
- Why Regular Data Recovery Tools Can’t Restore Files from RAID
- Key Information About the NAS Lenovo ThinkSystem SR860 Mission-Critical Server
- How to Remove Hard Disks from Your NAS and Connect Them to a PC
Why Regular Data Recovery Tools Can’t Restore Files from RAID
Conventional hard drives store user data by writing it sequentially across the disk surface, which means an entire file is typically located on a single drive. In contrast, when data is written to a RAID array, each file is split into multiple fragments. These fragments are then distributed and written in sequence across all the drives in the array. Depending on the configuration, fragment sizes can range from 2 KB to 2 MB, so every file is physically stored across several disks at once.
This approach significantly increases read and write performance — after all, writing two halves of a 1 GB file to two drives simultaneously is much faster than writing the full 1 GB to a single disk. However, this same mechanism makes file recovery far more complex.
Different RAID levels use different methods to distribute and protect data. On top of that, manufacturers like Lenovo often add their own proprietary structures and variations. As a result, data can be written to disks in many different formats, and each requires a specific approach during recovery.
Are there any specific network security measures to implement for safeguarding NAS Lenovo ThinkSystem SR860 Mission-Critical Server devices against data loss?
Yes, there are several network security measures that can be implemented to safeguard NAS Lenovo ThinkSystem SR860 Mission-Critical Server devices against data loss. Here are some key measures:
- Access Control: Implement strict access control policies to ensure only authorized personnel have access to the server. Use strong passwords and enforce regular password changes. Consider implementing multi-factor authentication for added security.
- Firewall: Configure and maintain a firewall to control incoming and outgoing network traffic. This helps prevent unauthorized access and protects against potential attacks.
- Encryption: Enable encryption for data in transit and at rest. This ensures that even if the data is intercepted or stolen, it remains unreadable without the encryption key.
- Regular Updates and Patching: Keep the server's operating system, applications, and firmware up to date with the latest security patches. Regularly check for updates and apply them promptly to protect against known vulnerabilities.
- Intrusion Detection/Prevention System (IDS/IPS): Deploy an IDS/IPS solution to monitor network traffic and detect any suspicious activity or potential attacks. This helps in identifying and mitigating threats in real-time.
- Backup and Disaster Recovery: Implement a robust backup strategy to regularly back up critical data stored on the NAS server. Store backups in a separate location to protect against data loss due to hardware failure, natural disasters, or cyber-attacks.
- Network Segmentation: Segment the network to isolate the NAS server from other systems and devices. This limits the potential attack surface and prevents lateral movement of threats within the network.
- Logging and Monitoring: Enable logging and monitoring on the NAS server to track and analyze any unusual activities or security incidents. Implement a centralized logging solution to consolidate logs from multiple devices for easier analysis.
- Antivirus/Antimalware: Install and regularly update antivirus and antimalware software on the NAS server to detect and remove any malicious software that may compromise data integrity.
- User Education and Awareness: Train users on best practices for data security, such as avoiding suspicious emails, not clicking on unknown links, and recognizing social engineering attempts. Regularly educate users about the importance of data protection and the potential risks associated with mishandling sensitive information.
It is important to note that these measures should be implemented as part of a comprehensive security strategy, tailored to the specific needs and requirements of your organization.
How to Remove Hard Disks from Your NAS and Connect Them to a PC
Although the NAS ThinkSystem SR860 Mission-Critical Server can be accessed over the network, you still need to remove its hard disks and connect them directly to a Windows PC. Only then can the recovery software properly scan and analyze the drives. Follow these steps:
-
Power off the NAS and disconnect it from the power source.
WARNING! Before removing any drives, carefully read the device manual. Improper actions may damage both the NAS enclosure and the hard disks in the RAID array.
-
Remove the hard disks one by one, gently sliding each drive out of its slot. Remember that hard disks are highly sensitive: any impact or drop can cause serious physical damage.
-
Label each hard disk according to its position inside the NAS. The order of the drives is crucial for correct RAID reconstruction.
-
Connect the drives to your computer. In this video, we explain which ports you can use to connect hard disks and what to do if your PC does not have enough free connectors.
Go to view
Step-by-Step Data Recovery with Hetman RAID Recovery

