I'm looking for a decent tool that will not only allow me to recover files off of a local hard disk, but off of remote, network accessible hard disks as well. Do such tools exist? A free tool is always good, but I am willing to spend up to $100 if the tool performs exceptionally and has great support backing it.

By file recovery, I mean that the hard drive itself is still functional, but files are missing (quite possibly from user actions, for example).

locked by HopelessN00b Dec 5 '14 at 6:28

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. See the help center for guidance on writing a good question.

Read more about locked posts here.

  • Can you explain in more detail what you mean about remote recovery? I think you were downvoted because a computer that's failed remotely is going to need physical access. – Gareth May 3 '09 at 23:36
  • Sorry. I added a little more to try and help clarify. – Matt Hanson May 4 '09 at 6:32

To undelete files over a network you'll need a service, agent, or daemon running on each workstation. As a result I'd expect that solutions in this category are going to have per-workstation costs associated with them.

If your clients are running Windows Vista you can experiment with Volume Shadow Copy, which is system restore for an entire volume. You may be able to access the previous versions of a given folder using an administrative share, which would provide the network undelete you're looking for. It's unlikely that restore points will be set at meaningful enough intervals, as the default is one version per day.

Software like r-studio network edition does what you really want. Undelete over TCP/IP. Of course, its licensing is more expensive than free. It has the advantage of working on most FS types, not just NTFS.


To recover deleted files, you will generally need block level access, SMB/CIFS won't be enough. So unless you're using iSCSI for the network accessible disks, I think it's a no-go.


This is a problem that is best dealt with pro-actively rather than re-actively. Any re-active approach is going to have mixed results. Once the blocks are marked as unused any write requests may overwrite the data that was important. After all this is why windows has it's recycling bin. So any tool that is un-deleting data should be a tool of last resort.

I find it best to have people work off the servers where the data can be centrally managed with things like snapshots, redundancy, and backups. But users always find ways and reasons to work locally at times.

I don't deal with windows too much so I can't really speak at any length about all the options that may be out there but there are tools available to deal with this problem in a pro-active way. The easiest to admin would likely be a service such as Iron Mountain, Mozy, Carbonite that do near continuous backups. If you have a Windows Domain or Active Directory you can set up the policies to have roaming profiles to keep a copy of the users profiles on the server where snapshots and backups can play a role. There are also options for having locally run continuous data protection rather than an online service. I'm sure there are solutions that I don't know about as well.

If you must deal with this in a re-active way and you're only dealing with NTFS then RestorePro 2000 is worth a look. They have a version that works over a network and it's pretty affordable. I've never used the network version so I can't comment on how it works but the local version works great as long as the blocks haven't been overwritten. And it appears that they have come out with a new version and changed the product name to Restorer Ultimate. It's good to see that they are continuing their cheezy naming scheme.

More information can be found on their website http://www.restorer-ultimate.com/

Not the answer you're looking for? Browse other questions tagged or ask your own question.