Event ID 245 — System State Recovery
Applies To: Windows Server 2008 R2
You can use the wbadmin start systemstaterecovery command to recover the system state for a computer.
Event Details
Product: | Windows Operating System |
ID: | 245 |
Source: | Microsoft-Windows-Backup |
Version: | 6.1 |
Symbolic Name: | SYSTEM_STATE_RESTORE_CANCELED_EVENT |
Message: | The System State Restore that started at '%1' was canceled. |
Resolve
Re-run system state recovery
If system state recovery was canceled before it was finished, it must be re-run in its entirety to complete the recovery.
To recover the system state, you must have membership in Backup Operators or Administrators, or you must have been delegated the appropriate authority.
Note: If you are using BitLocker Drive Encryption to protect your server and you need to perform a system state recovery, make sure to reapply BitLocker Drive Encryption. This will not happen automatically—it must be enabled explicitly. For instructions, see the Windows BitLocker Drive Encryption Step-by-Step Guide (https://go.microsoft.com/fwlink/?LinkId=93107).
To recover the system state by using the command line:
Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
At the prompt, type: wbadmin start systemstaterecovery. Use parameters, as needed. (To view the parameters and help for this command, at a command line, type: wbadmin start backup /?).
For example, to run a system state recovery of the backup from 04/30/2005 at 9:00 A.M. that is stored on the shared resource \\servername\share for server01, type: wbadmin start systemstaterecovery -version:04/30/2005-09:00 -backupTarget:\\servername\share -machine:server01.
Verify
To verify that a system state recovery was successful, after you perform the recovery, look for Event ID 242, which indicates that the recovery completed without errors.
To perform this procedure, you must have membership in Backup Operators or Administrators, or you must have been delegated the appropriate authority.
To verify that a system state recovery was successful:
- Open Event Viewer. Click Start, click Administrative Tools, and then click Event Viewer.
- In the left pane, double-click Applications and Service Logs, double-click Microsoft, double-click Windows, double-click Backup, and then click Operational.
- In the Event ID column, look for event 242.
- For this event, confirm that the the value in the Source column is Backup.