My work PC was reset and Windows 11 was reinstalled by IT. I didn't realize the reset would erase the previous accounts and files, and there may be important documents left behind by former employees. I haven't really used the new Windows account yet. Is there any realistic chance of recovering the old data, or could IT restore it from a backup or system image?
4 Answers
The chances depend heavily on how the drive was wiped and what type of storage it uses. An encrypted drive, such as one protected by BitLocker, is generally unrecoverable after a proper reset. On a traditional hard drive, a professional forensic recovery service might recover fragments if the data wasn’t overwritten, but it can be expensive. On an SSD, TRIM usually makes recovery extremely unlikely.
The new account probably doesn’t matter as much as continued disk activity. Every update, installation, and saved file could overwrite recoverable data, so stop using the machine and let IT assess it. Don’t run consumer recovery tools on a corporate computer without approval.
IT should check whether the old files exist in network shares, cloud storage, centralized backups, or deployment images. If there was no backup and the reset fully erased the drive, the files may be gone, but only your IT team can confirm what recovery options and backups are available.
Contact your IT department immediately and avoid using the computer any further. They may have backups, server copies, or a pre-wipe system image. Since it’s a company-owned device, they should handle any recovery attempts rather than having you install recovery software yourself.
I’ll let them know right away. The reset was treated pretty casually, and I’m worried some files from previous employees weren’t backed up.