I don't even know where to start. A user contacts me and says today that she worked on a powerpoint presentation all day yesterday and clicked save throughout the day. Closed the file after clicking save and went home. She came in today and said the file reverted to a previous version. When you look at the last modify date it is Jan 16th. The file appears in the office file recovery folder but it too is the version from Jan 16th. However it's dated Feb 12th 8:34am.

So it proves she opened it but what the ... happened? Is this even possible? I guess anything is possible but how do you figure something like out.

It's office 365 (2013 Pro plus) running on a windows 2008 r2 terminal server with Citrix xenapp 7.6. The file is stored on a server 2012R2 file share.

I didn't have shadow copies turned on but when ahead and turned it on starting at 7AM to run for 12 hours every 2 hours. I gave it 15Gb.

Thanks,
John Long

• Edited by jlongjr 13 hours 45 minutes ago