Home / Case Studies / Windows Says the Device Is Working Correctly
Filesystems and Partitions · case file

Windows Says the Device Is Working Correctly

An osteopath in Twickenham keeps patient correspondence, scanned referrals and practice accounts on a Toshiba 1TB external. Windows insists there is nothing wrong with it. Device Manager reports the device as working correctly, it appears in Disk Management at the right size, and every attempt to open it produces an error instead of a folder. He wanted to know how both of those things could be true at once.

External DriveCorruption / Filesystem
// the job in four lines
MediaA Toshiba 1TB external listed by Device Manager as healthy and shown at its full capacity, with nothing on it that will open.
What was reportedToshiba 1TB external drive, Windows reports the device is working correctly, drive visible at the right capacity, no files can be accessed, practice records wanted, owner asking what is actually required.
Fault classLogical. The hardware was in order, which is what Windows was reporting: the drive spun, identified itself and read normally. The volume's own structures were damaged, so there was nothing for Windows to open even though there was plainly something to see.
On the benchRead behind a hardware write blocker with the check-disk and format prompts refused, imaged on DeepSpar behind PC-3000 UDMA in one pass, the volume parsed in R-Studio from the image, the damaged master file table rebuilt from its mirror and from surviving records, documents carved by content signature where entries were beyond repair, everything validated by opening it and written to fresh media.
// reading the fault

Reading the fault

Device Manager is talking about a different thing. Its report covers the device: is there a disk, does it respond, is a driver loaded. All three were true. It has no opinion whatever about whether the filesystem written on that disk makes sense, which is where the failure actually was.

Two layers, two answers, and only one of them was bad. The lower layer is the drive and it was healthy. The upper layer is the volume, a structure written onto the drive that says where every file begins and ends. Damage that and you get precisely what he had: a device in perfect health with nothing readable on it.

Windows has one suggestion for this and it should be declined. The check-disk tool writes its repairs straight onto the disk, and where it cannot make sense of a record it discards it. On a volume with damaged structures that regularly converts a full recovery into a partial one, and there is no way to reverse it afterwards.

The right approach is to copy the disk and argue with the copy. Once an image exists, the master file table can be rebuilt from its mirror, tested, discarded and rebuilt again a different way if the first attempt is unconvincing. None of that touches the original, which sits in a drawer throughout.

// bench work

Bench work

The drive went behind a hardware write blocker before it was connected to anything capable of offering to repair it. It profiled as healthy: firmware normal, defect list short, full read speed across the surface. It was imaged on DeepSpar behind PC-3000 UDMA in one pass and the original set aside.

R-Studio parsed the volume from the image. The master file table was damaged in its first region and its mirror had survived, which made the rebuild straightforward for the majority of the tree. Records that could not be reconciled were left alone and the files behind them recovered by content signature instead. Correspondence, referrals and account files were opened and checked before the set was written to fresh media.

// what went back

What went back

The practice records came back complete, including the scanned referrals he had been most concerned about, and the folder structure was preserved so that the filing made sense afterwards.

One drive, £300 + VAT. Nothing was opened, nothing was soldered and no donor part was needed, so this was logical work and no fix, no fee applied in full, with the invoice following the recovery rather than preceding it.

When the machine says the drive is fine

Believe it about the hardware and ignore it about the files. A healthy device report means the drive is answering, which is genuinely useful information, and it is why this kind of job usually ends well. Refuse the offer to scan and fix the drive. Refuse the offer to format it. Do not run a partition tool, and do not let anything write to the disk while you work out what to do, including third-party recovery software that saves its results back to the same drive. The volume can be rebuilt from a copy as many times as it takes, but only while the original is still untouched.

Reading this and recognising your own drive? Every job on this page started the same way. Examining the media costs nothing, the examination closes 2 working days after the parcel is booked in and not sooner, and what comes out of it is a single figure in writing that then stays where it was put. A finished single-drive recovery leaves here 2 to 4 working days after that. Payment follows one published sentence: no fix, no fee all jobs except electronic and mechanical failures, chip level work, DVR and Forensic jobs. Deletions, damaged file systems, lost partitions, firmware and service-area repair therefore all carry the guarantee. Physical work does not: a drive opened under laminar flow, a repair to a board or to a memory chip, liquid or fire damage. Those take 50% of the quoted figure before anything starts, and the remainder falls due only if your files come back. The figures themselves are short: a memory card, a USB stick or a pen drive is £250 + VAT, any one hard drive or SSD including NVMe is £300 + VAT, and arrays, NAS boxes and servers are quoted from £500 + VAT. Recorder disks, BitLocker volumes and forensic work are quoted apart from those and settled in advance. Where the storage is bolted inside a laptop, a tower, a Mac or a server, free it and post the bare unit: taking machines apart is not work this lab does, and flash soldered flat onto a mainboard, which is how Apple Silicon Macs and a good many thin ultrabooks are built, cannot be taken in at all. Nor can phones or tablets. If it unscrews or unplugs, it is our sort of job. Send it tracked and insured to Guildford Data Recovery, Building 2, Ground Floor, Guildford Business Park, Guildford GU2 8XH, or book a courier yourself; the Guildford reception also takes devices in person, Mon–Fri 9:00am–5:30pm. Nobody collects, and there is no counter in Bracknell to call at. Freephone 0800 689 0668. Packing notes and the shipping form live here.
Start a free diagnostic

These files are written up from genuine enquiries taken from households and businesses in Bracknell, across Berkshire and Surrey and into London, with names, firms and anything else identifying stripped out. Each one sets down how the fault was reasoned through, the method it actually needed and the equipment it was worked on. One of them is a job that was turned away, which belongs here as much as the rest of them.

// nearby on the shelf

Three more files along the same lines

See every case file →

Is this your drive as well?

Examining it is free and takes 2 working days from arrival, the figure goes to you in writing and does not move afterwards, and a logical fault carries no fix, no fee. Start online or ring the freephone.