| Event Id | 772 |
| Source | Microsoft-Windows-Backup |
| Description | The System State Restore started at '%1' was cancelled. |
| Event Information | According to Microsoft : Cause This event is logged when The System State Restore that started and canceled. Resolution Re-run system state recovery If system state recovery was canceled before it was finished, it must be re-run in its entirety to complete the recovery. To recover the system state, you must have membership in Backup Operators or Administrators, or you must have been delegated the appropriate authority. If you are using BitLocker Drive Encryption to protect your server and you need to perform a system state recovery, make sure to reapply BitLocker Drive Encryption. This will not happen automatically—it must be enabled explicitly. To recover the system state by using the command line: 1.Open an elevated Command Prompt window. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator. 2.At the prompt, type: wbadmin start systemstaterecovery. Use parameters, as needed. Verify To verify that a file or folder recovery was successful, after you perform the recovery, do the following: 1.If possible, manually verify the file or folder contents. 2.Look for Event ID 214, which indicates that the recovery completed without errors. To perform this procedure, you must have membership in Backup Operators or Administrators, or you must have been delegated the appropriate authority. To verify that a file or folder recovery was successful: 1.Open Event Viewer. Click Start, click Administrative Tools, and then click Event Viewer. 2.In the left pane, double-click Applications and Service Logs, double-click Microsoft, double-click Windows, double-click Backup, and then click Operational. 3.In the Event ID column, look for event 214. 4.For this event, confirm that the the value in the Source column is Backup. |
| Reference Links | Event ID 772 from Source Microsoft-Windows-Backup |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.