Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a file in a DFS share, it's in a namespace managed by two domain controllers The base media is one shared drive on a file server I can't delete it, it keeps re-appearing when I run sysinternals handle utility on the file server it tells me the file is opened by PID 4, which appears to be 'system'

I assume thats the DFS service or sharing service that's actually doing the sharing.

How can I determine who is has the file open and from where?

share|improve this question
up vote 1 down vote accepted

The DFS service simply maps the correct folder to the correct location, I can't imagine it would maintain a file handle on anything. What is the name of the file that keeps appearing? Right click the file, go properties -> Details and find out who created the file, that's probably your culprit. As far as checking which Users have which file open, I don't know if it's possible on a windows server machine, but this thread might help you

share|improve this answer
Thanks!… was the key. – Paddy Carroll Aug 8 '12 at 8:58

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.