Event ID - 197

Event Id197
SourceMicrosoft-Windows-Backup
DescriptionRestore of volume(s) started at '%9' was cancelled.
Event InformationAccording to Microsoft :
Cause :
This event is logged when restore of volume(s) started was cancelled.
Resolution :
Re-run volume recovery
If a volume recovery has been canceled before it was finished, it must be re-run in its entirety to complete the recovery.Can perform a volume recovery using the Windows Server Backup snap-in or the wbadmin start recovery command.
Recover volumes using the Windows Server Backup snap-in
To recover volumes,must have membership in Backup Operators or Administrators or must have been delegated the appropriate authority.
Before begin,should:
  • Make sure that the computer that recovering volumes to is running Windows Server 2008.
  • Make sure the external disk or shared folder that is hosting the backup is online and available to the server Or if using a backup on DVDs or removable media, make sure that the DVD drive or device is attached to local server and online and that all DVDs that contain the backup are labeled and available.
  • Determine which volumes that want to recover.
Note : Can also use the Wbadmin start recovery command to perform this task.
To perform a volume recovery using the Windows Server Backup snap-in:
  1. Open the Windows Server Backup snap-in. Click Start, click Administrative Tools and then click Windows Server Backup.
  2. In the Actions pane of the snap-in default page, under Windows Server Backup, click Recover. This opens the Recovery Wizard.
  3. On the Getting started page, specify whether will recover volumes from backups stored on this computer or another computer and then click Next.
  4. If recovering volumes from backups stored on another computer do the following and then click Next:
    a.On the Specify location type page, specify whether the backup that want to restore from is on a local drive or in a remote shared folder.
    b.If recovering from a local drive, on the Select backup location page, select the location of the backup from the drop-down list.If recovering from a remote shared folder on the Specify remote folder page, type the path to the folder that contains the backup.In the folder, the backup should be stored at \\%ltRemoteSharedFolder%gt\WindowsImageBackup\%ltComputerName%gt\%ltYourBackup%gt.
  5. If recovering from this computer on the Select backup location page, select the location of the backup from the drop-down list.If recovering from DVD or removable media, prompted to insert the device or first DVD in the series, then click Next.
  6. Then for a recovery either from the local computer or another computer on the Select backup date page, select the date from the calendar and the time from the drop-down list of backup want to restore from.
  7. On the Select recovery type page, click Volumes, and then click Next.
  8. On the Select volumes page, select the check boxes associated with the volumes in the Source Volume column that want to recover.Then from the associated drop-down list in the Destination Volume column, select the location that want to recover the volume to. Click Next.
  9. On the Confirmation page review the details and then click Recover to restore the specified volumes.
  10. On the Recovery progress page,can view the status of the recovery operation and whether or not it was successfully completed.
Recover the system using a Windows Setup disc
You can recover your server operating system or full server by using a Windows Setup disc and a backup that you created earlier with Windows Server Backup. The Windows Setup disc enables you to access the System Recovery Options page in the Windows Recovery Environment.On some computers may be able to access the Windows Recovery Environment on a recovery partition.Can also install Windows Recovery Environment locally on server if want to configure servers to fail over to the Windows Recovery Environment if they fail to boot.
Recover the operating system by recovering all critical volumes—volumes that do not contain system components will not be restored.Recover the full server by recovering all volumes.
When perform a recovery of the operating system or full server,will need to specify the following:
  • What backup you will use
  • Where will recover to
  • Whether will perform an operating system–only recovery or full server recovery
  • Whether you will reformat and repartition disks
Important : In a full server recovery if choose to reformat and repartition all disks, the existing data will be deleted.This includes any volumes that are currently used by the server but were not included in the backup.
The recovery of the operating system is performed by the Windows Recovery Environment using the LocalSystem user account.
Note : If using BitLocker Drive Encryption to protect server and need to perform a system recovery, make sure to reapply BitLocker Drive Encryption.This will not happen automatically—it must be enabled explicitly.
Before begin, should:
  • If recovering to a new hard disk, make sure the disk is at least as big as the disk that contained the volumes that were backed up, regardless of the size of those volumes.
  • If recovering just the operating system, make sure that have a backup available that contains at least the critical volumes of the server.If recovering the full server, make sure that have a backup available that contains all volumes of the server.
  • Make sure that have a Windows Setup disc for Windows Server 2008.
To recover operating system or full server using a Windows Setup disc:
  1. Insert the Windows Setup disc into the CD or DVD drive and turn on the computer.If needed, press the required key to boot from the disc.The Install Windows Wizard should appear.
  2. Specify language settings and then click Next.
  3. Click Repair computer.
  4. Setup searches the hard disk drives for an existing Windows installation and then displays the results in System Recovery Options.If recovering the operating system onto separate hardware, the list should be empty.Click Next.
  5. On the System Recovery Options page, click Windows Complete PC Restore.This opens the Windows Complete PC Restore Wizard.
  6. Do one of the following:
    Click Use the latest available backup and then click Next.
    Click Restore a different backup and then click Next.
  7. If chose to restore a different backup, on the Select the location of the backup page, do one of the following:
    Click the computer that contains the backup that want to use and then click Next.
    Important: If the storage location contains backups of multiple computers, make sure that click the row for the backups for the computer that want to use.
    Then on the Select the backup to restore page, click the backup that want to use and then click Next.
    Click Advanced to browse for a backup on the network, and then click Next.
  8. On the Choose how to restore the backup page, do the following optional tasks and then click Next:
    Select the Format and repartition disks check box to delete existing partitions and reformat the destination disks to be the same as the backup.This enables the Exclude disks button.Click this button and then select the check boxes associated with any disks that want to exclude from being formatted and partitioned.The disk that contains the backup that are using is automatically excluded.
    Select the Only restore system disks check box to perform an operating system–only recovery.
    Click Install drivers to install device drivers for the hardware that are recovering to.
    Click Advanced to specify whether the computer is restarted and the disks are checked for errors immediate after the recovery.
  9. Confirm the details for the restoration and then click Finish.
Reference LinksEvent ID 197 from Source Microsoft-Windows-Backup

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.