I have searched so many forums for the answer to my issue. I am working strictly in Exchange 2010 (Standard) running as a virtual maching (VMWare VSphere 4.1) with the following hard drive configuration. C: drive is OS (windows 2k8 R2 -64 bit) and base Exchange install. E: drive is database holding both public and private databases. F: drive holds log files. Now, I have no issues with space on the database drive or log drive, which most forums seem to focus on. I also run backups using Symantec Backup Exec 2010 R2 and get good full backups. The issue I have is that I have had to expand the C: drive 3 times now due to it getting full. When I try to search for large files or even check the file size of the visible (and hidden) folders it never comes up to the amount of used space represented by the OS. For example, if I show the properties of all files/folders on the C: drive it comes to 20.7GB with a 12GB swap file. But the C: drive shows 100GB used. I am not sure if it is landing in the System Volume Information folder or where else. Regardless it is a continuing problem. I have never been able to determine where these "ghost" files are or what is causing the utter constant expansion of the C: drive used space. For clarification, our private database size on E: is 128GB, log files negligible as backup keeps them to a minimum. HELP!

Have you tried loading WinDirStat http://windirstat.info/ on the system to see what the makeup of the files is? is your page file set to drive C and set to let windows manage it? Troy Werelius www.Lucid8.com

Hi Troy, Thanks for pointing out that tool. I had used a rather weak version of Treesize, but Winstat more quickly identified my issue. It was the IIS website logs located on C:\inetpub\logs\LogFiles\W3SVC1... about 47GB of weblogs. I appreciate the quick response.

If you right click the drive and go to properties, shadow copies tab, do you see shadow copies?James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Yes, I did check shadow copies... but have those restricted to a certain size. Troy's suggestion to use WinStat showed my issue which was web log files. For some reason, when performing a regular properties check of the C: drive, It did not include the log folder as I had never opened it to gain permissions to view it. Found 47GB (13 months worth) of web log files. And relief! Thank you for your response.

NO and check what James said as well regarding the Shadow Copy since we had that happen here in the past so that could definitely be the issue http://technet.microsoft.com/en-us/library/ee923636(WS.10).aspx Troy Werelius www.Lucid8.com

Ahh cool beans, glad I could help. WinDirStat is a cool little free application for sureTroy Werelius www.Lucid8.com