SDelete on EFS encrypted folder displaying weird behavior, filling up drives when no clean drive parameter specified

Tan, Yong Kee 6 Reputation points
2021-04-01T04:23:51.48+00:00

C:\Users\user>sdelete -p 3 -r -s C:\temp\ToDelete

SDelete v2.04 - Secure file delete
Copyright (C) 1999-2019 Mark Russinovich
Sysinternals - www.sysinternals.com

SDelete is set for 3 passes.
C:\temp\ToDelete\ForDeletion.txt...deleted.
Zeroing free space to securely delete compressed files: 0%
Could not determine disk cluster size:
The system cannot find the path specified.

Zeroing free space to securely delete compressed files: 0%
Could not determine disk cluster size:
The system cannot find the path specified.

Cleaning free space to securely delete compressed files: 11%


Running Sdelete to delete an EFS encrypted folder on a VM environment leads to this weird behavior where it tries to clean free space.

Question: is that the normal behavior of SDelelete? I wouldn't want this to happen in production, where SDelete fills up the virtual drive and I have no control over it.

Do note that my input is sdelete -p 3 -r -s C:\temp\ToDelete

There's no parameter to clean the drive supplied in the command.

In contrast, running SDelete to delete a folder that's not EFS encrypted will have a normal behavior.


C:\Users\user>sdelete -p 3 -r -s C:\temp\ToDelete

SDelete v2.04 - Secure file delete
Copyright (C) 1999-2019 Mark Russinovich
Sysinternals - www.sysinternals.com

SDelete is set for 3 passes.
C:\temp\ToDelete\ForDeletion.txt...deleted.
C:\temp\ToDelete\ForDeletion1.txt...deleted.

Files deleted: 2
Directories deleted: 1


Any help/advice would be appreciated.

Sysinternals
Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
1,107 questions
{count} vote