URGENT: Recovery of offline files under different user account.

A

Aaron

I have a serious problem, here's the scenario;

User used to be connected to a domain in Florida. The user synchronized a
network drive to his laptop for offline use. He moved to Louisville and
continued to log into the domain, even though it was not physically
available to him. He kept logging in with a cached set of credentials. This
goes on for 8 months; during that time he continually updated the offline
folder with new data.

I just joined his laptop to the domain in the office where he works. This
instantly created a problem of him not being able to access his offline
files. He can browse to their original network location
\\server\home\username and see's them all as synchronized and available.
However, he can't access any of them, or copy them to a new location as he
is logging into the computer as a different account on an entirely different
domain.


Facts:
The files are there.
The attributes cannot be changed.
I see no way to take ownership of the files, I'm sure this is by design of
Windows for security reasons.
The original domain is no longer available to connect to.

What can I do?
 
G

Ghostrider

Aaron said:
I have a serious problem, here's the scenario;

User used to be connected to a domain in Florida. The user synchronized a
network drive to his laptop for offline use. He moved to Louisville and
continued to log into the domain, even though it was not physically
available to him. He kept logging in with a cached set of credentials. This
goes on for 8 months; during that time he continually updated the offline
folder with new data.

I just joined his laptop to the domain in the office where he works. This
instantly created a problem of him not being able to access his offline
files. He can browse to their original network location
\\server\home\username and see's them all as synchronized and available.
However, he can't access any of them, or copy them to a new location as he
is logging into the computer as a different account on an entirely different
domain.


Facts:
The files are there.
The attributes cannot be changed.
I see no way to take ownership of the files, I'm sure this is by design of
Windows for security reasons.
The original domain is no longer available to connect to.

What can I do?

VPN.
 
M

Mistoffolees

Aaron said:

Can't be...not if he can still browse to \\server\home\username.
The System Administrator at the server needs to assign the user
a new logon name and access (preferably via VPN) to the server.
But if this person had been illicitly using the server for the
past 8 months, then there is serious doubt that your user will
ever get access to these files without some form of accomodation.
 
A

Aaron

YES. it can be. That's how offlline files work. Set up a synced folder for
yourself and then pull your network cable out. You'll still be able to
browse to the server, but only what you have synced will show up.
 
L

Lem

Aaron said:
There isn't one. Server is gone.

I have zero knowledge about using domains, but if the files are on the
local hard drive, and are not encrypted, they are accessible -- one way
or another.
If you really can't take ownership
(http://support.microsoft.com/kb/308421/en-us) then how how about
booting with Knoppix, Bart's PE, or similar, and just grabbing them that
way?
 
A

Aaron

because there isn't just a copy of the files on the hard drive. if there
were it'd be easy :)

open up windows\CSC on your computer, it's just a bunch of hashed files...
there's a table of contents somewhere that puts it all together. I'm going
to need a real hack to get this going.
 
L

Lem

Aaron said:
because there isn't just a copy of the files on the hard drive. if there
were it'd be easy :)

open up windows\CSC on your computer, it's just a bunch of hashed files...
there's a table of contents somewhere that puts it all together. I'm going
to need a real hack to get this going.
Well, I said I had zero knowledge ...
 
B

Brian A.

I've had a look around and don't see anything on how to recover a connection
or the folder for editing. I find all sorts of ways to see ther files as you
mentioned, but that's it. Perhaps I've passed by the info or I am just not
seeing it. Have a look at this ggogle search, maybe it will help you get
started at least in a positive perspective.
http://groups.google.com/groups/search?hl=en&q=edit+cached+offline+files&qt_s=Search

--

Brian A. Sesko { MS MVP_Shell/User }
Conflicts start where information lacks.
http://basconotw.mvps.org/

Suggested posting do's/don'ts:
How to ask a question: http://support.microsoft.com/kb/555375
 
A

Aaron

Because they aren't on the computer as files. It's just a big cached file
and it has a descriptor somewhere that keeps it all straight. There isn't a
1-to-1 directory tree on the computer
 
M

Mike Matheny

How in the heck was he able to log on with cached credentials for 8 months!!
The default is 10 logons!!

--

Mike Matheny

Views expressed herein do not reflect or represent
my employer in any way.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top