New
#21
Kaktussoft:
Thanks: I am on the road now and away from my backup. I will try this over the weekend and report back on how it works.
Kaktussoft:
I followed your instructions from Thursday. the Recycle Bin was empty when I attached the VHD.
There were two other folders with long names there which I was not able to access (below): given their dates I am guessing these are not relevant (I assume two folders since my hard drive is partitioned in two). But is this where you meant the files would be? If so how does one access these folders?
Last edited by Brink; 22 Apr 2013 at 17:19. Reason: removed broken image
MonkeyMan,
That's the correct location. You will need to take ownership of and set permissions to "allow" your account "full control" of the long 5-1-5..... folders before you will be able to access them.
Option Three in the tutorial below can help show you how to if needed. :)
Take Ownership of file
the one ending with -500 is the recycle bin for user Adminstrator
SID: S-1-5-21domain-500
Name: Administrator
Description: A user account for the system administrator. By default, it is the only user account that is given full control over the system.
Logon as user Adminstrator to see it
Brink and Kaktussoft:
My account is an administrator. I tried following the "Take Ownership", Option 3 instructions link that Brink posted. I got to Step 8 and it said that the media is wrote protected, whether I check or uncheck the Replace owner option at the bottom: see screenshots below. Any further instructions?
Note on the previous screen it lists Current Owner as "Unable to display current owner."
Last edited by Brink; 22 Apr 2013 at 17:20. Reason: fixed format
MonkeyMan,
It doesn't look good.
In that case, see if you may be able to mount the system image the same way in the tutorial below, then run Recuva on the mounted image to if it may be able to find them.
System Image - Extract Files Using Disk Management
The vhd seems to be mounted readonly!! Write-enable it.
Once again S-1-5-21domain-500 is for user Administrator. Not for normal user wirh admin rights
To know the SID for your user account, you may use the script sidlist.vbs
Run that script to see who is ....-500 and ......-1000
Log on as these users and look in recycle bin with external detached. Empty the recycle bin. Now attach vhd and look in recycle bin. Now you see the files
Kaktussoft and Brink:
Sorry I have been AWOL on this I have gotten sidetracked at work. But I hope to try your suggestions and see if I can get this to work soon. Thanks again for your help and patience!