Event ID - 228

Event Id228
SourceMicrosoft-Windows-Backup
DescriptionThe restore of component(s) that started at '%9' was canceled.
Event InformationAccording to Microsoft :
Cause :
This event is logged when the restore of component(s) that started was canceled.
Resolution :
Re-run application recovery
If an application recovery was canceled before it was finished, it must be re-run in its entirety to complete the recovery.
To recover applications, you must have membership in Backup Operators or Administrators or you must have been delegated the appropriate authority.
Note : If you are using BitLocker Drive Encryption to protect your server and you need to perform a system recovery, make sure to reapply BitLocker Drive Encryption. This will not happen automatically—it must be enabled explicitly.
Before you begin, you should:
  • Make sure that the computer that you are recovering files to is running Windows Server 2008.
  • Make sure at least one backup of the application exists on an external disk or in a remote shared folder, and that the disk is attached and online or that the shared folder is available.
  • Make sure that the application to be recovered uses Volume Shadow Copy Service (VSS) technology so that it is compatible with Windows Server Backup. In addition, the VSS writer for the application must have been enabled before you created the backup that you will use for recovery. Most applications require you to specifically enable the VSS writer—it is not enabled by default. If the VSS writer was not enabled for the backup, you will not be able to recover applications from it.
  • Make sure the external disk or shared folder that is hosting the backup is online and available to the server.
Note : You can also use the Wbadmin start recovery command to perform this task.
To recover an applicaton:
  1. Open the Windows Server Backup snap-in. Click Start, click Administrative Tools, and then click Windows Server Backup.
  2. In the Actions pane of the snap-in default page, under Windows Server Backup, click Recover. This opens the Recovery Wizard.
  3. On the Getting started page, specify whether you will recover the application from backups run on this computer or another computer, and then click Next.
  4. If you are recovering applications from backups stored on another computer, do the following, and then click Next:
    • On the Specify location type page, specify whether the backup that you want to restore from is on a local drive or in a remote shared folder.
    • If you are recovering from a local drive, on the Select backup location page, select the location of the backup from the drop-down list. If you are recovering from a remote shared folder, on the Specify remote folder page, type the path to the folder that contains the backup. In the folder, the backup should be stored at \\%ltRemoteSharedFolder%gt\WindowsImageBackup\%ltComputerName%gt\%ltYourBackup%gt./
  5. If you are recovering from this computer, on the Select backup location page, select the location of the backup from the drop-down list, and then click Next.
  6. On the Select backup date page, select the date from the calendar and the time from the drop-down list of the backup that you want to restore from, then click Next.
  7. On the Select recovery type page, click Applications, and then click Next.
  8. On the Select application page, under Applications, click the application that you want to recover. If the backup that you are using is the most recent and the application you are recovering supports a "roll-forward" of the application database, you will see a check box labeled Do not perform a roll-forward recovery of the application databases. Select this check box if you want to prevent Windows Server Backup from rolling forward the application database that is currently on your server. Click Next.
  9. On the Specify recovery options page, under Recovery destination, do one of the following, and then click Next:
    • Click Recover to original location.
    • Click Recover to another location. Then, type the path to the location, or click Browse to select it.
      Important: You can copy an application to a different location, but you cannot recover an application to a different location or computer of a different name.
  10. On the Confirmation page, review the details, and then click Recover to restore the listed items.
  11. On the Recovery progress page, you can view the status of the recovery operation and whether or not it was successfully completed.
Verify :
To verify that an application recovery was successful, after you perform the recovery, look for Event ID 225, which indicates that the recovery completed without errors.
To perform this procedure, you must have membership in Backup Operators or Administrators or you must have been delegated the appropriate authority.
To verify that a file or folder recovery was successful:
  1. Open Event Viewer. Click Start, click Administrative Tools, and then click Event Viewer.
  2. In the left pane, double-click Applications and Service Logs, double-click Microsoft, double-click Windows, double-click Backup, and then click Operational.
  3. In the Event ID column, look for event 225.
  4. For this event, confirm that the the value in the Source column is Backup.
Reference LinksEvent ID 228 from Source Microsoft-Windows-Backup

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.