Hello. Each night we get alerts on one of our servers regarding the Manual cleanup required: 'Troj/DocDl-JUL' at '\\.\GLOBALROOT\Device\HarddiskVolumeShadowCopy502\$Recycle.Bin\S-1-5-21-3056629150-3169307162-898261543-19240\$R3TNF8J.doc'. I checked the events and each time it gets cleaned up but it's becoming an annoyance more than anything else. Does anyone have any suggestions on how to prevent these alerts from coming in to Sophos Central management console? Adding in, we are not going to turn off VolumeShadowCopy on the server.
Hello mburkhart,
always the same file name? Then deleting it from this user's Recycle Bin should do the trick.
Christian
QC each night it comes from one of our servers that runs the shadow copy backups. We tried searching for the file to delete but cannot find it. Just an inconvenience at this point more than anything else.