes (like a C: drive is pretty active
because of system activity), this stomps on your materials.
Gradually, a recoverable file, the indicator turns red, and the
thing is "mostly shredded". If the file name is not seen at all,
the $MFT entry (1KB long) has been overwritten and your file is
truly gone.

While PhotoRec can scan for chunks of file, it helps if
the drive was defragmented just before the incident. SSD drives
are fragmented pretty bad (we only Trim them, not defrag them),
so a PhotoRec scan is unlikely to be able to join all the pieces
in a satisfactory way. Normally, a server would use a rotating drive,
as you can get a bigger drive for the same money, if it is a
rotating drive.

Normally the advice is to:

1) Stop using the file system immediately.
2) Use Recuva to identify candidates. Slave up
the drive to some machine which is not going to
try to write it. If the file to be recovered is large,
write it to any drive which is NOT the drive you are
recovering from. Don't be stupid about selecting a destination.
If the lost file is on drive H:\ then don't "save as" from
Recuva to drive H:\ . Save to Drive D: instead.

The longer the drive has been running, since the incident,
the more likely the indicator has turned red.

Paul

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

In article <lnsfmmFmhqtU1@mid.individual.net>, Fokke Nauta wrote...

Hi all,

We have 4 W10 pc's and 2 W11 laptops. We also have a W10 server with all
of our files. We all work through the network to the server.
When I'm working on my pc and delete a file on the server, it won't show
up in my recycle bin, and not in the recycle bin on the server.
Is there an application which should make it possible to recover such a deleted network file?

Thanks for your answers.

With regards,
Fokke Nauta

Won't help you now, but you could set up File History on the server. Ideally, install a separate disk as the FH store, but you can use an external plug-in instead. Works a treat. https://www.computerworld.com/article/1621193/how-to-use-file-history-windows- 10-windows-11.html

--

Phil, London

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 24/10/2024 13:41, Philip Herlihy wrote:

In article <lnsfmmFmhqtU1@mid.individual.net>, Fokke Nauta wrote...

Hi all,

We have 4 W10 pc's and 2 W11 laptops. We also have a W10 server with all
of our files. We all work through the network to the server.
When I'm working on my pc and delete a file on the server, it won't show
up in my recycle bin, and not in the recycle bin on the server.
Is there an application which should make it possible to recover such a
deleted network file?

Thanks for your answers.

With regards,
Fokke Nauta

Won't help you now, but you could set up File History on the server. Ideally,
install a separate disk as the FH store, but you can use an external plug-in instead. Works a treat. https://www.computerworld.com/article/1621193/how-to-use-file-history-windows-
10-windows-11.html

The link shows up with 404 page not found.

Fokke

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Thu, 24 Oct 2024 19:04:53 +0200, Fokke Nauta <usenet@solfon.nl> wrote:

On 24/10/2024 13:41, Philip Herlihy wrote:

In article <lnsfmmFmhqtU1@mid.individual.net>, Fokke Nauta wrote...

Hi all,

We have 4 W10 pc's and 2 W11 laptops. We also have a W10 server with all >>> of our files. We all work through the network to the server.
When I'm working on my pc and delete a file on the server, it won't show >>> up in my recycle bin, and not in the recycle bin on the server.
Is there an application which should make it possible to recover such a
deleted network file?

Thanks for your answers.

With regards,
Fokke Nauta

Won't help you now, but you could set up File History on the server. Ideally,
install a separate disk as the FH store, but you can use an external plug-in >> instead. Works a treat.
<https://www.computerworld.com/article/1621193/how-to-use-file-history-windows-10-windows-11.html>

The link shows up with 404 page not found.

Some clients struggle when a link is broken into a second line. Reassembled, the
link works for me. <https://www.computerworld.com/article/1621193/how-to-use-file-history-windows-10-windows-11.html>

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 24/10/2024 19:33, Char Jackson wrote:

On Thu, 24 Oct 2024 19:04:53 +0200, Fokke Nauta <usenet@solfon.nl> wrote:

On 24/10/2024 13:41, Philip Herlihy wrote:

In article <lnsfmmFmhqtU1@mid.individual.net>, Fokke Nauta wrote...

