Searching for database file.

[boston33]

Hello,

We have a SBS2003 Domain.

We have limited space on this SBS2003 server.

Everynight at 12:30AM, a 30GB database is copied to this SBS2003 server. This is not planned. It is taking up valuable hd space. The SBS2003 server doesn't have any scheduled tasks. I searched most of the other servers and workstations. I can't find the computer responsible for this file copy.

Is there a way to research this? Will the SBS2003 event viewer show the hostname of the copy that is copying the file?

Thanks.

 

[itsp1965]

Check the security log to see which server\users attempts a login to this server at 12:30am. From there check the offending server/workstation for a scheduled task (or check your database software for any scheduled tasks) that may be running in the background that may be causing this.

 

[mrdenny]

Wait for the copy to start, then open Computer Manager. Check the shared folders section. Under that select sessions. This will show you the computer and user that the file is being transferred from. Assuming that it is being copied via UNC and not FTP or HTTP.

If that doesn't help, rename the folder that the database file is being copied to. That should stop the copy (unless the software doing the copy is setup to create the folder as well).

Denny
MVP
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / SQL 2005 BI / SQL 2008 DBA / SQL 2008 DBD / SQL 2008 BI / MWSS 3.0: Configuration / MOSS 2007: Configuration)
MCITP (SQL 2005 DBA / SQL 2008 DBA / SQL 2005 DBD / SQL 2008 DBD / SQL 2005 BI / SQL 2008 BI)

My Blog

 

[rjs]

Or delete the database file, create a dummy text file with the same name and set the attributes/permissons on the file such that it cannot be overwritten. Add yourself (your account) with permissions and explicity set deny permissions for everyone else. that should stop the copy.

You should also be able to right-click on the file, go to properties, security, advanced and see who is the owner of the file. This should give you an idea of who the offender is.