top of page

Windows Shadow Copies


Most recent versions of Windows both automatically create shadow copies of the data on the PC's hard drive and allow the user to create a new one that will be saved.

The Windows 7 operating system on my home PC contains copies which were created yesterday, a week ago, and also a month ago. It's possible to review these versions by going into Windows Explorer, and selecting a drive letter. Right click and select Properties. Just click on the 'Previous Versions' tab and you'll see the option to open and browse in the shadow copies. Apparently the ability to browse through these shadow copies is available in Windows 7 and Windows 10, but not Windows 8.

If you want to create a shadow copy, go to Control Panel . . . System and Security . . . System . . . System Protection, and select 'Create'.

Both Sharepoint and SQL Server make use of volume shadowing.

Knowing the basics of 'Windows Volume Snap Service' is essential for anyone performing data collection.


Sean O'Shea has more than 20 years of experience in the litigation support field with major law firms in New York and San Francisco.   He is an ACEDS Certified eDiscovery Specialist and a Relativity Certified Administrator.

​

The views expressed in this blog are those of the owner and do not reflect the views or opinions of the owner’s employer.

​

If you have a question or comment about this blog, please make a submission using the form to the right. 

Your details were sent successfully!

© 2015 by Sean O'Shea . Proudly created with Wix.com

bottom of page