This program restores data from damaged RAID arrays and is fully compatible with Lenovo ThinkSystem SR860 Mission-Critical Server. Each hard disk in the array contains technical metadata describing how files were written. When launched, Hetman RAID Recovery analyzes this metadata, automatically reconstructs the damaged array, and provides access to its contents. After that, you can browse the recovered disk and save your files. The program can also restore files that were accidentally deleted from the network drive.
How to recover data from a Lenovo
ThinkSystem SR860 Mission-Critical Server has 24 HDD slots, and it supports the following array types:
- RAID 0;
- RAID 1;
- RAID 5;
- RAID 6;
- RAID 50;
- RAID 60;
- JBOD;
NAS supports:
- exFAT, VFAT, FAT 12 / 16 / 32;
- NTFS / ReFS;
- APFS / HFS+;
- Ext2 / 3 / 4 / ReiserFS / XFS / UFS / ZFS / Btrfs;
- VMFS / HikvisionFS;
How to Safely Recover Data from Disk Images
This utility allows you to create a complete copy of a disk and work with the disk image instead of the physical drive. This approach helps protect your data from:
- Overwriting during the recovery process;
- Additional data loss caused by bad sectors;
- User errors.
To create a disk image, follow these steps:
-
Ensure you have enough free space to store the image. Its size will typically match the size of the original disk.
-
In the main window, select the target disk and choose Tools - Save Disk. You can also select multiple disks if needed.
-
When the Image Creation Wizard opens, select whether you want to save the entire disk or only a specific region. Adjust the settings and click Next.

-
Choose the directory where the image will be saved. You may select any available disk connected to your PC or upload the image via FTP.

Where Are the User’s Files Actually Stored?
The Lenovo ThinkSystem SR860 Mission-Critical Server network-attached storage keeps LifeLine operating system files on a separate RAID 1 (mirrored) array. Usually, all NAS systems create several volumes on every hard disk, and the first of them takes up to 2 Gb of space. This is where operating system files are stored. Other volumes are united into a RAID array where user’s data is written.
RAID Recovery Software: Detailed Comparison
| Product | Operating system | RAID controller support | Supported file systems | Virtual RAID controller support | Data recovery from damaged RAID | File preview |
|---|---|---|---|---|---|---|
| Hetman RAID Recovery | Windows, Linux, MacOS | Yes, over 100 controllers | FAT, exFAT, NTFS, ReFS, APFS, HFS+, Ext4, Ext3, Ext2, ReiserFS, Btrfs, VMFS, Hikvision, XFS, UFS, ZFS | Yes | Yes | Yes |
| DiskInternals RAID Recovery | Windows | Yes, over 10 controllers | FAT, NTFS, Ext2/3/4, HFS+ | No | Yes | Yes |
| R-Studio | Windows, Mac, Linux | Yes, over 20 controllers | FAT, NTFS, Ext2/3/4, HFS+ | Yes | Yes | Yes |
| UFS Explorer RAID Recovery | Windows, Mac, Linux | Yes, over 100 controllers | FAT, NTFS, Ext2/3/4, HFS+ | Yes | Yes | Yes |
| EaseUS Data Recovery | Windows | Yes, over 20 controllers | FAT, NTFS, Ext2/3/4, HFS+ | No | Yes | Yes |
| ReclaiMe Free RAID Recovery | Windows | Yes, over 100 controllers | FAT, NTFS, Ext2/3/4, HFS+ | Yes | Yes | Yes |


Yes, it is possible to recover data from a NAS Lenovo ThinkSystem SR860 Mission-Critical Server device that has been affected by a virus or malware infection. However, the success of data recovery depends on various factors such as the severity of the infection, the type of virus or malware, and the steps taken to mitigate the infection.
Here are some general steps you can take to recover data from an infected NAS device:
It is important to note that prevention is always better than recovery. Regularly updating the NAS device's firmware, using strong passwords, implementing security best practices, and maintaining up-to-date antivirus software can help mitigate the risk of virus or malware infections.