| Event Id | 198 |
| Source | Microsoft-Windows-Backup |
| Description | Restore of volume '%1' failed or cancelled. Volume is now corrupted and will need to be formatted. |
| Event Information | According to Microsoft : Cause This event is logged when Restore of volume failed or cancelled.Volume is now corrupted and will need to be formatted Resolution Determine if recovery destination is corrupted If the destination that you are recovering a volume to is corrupted, Windows Server Backup will not be able to perform the recovery. If you encounter this problem, perform the following general steps: 1.Wait for the recovery to complete. 2.In the event message, note the location that was used as the recovery destination and the event number. 3.In Event Viewer, review the details for the event, including error codes and any information about the volume, to look for a solution. 4.In the Windows Server Backup snap-in, review the details provided about the failure. 5.Run chkdisk /r on the volume to look for corrupted sectors. 6.After resolving any errors that you find in performing the steps above, re-run another volume recovery. Note: To perform a recovery or work with errors or events, you must have membership in Backup Operators or Administrators, or you must have been delegated the appropriate authority. To run chkdsk, you must have membership in Administrators, or you must have been delegated the appropriate authority. Review event details in Event Viewer To view event details in Event Viewer: 1.Open Event Viewer. Click Start, click Administrative Tools, and then click Event Viewer. 2.In the left pane, double-click Applications and Service Logs, double-click Microsoft, double-click Windows, double-click Backup, and then click Operational. 4.In the right pane, click the DetailsFriendly View. 5.Click event 198 the list and review the information. 6.Review error messages for the error codes, as described in "Review error messages in the Windows Server Backup snap-in." Review error messages in the Windows Server Backup snap-in To view error messages using Windows Server Backup: 1.Open the Windows Server Backup snap-in. Click Start, click Administrative Tools, and then click Windows Server Backup. 2.On the start page, under Messages, double-click the event for the failed volume recovery, click the Errors tab, and view the text under Message. Find bad clusters To determine if bad clusters exist on the backup destination: 1.On the computer that contains the recovery destination, open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator. 2.At the prompt, type: chkdsk /r. This command will look for bad sectors on the disk and recover any readable information. To perform a volume recovery using the Windows Server Backup snap-in: Before you begin, you should: Make sure that the computer that you are recovering files to is running Windows Server 2008. Make sure at least one backup exists on an external disk or in a remote shared folder. You cannot recover files and folders from backups saved to DVDs or removable media. In addition, make sure that the backup is not a system state backup. File and folder recovery is not possible from a system state backup. Make sure the external disk or shared folder that is hosting the backup is online and available to the server. 1.Open the Windows Server Backup snap-in. Click Start, click Administrative Tools, and then click Windows Server Backup. 2.In the Actions pane of the snap-in default page, under Windows Server Backup, click Recover. This opens the Recovery Wizard.. 3.On the Getting started page, specify whether you will recover files from backups run on this computer or another computer, and then click Next. 4.If you are recovering files and folders from backups stored on another computer, do the following, and then click a.On the Specify location type page, specify whether the backup that you want to restore from is on a local drive or in a remote shared folder. b.If you are recovering from a local drive, on the Select backup location page, select the location of the backup from the drop-down list. If you are recovering from a remote shared folder, on the Specify remote folder page, type the path to the folder that contains the backup. In the folder, the backup should be stored at \\ 5.If you are recovering from this computer, on the Select backup location page, select the location of the backup from the drop-down list, and then click Next. 6.Then, for a recovery either from the local computer or another computer, on the Select backup date page, select the date from the calendar and the time from the drop-down list of backup you want to restore from. 7.On the Select recovery type page, click Files and folders, and then click Next. 8.On the Select volumes page, select the check boxes associated with the volumes in the Source Volume column that you want to recover. Then, from the associated drop-down list in the Destination Volume column, select the location that you want to recover the volume to. Click Next. You will receive a message that any data on the destination volume will be lost when you perform the recovery. Make sure that the destination volume is empty or does not contain information that you will need later. 9.On the Confirmation page, review the details, and then click Recover to restore the specified items. 10.On the Recovery progress page, you can view the status of the recovery operation and whether or not it was successfully completed. Verify To verify that a file or folder recovery was successful, after you perform the recovery, do the following: 1.If possible, manually verify the file or folder contents. 2.Look for Event ID 194, which indicates that the recovery completed without errors. To perform this procedure, you must have membership in Backup Operators or Administrators, or you must have been delegated the appropriate authority. To verify that a file or folder recovery was successful: 1.Open Event Viewer. Click Start, click Administrative Tools, and then click Event Viewer. 2.In the left pane, double-click Applications and Service Logs, double-click Microsoft, double-click Windows, double-click Backup, and then click Operational. 3.In the Event ID column, look for event 194. 4.For this event, confirm that the the value in the Source column is Backup. |
| Reference Links | Event ID 198 from Source Microsoft-Windows-Backup |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.