I have a user that lost some files and blames my setup/Network. After looking at his laptop I noticed that he made some changes to a file at 3:05. he claimed to make a backup of his folder, which he did also at 3:05. there is also a copy of the file inside the file at 3:10 named specifically file 01/22/09 backup. At 4:10 he copies the files to his USB drive.
at 4:45 logs off the server and profile is copied exactly how it appears on the laptop.
guy goes out for a few days claiming to have used the files in question during the trip.
he comes back. plugs in the laptop and the files are gone.
he says the server must have overwrote his files.
I tried to recreate the scenario as follows:
Scenario created.
logged off to update my test profile.
logged back on
start of test:
1.LT connected to network.
2.Copied IKE file from shares to My Documents
3.Pulled the network plug and shut down laptop
4.The profile on LT was not saved
5.Rebooted with cable plugged in ( with this scenario the profile on the server would overwrite the profile on the laptop)
6.Logon failure, profile could not be located, local profile will be used, profile will not be copied. That?s with the cable plugged in.
7.Repeated scenario above with same results
8.Left cable plugged in
9.Logged off, profile saved to server at 11:38
So if server copy is older than local profile copy, it will not synchronize. If the server copy is newer or does not exist, it(server) will use it.
I cannot think of a reason the local profile would be younger than the server profile unless HG Wells showed up and took the laptop back in time.
I think the guy “moved” the files to the USB rather then copied, logged off. went on trip and came back claiming lost files because on his back up, the files existed (in a /sub/sub directory named backup 01/22/09 time 3:10).
any other scario you guys think this could have happened?