Hi all,

We have 4 W10 pc's and 2 W11 laptops. We also have a W10 server with all >>>> of our files. We all work through the network to the server.
When I'm working on my pc and delete a file on the server, it won't show >>>> up in my recycle bin, and not in the recycle bin on the server.
Is there an application which should make it possible to recover such a >>>> deleted network file?

Thanks for your answers.

With regards,
Fokke Nauta

Won't help you now, but you could set up File History on the server. Ideally,
install a separate disk as the FH store, but you can use an external plug-in
instead. Works a treat.
<https://www.computerworld.com/article/1621193/how-to-use-file-history-windows-10-windows-11.html>

The link shows up with 404 page not found.

Some clients struggle when a link is broken into a second line. Reassembled, the
link works for me. <https://www.computerworld.com/article/1621193/how-to-use-file-history-windows-10-windows-11.html>

Sorry! I haven't noticed. Your link works OK!

Fokke

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

In article <lnvd1lF5fjhU1@mid.individual.net>, Fokke Nauta wrote...

On 24/10/2024 13:41, Philip Herlihy wrote:

Won't help you now, but you could set up File History on the server. Ideally,
install a separate disk as the FH store, but you can use an external plug-in
instead. Works a treat. https://www.computerworld.com/article/1621193/how-to-use-file-history-windows-10-windows-11.html

The link shows up with 404 page not found.

Fokke

Works still for me. You may not have reconstructed it correctly (or there may have been a server glitch). Just google File History!

(I do wish newsreaders could be persuaded not to wrap links!)

--

Phil, London

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 23/10/2024 20:40, Paul wrote:

On Wed, 10/23/2024 10:31 AM, Fokke Nauta wrote:

Hi all,

We have 4 W10 pc's and 2 W11 laptops. We also have a W10 server with all of our files. We all work through the network to the server.
When I'm working on my pc and delete a file on the server, it won't show up in my recycle bin, and not in the recycle bin on the server.
Is there an application which should make it possible to recover such a deleted network file?

Thanks for your answers.

With regards,
Fokke Nauta

You need an "undelete" run locally on the server.

https://www.ccleaner.com/recuva

If the server is Windows based, that's going to be easier to do.
A NAS for example, check the manual for suggestions.

How deleting works, is a single byte is flipped on a $MFT entry.
If the $MFT entry is "re-used" by the file system, all chance of
recovery is lost (then you are in PhotoRec territory, with poor
odds of success).

The green button shown in the interface, is a measure of how
many "clusters" for the file, are still present and have not
been stomped upon. A green color is "perfection". Asking
to recover the file, the file is 100% good.

As the disk drive receives writes (like a C: drive is pretty active
because of system activity), this stomps on your materials.
Gradually, a recoverable file, the indicator turns red, and the
thing is "mostly shredded". If the file name is not seen at all,
the $MFT entry (1KB long) has been overwritten and your file is
truly gone.

While PhotoRec can scan for chunks of file, it helps if
the drive was defragmented just before the incident. SSD drives
are fragmented pretty bad (we only Trim them, not defrag them),
so a PhotoRec scan is unlikely to be able to join all the pieces
in a satisfactory way. Normally, a server would use a rotating drive,
as you can get a bigger drive for the same money, if it is a
rotating drive.

Normally the advice is to:

1) Stop using the file system immediately.
2) Use Recuva to identify candidates. Slave up
the drive to some machine which is not going to
try to write it. If the file to be recovered is large,
write it to any drive which is NOT the drive you are
recovering from. Don't be stupid about selecting a destination.
If the lost file is on drive H:\ then don't "save as" from
Recuva to drive H:\ . Save to Drive D: instead.

The longer the drive has been running, since the incident,
the more likely the indicator has turned red.

Paul

Thanks, Paul.

I installed Recuva. It will work fine.

Fokke

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)