Why Some Deleted Files Are Not In The Windows Recycle Bin

See why the Windows Recycle Bin doesn’t capture ALL file deletions and how Undelete protects your network shares

“The user deleting from a network share means they are permanently deleted, they’re gone. BUT, not now that we have the Recovery Bin from Undelete,” Spencer Allingham, Engineer


Spencer Allingham, Engineer


This video is the 2nd in a series of 7 videos by a top Condusiv engineer that each demonstrate different technical features and benefits of the software. In this video, our engineer covers how to recover deleted files from network shares and you will see why some deleted files are not in the windows recycle bin, and how the Undelete software from Condusiv Technologies can protect your network shares.


00:00 Spencer Allingham: Hello there. In the last video I mentioned that whilst the Windows Recycle Bin is really very helpful. And I know it’s helped thousands and thousands of users over the years, the reason why people buy our Undelete software is that because basically the Recycle Bin doesn’t capture all deletions. So I thought I’d demonstrate a couple of those situations here and really show you how the Undelete software can help prevent those situations where you lose files when they get deleted. So on the screen, I’ve got a couple of virtual machines. On the left here I have a Windows 10 machine, so that’s our client machine, our user machine. And on the right here, I’ve got a Windows server, which will be our file server for the purposes of this demonstration. And on here, I’ve got a shared folder, shared on the network. And in here I’ve got some folders containing a number of case studies of our software and so on. So this is scenario number one. If I delete a case study, normally on the server, what happens? That deletion goes into the Windows Recycle Bin and I can get it back, which is great. Lots of people have used that. I can restore it back to its original location. And there it is. I’ve got my file back. Super helpful, really, really good.

01:28 SA: But if a user, let’s open up that folder, so he’s accessing that network share from his machine. There it is, there’s our shared folder, and so now we’re in the same folder on this machine. Now, if we delete it from here, the message is slightly different. Look at this, “Are you sure that you want to permanently delete this file?” If the user deletes the file from the network share, guess what? It’s gone, it’s deleted. And more importantly, it’s not in the Recycle Bin on the server or the user’s laptop. That file is gone. Do you use network shares in your workspace? A lot of people do. So how do we get that file back? Well, it means as an administrator, you’re likely gonna have to go and find that file in the back-up, which is a nuisance. It interrupts your day. The user probably can’t continue until he gets that file back, otherwise he wouldn’t be asking you for it. So it’s a huge disruption. So let’s install the Undelete software and see how things could be a bit different. So let’s see, I’ll install it here on the server first. Let’s run the installer. It’s very quick and easy to install as you’ll see.

03:14 SA: Here we go. So next, yes, I accept the license agreement. Everybody reads those, right? [laughter] I want to enable Undelete on all the drives. That’s good. And I’m gonna install it to the default location. And there we go, installed. So it’ll take just a moment or two. One thing you will notice, I’m installing it on a server, but what I’m not having to do is reboot the server once the install is completed. And that’s one of the nice features of the software. If you’re running a server that’s got your SQL database on, for example, you really don’t wanna be rebooting that just to install a piece of software. With Undelete you don’t have to. No reboots are required. And I’m not going to register this ’cause I’m just demonstrating it so that’s it. The install is done, very quick, very simple. Job done.

04:10 SA: So let’s go back to our shared folder and as a user, let’s go ahead and delete something else. Oh, and you’ll notice that, that Windows Recycle Bin now has gone. It’s been replaced with the Undelete Recovery Bin. So in the V-locity folder, I have a whole load of case studies here. That would be a nuisance if it got deleted. So that’s what our user was going to do. Let’s go into the same folder, here we go. Here’s all our case studies. So let’s go ahead and delete them. So still get the same message from Windows, “Are you sure that you want to permanently delete these 21 items?” And I’m sure users really pay attention to what the question is actually saying all the time. [laughter] So yes, I wanna delete those. And now they’ve gone.

05:06 SA: Now, as you saw before, the user deleting in from a network share means they are permanently deleted, they’re gone. But not now that we have the under the Recovery Bin from Undelete. So I can open the software up and I’ve got a helpful tree on the side here where I can find my shared folder. And all of those case studies, there they are, all there. So I can say let’s recover all of that data and let’s put it back to their original location. Okay, job done. All those files are back. Now, wasn’t that convenient? I mean, just as convenient as the Windows Recycle Bin. But even more convenient because it was actually able to recover those files that have been deleted from the network share by the user. Now, I know nobody likes to think that that happens, but believe me, it does. Now, similarly, if you delete files from the command prompt, they don’t go into the Windows recycle bin. But they would be captured by the Undelete Recovery Bin.

06:19 SA: Basically, the way it works is we use a very thin storage filter driver that gets inserted into the Windows Storage stack that has the ability to capture all deletions on a machine regardless of how it occurs, whether it’s done from the command prompt, whether it’s done by a remote user accessing the network share or if it’s deleted from within some applications. And ordinarily it wouldn’t go into the Windows Recycle Bin but Undelete can capture them all. So I hope that’s been useful. And I know we saw a quick look at the Windows, I’m sorry, the Undelete interface. Let’s have a look at that again, let’s make that full screen. It’s very intuitive, it uses a Ribbon, just like a lot of other Microsoft software, especially things like the Windows File Explorer. Very simple to use. You can recover files, empty the bin, just like you can with the Windows Recycle Bin. You can go into Tools and recover deleted files. So that’s files that even perhaps have been deleted before you installed the software, that can be quite helpful. You can wipe free space, you can modify the settings, have an inclusion and exclusion list. And I’ll go into some more of these features in a little bit more detail in the next few videos.

07:43 SA: But for now I hope this was useful. If you want to know more, if you want to try the software please jump onto our website at condusiv.com and you can request fully featured 30-day trial way. Try it for yourself, see if it’s something that would be useful for you. So I hope this has been useful and I’ll look forward to seeing you in the next video. Thanks. Take care.

Check out Undelete’s powerful Recovery Bin for yourself on your file servers.