Partager via

Event ID 772 — System State Recovery

  • Article

Applies To: Windows Server 2008

You can use the wbadmin start systemstaterecovery command to recover the system state for a computer.

Event Details

Product: Windows Operating System
ID: 772
Source: Microsoft-Windows-Backup
Version: 6.0
Symbolic Name: ADMIN_SYSTEM_STATE_RESTORE_CANCELED_EVENT
Message: The System State Restore started at '%1' was cancelled

Resolve

Re-run system state recovery

If system state recovery was canceled before it was finished, it must be re-run in its entirety to complete the recovery.

To recover the system state, you must have membership in Backup Operators or Administrators, or you must have been delegated the appropriate authority.

Note: If you are using BitLocker Drive Encryption to protect your server and you need to perform a system state recovery, make sure to reapply BitLocker Drive Encryption. This will not happen automatically—it must be enabled explicitly. For instructions, see the Windows BitLocker Drive Encryption Step-by-Step Guide (https://go.microsoft.com/fwlink/?LinkId=93107).

To recover the system state by using the command line:

  1. Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.

  2. At the prompt, type: wbadmin start systemstaterecovery. Use parameters, as needed. (To view the parameters and help for this command, at a command line, type: wbadmin start backup /?).

    For example, to run a system state recovery of the backup from 04/30/2005 at 9:00 A.M. that is stored on the shared resource \\servername\share for server01, type: wbadmin start systemstaterecovery -version:04/30/2005-09:00 -backupTarget:\\servername\share -machine:server01.

Verify

To verify that a system state recovery was successful, after you perform the recovery, look for Event ID 242, which indicates that the recovery completed without errors.

To perform this procedure, you must have membership in Backup Operators or Administrators, or you must have been delegated the appropriate authority.

To verify that a system state recovery was successful:

  1. Open Event Viewer. Click Start, click Administrative Tools, and then click Event Viewer.
  2. In the left pane, double-click Applications and Service Logs, double-click Microsoft, double-click Windows, double-click Backup, and then click Operational.
  3. In the Event ID column, look for event 242.
  4. For this event, confirm that the the value in the Source column is Backup.

System State Recovery

File Services