Re: Missing files/folders

Hi Jeff

Thanks for the reply

There is no replication software to remote sites or internally in use and
DFS is not used.

In response to Moncho's reply, there are no scheduled tasks or automated
processes.

AV "resident shield" is active for scanning "infectable files! only. I'm
reluctant to take this off as surely it is required, however if someone
thinks that is should be unticked, I can try it.

A backup runs daily at night which could be running whilst users are working
on files - could this cause the problem?

I can't think of anything else. Its a relatively simple setup, Small
Business Server 2003 with Terminal Service 2003 at the main site - all remote
sites connect via RDP.

"Jeff" wrote:

Do you use any type of replication software to remote sites or internally?
Any DFS ns or replication to speak of? I had this happen to me, but it was
due to corruption on my file server which was a member of the namespace.
When a user logged in it caused the corrupted files to disappear, when this
happened my hotsite not available directly to users replaced the files to a
previous location on my active linked member.

"Grainne" wrote:

Hi Moncho

I was authenticated on TS Server and was working on files on SBS Server.
The customer doesn't store anything on TS Server, its just authenticates them
and passes them through to SBS.

It isn't a 24x7 shop and files always appear to move when someone is logged
in remotely. One of the users mentioned that they were logged in remotely,
the screen flickered and the files they were working on had disappeared (they
were found the next day elsewhere), this user is also quite IT literate
therefore wouldn't usually make mistakes and not own up to them.

It appears to only happen when RDP'd into the server but I can't be sure.
It doesn't usually happen when working locally internally and accessing
shared network files. Usually the customer comes in first thing in the
morning and notices files are not where they should be so it appears it
happens overnight when users would be RDP's into the system.

I'll check the scheduled tasks and antivirus and keep and look at the audit
when it next happens.

Grainne

"moncho" wrote:


When you were in remotely, were you in the SBS server or the TS server?

Is this a 24X7 shop and if not, were folder/files "weirdly" moved when
no one was there, either in the office or remotely?

Does this only happen when RDP'd into the TS server?
Since this is a shared drive, does this also happen from local
workstations when viewing in Windows Explorer?

What about checking scheduled tasks or any other automated processes.
Maybe .vbs or .bat files are messing around.

I think you may need to wait for the object access audit and maybe
you will find the culprit.

I have no idea what may cause this issue but I figure if I keep asking
questions, maybe there is something that will trigger a thought
or an idea.

Do you have anti-virus software on the server that has a
"resident shield" active that maybe messing with the application?

hmmm.

moncho


Grainne


"moncho" wrote:

Just a thought, could it be that the system may be compromised?
The screen flicker makes me cautious.

Are the folders/files located on a shared drive or local to the TS server?

If it is a shared drive, I would lean towards an unknowledgeable
user moving them.

Are the same folders/files being moved or are they random?

When the folders/files are moved, are they moved to the same
place or is it random?

Just trying to find some type of pattern.

moncho


.

Relevant Pages

  • Re: HOW ==> Users View Scheduled Tasks on a Server ??
    ... task is set to run under a domain admin account which he does not know). ... i see no risk at all in just lettting him VIEW the scheduled tasks! ... > server in order to be able to manage or even see the scheduled tasks on ... >> will run mytask.job on the remote server...but only if you are an admin. ...
    (microsoft.public.win2000.security)
  • Re: Application server shuts down
    ... Anything in the Scheduled Tasks? ... Could someone with elevated privileges be remoting into the server to remote ... "Jim Behning" wrote in message ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Missing files/folders
    ... Do you use any type of replication software to remote sites or internally? ... I was authenticated on TS Server and was working on files on SBS Server. ... "moncho" wrote: ... Are the folders/files located on a shared drive or local to the TS server? ...
    (microsoft.public.windows.terminal_services)
  • Re: What is best way to access files on Windows Server 2008 remote
    ... I thought that maybe remote desktop might be the best way ... but since the server is not set up as a domain hence no Active ... Directory I thought that ust providing access to the folders/files ... network is available via a router with a static IP address. ...
    (microsoft.public.windows.terminal_services)
  • Re: HOW ==> Users View Scheduled Tasks on a Server ??
    ... It is much safer to change the permissions to let the user restart the ... You can do this by launching MMC on the server with the service ... If you insist on being able to let a user manage scheduled tasks, ... >> will run mytask.job on the remote server...but only if you are an admin. ...
    (microsoft.public.win2000.security)
Loading