How to recover user data (Windows) from hard drive?

January 4, 2006 3:17 PM

DataRecoveryFilter : Computer died. Internal hard drive saved and put in an external usb enclosure (Maxtor). Tried to read user data (Documents and settings\user): Access denied. Windows Xp. Don't have a computer in which I can put the saved harddrive (and boot from). What can I do?

I've looked for answers both here and on google, but all I found are zillions of examples where people want to recover erased data (or data from dead hard drive). [Perhaps I am not using the right keywords in my search.] I'm thinking that, if I could boot from the external drive, I might change permission on the folders and be set. Can this be done? Or something equally "easy"?

posted by aroberge to computers & internet (22 comments total)

Can you boot into the working computer using a Knoppix CD and move the files from the bad drive onto the good drive?
posted by k8t at 3:24 PM on January 4, 2006

Can you boot into the working computer using a Knoppix CD and move the files from the bad drive onto the good drive?

I've never used linux, even though I plan to soon. So, I don't know if it's possible.But, for now, I'd prefer use a Windows-based solution if I could.
posted by aroberge at 3:29 PM on January 4, 2006

It is really easy - you put knoppix on a boot cd and it looks so similar to Windows that it won't be a problem. It'll take an hour MAX to get it onto a boot CD and to move the files.
posted by k8t at 3:35 PM on January 4, 2006

Plus, Knoppix's menus look JUST like Windows.

You see the two mounted hard drives. Based on the information in them, you know which is the good and which is the bad. Find the files on the bad, drag them onto a folder on the good. Easy.
posted by k8t at 3:35 PM on January 4, 2006

How to use Knoppix to rescue windows
posted by k8t at 3:37 PM on January 4, 2006

Thanks k8t; I will see if I can try later tonight and report the results here.
posted by aroberge at 3:42 PM on January 4, 2006

If memory serves, you can boot a Windows PC using a Windows 2000 install disc and get around the user protection. I actually did this years ago, but damned if I can remember what I did...I got all the info via google, tho, so I imagine it's still out there.
posted by nevercalm at 3:46 PM on January 4, 2006

Just to second k8t - Knoppix, or many of these live cds (if you are unfamiliar, Knoppix is the best start) is the best and fastest way to go.

I cannot count how many times I've done data recovery this way.
posted by zerokey at 3:56 PM on January 4, 2006

I used Knoppix to rescue my files when Windows would not boot. I tried everything but using the websites for Knoppix and the Knoppix Hacks book, I managed to save just about everything. The book has a copy of an older version of Knoppix but it worked fine. You can buy the latest cd on lots of websites for about $5 or download it for free (It took me 7 hours and I have a high speed connection). The book also has a few errors such as trying to delete files from an NTSF. But that was explained on the knoppix.net site.
posted by nimsey lou at 4:02 PM on January 4, 2006

I experienced a catastrophic Windows failure in the last month and my account was passworded, so even after reinstalling Windows it wouldn't let me into my old stuff. I had irreplaceable stuff on the drive (sentimental value...) so it needed rescuing.

Knoppix came to the rescue. It is incredibly easy to use for someone who has never used Linux before as it will auto-detect pretty much all your hardware and boot into a Windows-like GUI. I ran just Knoppix for 2 weeks before I could be bothered to reinstall Windows for poker.

If you are intending to move files to be rescued to another partition/drive, it will need to be FAT32 or FAT rather than NTFS for safety. It also has CD/DVD writing software included if you have a spare writer.

Oh, and remember to back stuff up from now on. I will ;)
posted by 999 at 4:23 PM on January 4, 2006

What do you mean "Access Denied" ? You can read all files, but the files in the user directories ?

If that is the case, why don't yout try to boot from the old internal hard drive attached to the new computer? This way you start your old windows and can change the permissions or transfer the files. (But you probably already thought of that, or it is not possible because of the nature of the damage, right....)

Another reason why access might be denied is not the file permissions, but data encryption. Even the Admin cannot read encrypted user directories, I have heard. But I also heard of a workaround. You have to create a user with the same name as the old user's name, then the old passphrase works, or something like that. Maybe this gives you enough information to google for the solution. I am not a windows guru, the person I ask can be reached in ca. 10 hours.....

I hope you solve your problems sooner.
posted by mmkhd at 4:24 PM on January 4, 2006

mmkhd: Yes, I can see all the files, but the user files. My current computer can only boot from the hard drive or the CD drive. (I tried changing the drive order so that it would read from the usb first [can not set it to boot from it] but the computer just hung.) I have the same user name and password on *this* computer as on the old one, but still it doesn't work.

I'm in the middle of downloading the knoppix cd (20 minutes estimated remaining time) and will see what that does. I'd love to be able to use knoppix to simply change permissions; failing that, to copy the files on the new computer.
posted by aroberge at 4:31 PM on January 4, 2006

Oops, sorry for not reading that you do not have a computer you can use to boot from :-(.

This way the same-user-name hint, probably doesn't work for you either, since you might not have enough permissions. Or do you have admin previleges?

All the knoppix hints won't help you either, if you cannot boot from external media. Can you change the booot order in the bios of the computer that you use? This way you might be able to boot from the usb enclosure or from a knoppix cd. If you are not familiar with knoppix, you might try a cd-bootable windows version. Google for "bartpe".
posted by mmkhd at 4:33 PM on January 4, 2006

Your answer and my corrective comment overlapped :-)

What about opening the new computer and attaching the old hard drive as a second hard drive?

Or even putting the old hard drive in the new computer and the new hard drive in the external enclosure ?


Got to go too sleep soon .. it's 1:40 am here.
posted by mmkhd at 4:38 PM on January 4, 2006

Can you not just right-click the folder in question, go to properties, Security, Advanced, Owner tab, and change the owner to your new account (replacing on subdirs and objects)?

Shouldn't take long.
posted by coriolisdave at 4:55 PM on January 4, 2006

I bet you've replaced the disk and re-installed the operating system, right? Well, that creates a new SAM, so the permissions on the old device don't map to user identities on the new one. You need to Take Ownership of the files, in order to manipulate them.

Knoppix will work, but fixing the ACL will work even more easily.
posted by majick at 4:57 PM on January 4, 2006

snap!
posted by coriolisdave at 5:03 PM on January 4, 2006

Here I was, all about to make a post about how you don't need Knoppix, and you don't need to boot from the old drive, because Taking Ownership is definitely the right answer...

And I'm beaten to it twice. Oh well. Anyway, this is the easiest, safest, and fastest way to do what you want.
posted by CrayDrygu at 5:19 PM on January 4, 2006

Taking Ownership just worked. Thanks everyone!
posted by aroberge at 5:47 PM on January 4, 2006

Hope you finished downloading that Knoppix file. Keep it. You never know what can happen to you or a loved one. :)
posted by nimsey lou at 5:56 PM on January 4, 2006

I used to work at a Help Desk and used Knoppix WEEKLY to recover data.

(not without making people feel guilty about not backing up their data tho.)
posted by k8t at 6:47 PM on January 4, 2006

nimsey lou: I will keep Knoppix.

k8t: I had backed up my data on a ximeta drive which died inexplicably as well a few months ago. But I am guilty of not having done anything to get a replacement for it...
posted by aroberge at 7:09 PM on January 4, 2006