Event ID 198 — Volume Recovery

Applies To: Windows Server 2008

You can use the wbadmin start recovery command or the Recovery Wizard in Windows Server Backup to restore a volume. When you restore a full volume, all contents of the volume are restored—you cannot selectively restore individual files or folders.

In addition, you can use a Windows Setup disc or a separate installation of the Windows Recovery Environment to perform a full server (all volumes) recovery.

Event Details

Resolve

Determine if recovery destination is corrupted

If the destination that you are recovering a volume to is corrupted, Windows Server Backup will not be able to perform the recovery. If you encounter this problem, perform the following general steps:

1. Wait for the recovery to complete.
2. In the event message, note the location that was used as the recovery destination and the event number.
3. In Event Viewer, review the details for the event, including error codes and any information about the volume, to look for a solution.
4. In the Windows Server Backup snap-in, review the details provided about the failure.
5. Run chkdisk /r on the volume to look for corrupted sectors.
6. After resolving any errors that you find in performing the steps above, re-run another volume recovery.

To perform a recovery or work with errors or events, you must have membership in Backup Operators or Administrators, or you must have been delegated the appropriate authority. To run chkdsk, you must have membership in Administrators, or you must have been delegated the appropriate authority.

Review event details in Event Viewer

To view event details in Event Viewer:

1. Open Event Viewer. Click Start, click Administrative Tools, and then click Event Viewer.
2. In the left pane, double-click Applications and Service Logs, double-click Microsoft, double-click Windows, double-click Backup, and then click Operational.
3. In the right pane, click the Details tab, and then click Friendly View.
4. Click event 198 the list and review the information.
5. Review error messages for the error codes, as described in "Review error messages in the Windows Server Backup snap-in."

Review error messages in the Windows Server Backup snap-in

To view error messages using Windows Server Backup:

1. Open the Windows Server Backup snap-in. Click Start, click Administrative Tools, and then click Windows Server Backup.
2. On the start page, under Messages, double-click the event for the failed volume recovery, click the Errors tab, and view the text under Message.

Find bad clusters

To determine if bad clusters exist on the backup destination:

1. On the computer that contains the recovery destination, open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
2. At the prompt, type: chkdsk /r. This command will look for bad sectors on the disk and recover any readable information. 

Recover volumes using the Windows Server Backup snap-in

To perform a volume recovery using the Windows Server Backup snap-in:

Before you begin, you should:

• Make sure that the computer that you are recovering volumes to is running Windows Server 2008.
• Make sure the external disk or shared folder that is hosting the backup is online and available to the server. Or, if you are using a backup on DVDs or removable media, make sure that the DVD drive or device is attached to your local server and online, and that all DVDs that contain the backup are labeled and available.
• Determine which volumes that you want to recover.

Note: You can also use the Wbadmin start recovery command to perform this task. For examples and syntax for this command, see https://go.microsoft.com/fwlink/?LinkId=93338.

1. Open the Windows Server Backup snap-in. Click Start, click Administrative Tools, and then click Windows Server Backup.

2. In the Actions pane of the snap-in default page, under Windows Server Backup, click Recover. This opens the Recovery Wizard.

3. On the Getting started page, specify whether you will recover volumes from backups stored on this computer or another computer, and then click Next.

4. If you are recovering volumes from backups stored on another computer, do the following, and then click Next:

   1. On the Specify location type page, specify whether the backup that you want to restore from is on a local drive or in a remote shared folder.
   2. If you are recovering from a local drive, on the Select backup location page, select the location of the backup from the drop-down list. If you are recovering from a remote shared folder, on the Specify remote folder page, type the path to the folder that contains the backup. In the folder, the backup should be stored at \\<RemoteSharedFolder>\WindowsImageBackup\<ComputerName>\<YourBackup>.

5. If you are recovering from this computer, on the Select backup location page, select the location of the backup from the drop-down list. If you are recovering from DVD or removable media, you are prompted to insert the device or first DVD in the series. Then click Next.

6. Then, for a recovery either from the local computer or another computer, on the Select backup date page, select the date from the calendar and the time from the drop-down list of backup you want to restore from.

7. On the Select recovery type page, click Volumes, and then click Next.

8. On the Select volumes page, select the check boxes associated with the volumes in the Source Volume column that you want to recover. Then, from the associated drop-down list in the Destination Volume column, select the location that you want to recover the volume to. Click Next.

   Important: You will receive a message that any data on the destination volume will be lost when you perform the recovery. Make sure that the destination volume is empty or does not contain information that you will need later.

9. On the Confirmation page, review the details, and then click Recover to restore the specified volumes.

10. On the Recovery progress page, you can view the status of the recovery operation and whether or not it was successfully completed.

Verify

To verify that a volume recovery was successful, after you perform the recovery, look for Event ID 194, which indicates that the recovery completed without errors.

To perform this procedure, you must have membership in Backup Operators or Administrators, or you must have been delegated the appropriate authority.

To verify that a volume recovery was successful:

1. Open Event Viewer. Click Start, click Administrative Tools, and then click Event Viewer.
2. In the left pane, double-click Applications and Service Logs, double-click Microsoft, double-click Windows, double-click Backup, and then click Operational.
3. In the Event ID column, look for event 194.
4. For this event, confirm that the the value in the Source column is Backup.

Related Management Information

Volume Recovery

File Services