My work PC was reset and Windows 11 was reinstalled by IT. I didn't realize the reset would erase the previous user accounts and files, and there may be important documents that weren't backed up by former employees. I haven't used the new account yet. Is there any realistic chance of recovering the old data, and could IT restore it from a backup or system image?
4 Answers
Recovery depends on the drive and how it was wiped. If BitLocker was enabled, recovering the old files is generally not possible without the encryption key. An unencrypted hard drive might have a small chance, but professional forensic recovery can be very expensive. SSD recovery is even less likely because TRIM may have permanently cleared the deleted data.
Contact your IT department immediately and stop using the computer. They may have backups, server copies, or a system image from before the reinstall. Since it’s a company-owned device, they should handle any recovery attempts rather than installing recovery software yourself.
The best-case scenario is that IT made a backup or disk image before reinstalling Windows, which is normally part of a proper equipment-reset process. Ask them to check company servers, cloud storage, backups, and old user-profile archives. Don’t keep logging in, downloading files, or saving anything to the PC because that can overwrite recoverable data.
If no backup or image exists, the odds are unfortunately poor. A reset followed by a Windows installation can overwrite parts of the old data, and modern SSDs often make deleted-file recovery nearly impossible. Only IT or an approved data-recovery specialist should examine the drive, especially because it contains company information.
I know I should have checked first, but IT treated it casually and didn’t explain that everything would be erased. The files mostly belonged to former employees, although there could be a few important documents that weren’t backed up.