Showing posts with label recovery. Show all posts
Showing posts with label recovery. Show all posts

Thursday, November 5, 2020

Windows 10 machines with bitlocker on when you didn't enable it (finding the recovery key)

 I had a Lenovo Carbon X1 laptop that was bitlocker encrypted that I did not turn on.  As such, I did not have the recovery key.  I found that when a machine is connected to Azure, the machine auto-encrypts and stores the recovery key in Azure.

I found this information here:
https://hardsoft-support.kayako.com/article/99-windows-10-bitlocker-turns-on-without-a-notice

Short version of the above article:
1) go to https://manage.windowsazure.com/ and log in with your Azure connected email address
2) Go to users and find your device where you *should* see the recovery key.

Friday, October 24, 2014

Recovering lost Word (or other MS Office) documents

I'm adding a third tool to my chest on recovering MS Word (or other Office documents).

You can access ASD files (autorecover files) here:
%userprofile%\AppData\Roaming\Microsoft\Word

Other places to look for missing files (per this post):
C:\Users\%username%\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Outlook

Or via this method to recover unsaved Word docs:
http://t-solve.blogspot.com/2014/09/retrieving-document-from-office-2010.html


Monday, September 19, 2011

free tracking software for stolen laptops - preyproject

An acquaintance recently had a stolen laptop, and I was very surprised to find that she had installed a free laptop tracking program on it. I viewed the tracking report from the program/service, and it was incredible.

The service showed the location on a google map of the laptop. It showed a screen shot of the desktop of the laptop. It even showed the a capture from the built in web cam of the person using the laptop. This service/program has a free option which seems to be fully functional, but it also has a paid version with more features. In the case of this laptop theft, the free version was sufficient.

The site for the service and program is:

I have already installed this on my own laptop.

Wednesday, September 30, 2009

hard drive recovery software

I had a bad hard drive that didn't have a current backup, so I got a local repair ship to recover the data. I had tried to recover the data myself with one of those USB 2.0 to IDE/SATA devices, but Windows could see the drive, but not pull any data from it or see the file structure. It just wanted to reformat the disk.

The shop was able to recover the data, and they used File Scavenger and Disk Recoup made by Quetek here:

http://www.quetek.com/

Good to note for future failed hard drives.

Tuesday, February 5, 2008

Using Shadow Copies on Windows Server 2003

I have been vaguely aware that shadow copies are a means of recovering files without going to back up, but when I had a user request a file that she had deleted today, I decided to look into it. For Windows 2003 shares, you can recover deleted or saved/changed files BUT shadow copies has to be enabled first. In this particular case, shadow copies was not enabled. But here is how you do it:

--------

Shadow Copy is only available on Server 2003 machines and naturally you need NTFS (not FAT32). Configuration is easy, just click on the root of the any drive, Select a Volume, now press the Settings button. A crucial point is that Shadow Copy only works on network shares, and not on plain un-shared folders. So in passing, note that the number of shares for each volume. 'Best Practice' suggests that you place the 'Shadow' on a separate disk or at least on a separate partition. Personally, I would dedicate a disk to this service thereby improving performance. To change the drive, select the 'Details Button'.

Microsoft provide a schedule of two shadow copies a day, at 7:00 am and 12:00. You may wish to adjust these timings. When you select a schedule bear in mind that when you reach 64 shadows, the system starts over-writing. So make a calculation of how far back you would like to keep copies. My point is that if you go mad and schedule every hour, then you will start over writing within 3 days. Is that desirable? Would you want copies to be over-written so soon? I think not both on the grounds of load on the server and on how long you would want to retain previous versions.

--------

And then once it is enabled, here is how a user could retrieve files:

--------

To Recover a Deleted File

  • Drill down to the folder the file was deleted from.
  • Click in the list and then right-click the mouse to select Properties from the bottom of the menu. Select the Previous Versions tab from the Properties dialog box.
  • Select the version of folder that contains the file before it was deleted. Then click View. This will open the folder showing you the last saved version of the file. You can now select the file and drag and drop or cut and paste it from the folder to the target destination.

It is easier to recover a corrupt or overwritten file because you have something to select in the folder:

  • Right-click the bad file and click Properties.
  • Select Previous Versions as described above. To view the safe version, click View. To copy the old version to another location, simply click Copy and to replace the current version with the older version, simply click Restore.

Tuesday, October 23, 2007

reformatting a Toshiba Portege R205

Reformatting a Toshiba Portege R200 or R205

Hold down 0 (zero) while starting the laptop