Recover purged files

[rjs]

Anyone know of 3rd party utilities (like the old disk editiors)which might let you recover a purged file in NetWare?

On the same note, anyone know of an equivalent to wipefile for deleted files on a NetWare volume? And yes I know about the purge command, but does purge actually mean you absolutely cannot recover the data, even using forensic computer utilities? I have a number of law firm clients worried about discovery issues.

 

[DrGreen26]

Once the file is purged, the file is wiped completely from the disk. What happens when a file is deleted, the file name is moved into the purge directory, and has pointers back to the disk location of where the file actually resides. If you were to restore the file, it would place itslef back into its original position. Once you purge it, it's gone for good.

I have never seen nor heard of any utility in the 10 years I have been doing this that would allow you to restore a file after deletion.

HTH

Mark C. Greenwood, CNE
m_jgreenwood@yahoo.com

CNE 4.11 and CNE 5 certified. BS Degree in MIS. Working in the industry for 8 years.

I work with NT servers, NDS for NT as well.

 

[TheLad]

Er, I think DrMarkGreen means that he has never heard of a utility that can restore a file from the disk after deletion. Backup software can, of course, restore files after deletion (sorry Mark!)

My advice is to ensure that the servers are locked away with the screensavers on, the backup tapes are stored in a fireproof safe, and that users have to change their passwords every 30 days or so. To be honest, password security and backup tape security is more of an issue than whether a file can be salvaged after it has been purged. "It's true, its damn true!"