stratisphere Posted January 22, 2010 Posted January 22, 2010 Got a pretty urgent and major issue here. Our Windows 2008 file server has a TB drive which has worked great and given us the expansion space we've needed. However lately we've been having the problem of complete folders just going missing. Up until yesterday I put it down to users deleting them. However after a major performance issue on the server which turned out to be a duff cable forcing it to run at 100mb half duplex I thought it was resolved after replacing the cable. This morning i've since found out another user's entire folder has gone missing. Remoted into the server and the Hard Faults counter is up in the 10,000's. Is this a sign the hard drive is on it's way out? Anyone got any hints to how to resolve this?
Michael Posted January 22, 2010 Posted January 22, 2010 So after replacing the cable is it now operating at 1000Mbps Full Duplex? If it isn't it could be a combination of hard drive and motherboard creating the problems.
stratisphere Posted January 22, 2010 Author Posted January 22, 2010 Yes it's running at full 1gb/s I'm a twit... the high hard/faults are because I was running a search at the time I just find it strange how it's full folders going missing. I havnt had any reports of any corrupt files. Part of me things prehaps it's a security related issue... cant find anything in the logs though?
sonic1485 Posted January 22, 2010 Posted January 22, 2010 We have issues with a staff and students dragging and dropping folders into other folders. Is there a chance that could have happend?
stratisphere Posted January 22, 2010 Author Posted January 22, 2010 Always my first thought before I even think about going into the backups. Nah, this isnt a "geog" folder or something going missing... this is entire user areas i.e. "\\" I've done searches on the server to find the folders and it finds nothing... yet file recovery tools find nothing either. (BTW, our backup system has the files... so no huge impact on lost data... yet)
mullet_man Posted January 22, 2010 Posted January 22, 2010 Is it pupils? We find pupils delete their whole area's, and then pretend its nothing to do with them to 1. get out of class 2. get out of doing work the list goes on etc
stratisphere Posted January 22, 2010 Author Posted January 22, 2010 Pretty sure it's not the users. For one they cant back up far enough up the tree to do that and plus it's staff accounts that are going as well... reliable members of staff as well! My thinking is either a breach or dodgy hardware. Cant find evidence to support either though.
mullet_man Posted January 22, 2010 Posted January 22, 2010 Pretty sure it's not the users. For one they cant back up far enough up the tree to do that and plus it's staff accounts that are going as well... reliable members of staff as well! My thinking is either a breach or dodgy hardware. Cant find evidence to support either though. It doesn't sound like its pupils, but we have it here many a time where kids log in as each other and delete all their work. Do you use roaming profiles?
stratisphere Posted January 22, 2010 Author Posted January 22, 2010 We do, profiles seem to be OK though, the users can login fine
stratisphere Posted January 22, 2010 Author Posted January 22, 2010 i've just enabled auditing for delete, write and ownership flags for the drive. If it is a breach that should at least confirm it.
stratisphere Posted January 22, 2010 Author Posted January 22, 2010 I have a feeling the frisky friday thread has kinda stolen the limelight Dont suppose anyone can offer any hints?
stratisphere Posted January 22, 2010 Author Posted January 22, 2010 (edited) Well, case solved. And what a bloody case. Ok, just to recap, we were finding (in heinsight it was just staff) accounts were totally loosing their "My Documents", no file recovery tools were picking it up so it didnt look like it was deleted and there was no signs of any hardware issues or security breaches.. mega confusion. Anyway, recently I rebuilt our SIMS.Net Terminal Services server onto server 2008. All seemed to be working well. I put the list of users suffering from the problem and found that they all had tried to use sims remote access... just tested it. The second the TS session opens, that user's home folder just vanishes. I've disabled remote access for the moment but I suspect it's a rouge setting somewhere which is diverting their profiles. I Hate Terminal Services. Edited January 22, 2010 by stratisphere i c4nt speel
sonic1485 Posted January 22, 2010 Posted January 22, 2010 haha well at least your TB drive isn't messed up
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now