ReFS volume recovery

A RAW ReFS volume needs source preservation before salvage or repair changes its state.

ReFS is designed for integrity and resiliency, but storage faults, incomplete writes, controller problems, missing Storage Spaces members, or damaged metadata can still leave a volume offline, read-only, or RAW.

Understand the symptom

RAW is a mount-state symptom, not proof that every ReFS file is gone.

WHY

What is happening

Windows may identify the physical storage while failing to mount the ReFS namespace. The fault can sit in ReFS metadata, a virtual disk, a Storage Spaces layer, a controller, or unstable media. Microsoft refsutil salvage uses separate scan and copy phases and writes recovered files to another volume; it is not a reason to experiment on the only source before member health and layout are known.

What you may see

Symptoms that change the recovery path.

01

Volume appears as RAW

Disk Management sees capacity but Windows cannot expose the expected ReFS directory tree.

02

ReFS event errors repeat

Metadata, mount, integrity, or I/O events can identify the layer that stopped normal access.

03

Volume mounts read-only

ReFS may limit writes while data is still accessible, which calls for an immediate controlled copy.

04

Storage Spaces is incomplete

Missing members can make an otherwise intact ReFS volume unavailable through its virtual disk.

Protect the source

Actions that can make the situation worse.

01

Initialization overwrites identity

Creating a new volume can replace structures needed to recognize the original filesystem.

02

Repair can change metadata

Triage and repair operations are not substitutes for preserving failing devices first.

03

Long scans stress weak members

A full-volume pass can accelerate a disk that is already returning timeouts or I/O errors.

Do this now

Safe steps before evaluation.

01

Stop server and application writes

Pause virtual machines, backup jobs, deduplication, shares, and services using the affected volume.

02

Export the storage state

Record ReFS version, event logs, disk identifiers, virtual-disk health, and any Storage Spaces configuration.

03

Keep all members labeled

Preserve original bay order, removed disks, controllers, enclosures, and replacement attempts.

04

Use a separate recovery destination

Never direct salvaged files, logs, or working data back to the affected volume.

NEPFOSYS process

How a data-first evaluation proceeds.

01

Layered storage review

NEPFOSYS separates ReFS damage from virtual-disk, pool, controller, and physical-media faults.

02

Member preservation

Unstable devices are acquired individually before filesystem-level extraction is attempted.

03

ReFS extraction and validation

Recoverable files and directory structures are reconstructed to separate media and checked by priority.

A clear next step

Preserve the original device before another repair or recovery attempt.

Start a case with the exact symptoms, incident timeline, prior attempts, encryption details, and the files that matter most. NEPFOSYS will route the case to the appropriate DFW intake or nationwide mail-in path.

Start with a case review

Questions, answered

What customers ask before starting.

Should I format a RAW ReFS volume?

No. Formatting creates a new filesystem and can overwrite structures used to recover the original data.

Is refsutil salvage safe to run immediately?

It requires a separate working and destination path, but the source devices should still be assessed first when hardware or pool instability is possible.

Can ReFS corruption originate below the filesystem?

Yes. Storage Spaces, controllers, cables, enclosures, memory, and physical disks can all contribute to an inaccessible ReFS volume.

DFW local · Nationwide mail-in

Protect the device. Start with the facts.

Start my recovery case