| Event Id | 1196 |
| Source | MSExchangeDS |
| Description | Couldnt recover the restored Microsoft Exchange Server database (EDB). Cannot continue. Error c8000212. |
| Event Information | According to Microsoft: CAUSE 1: This behavior can occur on a recovery server or on a server you use for testing purposes because the Edb.log file that is created during a restore operation from backup interferes with the recovery process when the restore operation is finished. RESOLUTION: To resolve this behavior, manually remove the existing data in the Dsadata folder before starting the restore operation from backup. If you delete the Edb.log file to restart the directory service, run eseutil with the /g /v /x /ds options to ensure that this deletion does not introduce errors into the directory. CAUSE 2: The Restore In Progress registry subkey exists. This is by design. The Restore In Progress registry subkey exists to stop the Microsoft Exchange Directory service from starting. RESOLUTION: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk. For information about how to edit the registry, view the "Changing Keys And Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it. To work around this problem, remove the registry key and restart the Microsoft Exchange Directory service and all dependent services. The Restore In Progress registry subkey is located at: HKEY_LOCAL_MACHINE/System/Current_Control_Set/Services/MSExchangeDS/Restore In Progress |
| Reference Links | XADM: Error 1067 Occurs When Starting Directory Service After Restore
XADM: Directory Service Does Not Start with Event ID 1196 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.