Recovery Manager Portal events
| Event ID | Event type | Description |
|---|---|---|
| 9000 | Information | The %9 object was restored to %10. Initiated by %1 |
| 9001 | Error | The %9 object was not restored to %10. Reason: %4; Initiated by %1 |
| 9002 | Information | The batch restore operation was started. Number of objects: %7;Backup date: %13; RMAD console: %5; Domain controller: %6; Attributes to restore: %21; Initiated by %1 |
| 9003 | Information | The batch restore operation was successfully finished. Number of restored objects: %7; Initiated by %1 |
| 9004 | Error | The batch restore operation failed. Initiated by %1 |
| 9005 | Warning | The batch restore operation partially completed. %8 out of %7 objects were successfully restored. Initiated by %1 |
| 9006 | Information | The %9 object was successfully undeleted. Initiated by %1 |
| 9007 | Error | The %9 object undelete operation failed. Reason: %4; Initiated by %1 |
| 9008 | Information | The batch undelete operation was started. Number of objects: %7; RMAD console: %5; Domain controller: %6; Initiated by % |
| 9009 | Information | The batch undelete operation was finished. Number of undeleted objects: %7; Initiated by %1 |
| 9010 | Error | The batch undelete operation failed. Initiated by %1 |
| 9011 | Warning | The batch undelete operation was partially completed.%8 out of %7 objects were successfully undeleted. Initiated by %1 |
| 9012 | Information | The search operation was started. Search string: %14; Initiated by %1 |
| 9013 | Information | The search operation was finished. Search string: %14; Number of found objects: %7. |
| 9014 | Error | The search operation was failed. Search string: %14; Reason: %4 |
| 9015 | Information | The search operation was canceled. Search string: %14 |
| 9016 | Information | Delegation setting for %20 was changed. Resource: %19; Operation: %18; Access: %73; Initiated by %1 |
| 9017 | Information | Delegation setting for %20 was deleted. Resource: %19; Operation: %18; Initiated by %1 |
| 9018 | Information | Recovery Portal configuration was changed. Server: %74; Administrator: %66; Operation: %18; Initiated by %1 |
Forest Recovery Agent events
| Event ID | Event type | Description |
|---|---|---|
| 1600 | Information | Resetting the passwords for domain controllers. |
| 1601 | Information | Resetting the Kerberos password. |
| 1604 | Information | Removing metadata and the domain controllers that have not been restored. |
| 1608 | Information | Starting the Active Directory reinstallation… |
| 1609 | Information | The computer is being rebooted in Directory Services Restore mode. |
| 1610 | Information | The computer is being rebooted in the Normal mode. |
| 1611 | Information | The domain controller demotion was started. |
| 1626 | Error | The Active Directory reinstallation failed. Details: %1 |
| 1627 | Error | The supplied backup protection password is invalid. |
| 1628 | Error | The domain controller demotion failed. Details: %1 |
| 1645 | Error | The supplied DSRM password does not meet the password complexity requirements. |
| 1646 | Error | The specified DNS server was not available. |
| 1647 | Error | DC was restarted in the wrong mode (Normal). The required mode is DSRM. |
| 1648 | Error | DC was restarted in the wrong mode (DSRM). The required mode is Normal. |
| 1649 | Information | Invalidating the RID pool. |
| 3101 | Error | Cannot access the backup file %12. |
| 3102 | Information | DNS configuration completed with addresses %48. |
| 3103 | Error | Cannot prepare the backup file %12. Details: %23. |
| 3104 | Information | Removing the domain %50. |
| 3105 | Error | Cannot remove the domain %50. Details: %23 |
| 3106 | Information | Domain Controller unisolation was started. |
| 3107 | Information | Domain Controller isolation was started. |
| 3108 | Information | Disabling the Windows Update service. |
| 3109 | Information | Enabling the Windows Update service. |
| 3110 | Information | Seizing FSMO roles %51. |
| 3111 | Information | The RID pool value was increased from %54 to %55. |
| 3112 | Information | Stopping the service %52. |
| 3113 | Information | Starting the test operation. Backup path: %12; Preferred DNS servers:%48; Temp storage: %49 |
| 3114 | Information | Preparing the backup file. Backup path: %12; Preferred DNS servers:%48; Temp storage: %49 |
| 3115 | Information | Restoring from a backup %12. |
| 3116 | Error | Forest Recovery Agent installation failed. Details: %23. |
| 3117 | Error | Cannot access the temporary backup folder %49. Details: %23. |
| 3118 | Information | Operation %3 execution was started. |
| 3119 | Information | Operation %3 was completed successfully. |
| 3120 | Error | Operation %3 failed. Details: %23. |
| 3121 | Error | The operation %3 was canceled by the user. |
| 3122 | Information | Specifying the DNS server settings. Preferred DNS Servers: %48, alternate DNS servers: %61. |
| 3123 | Error | The test operation failed. See previous events for details. |
| 3124 | Information | Disabling the Global Catalog server for the domain controller %6 |
| 3125 | Information | Enabling the Global Catalog server for the domain controller %6 |
| 3126 | Information | Disabling the Global Catalog server for this domain controller. |
| 3127 | Information | Enabling the Global Catalog server for this domain controller. |
| 3128 | Information | Resetting the trusts passwords for the domain %50. |
| 3129 | Information | Resetting the password for the domain controller %6. |
| 3130 | Information | DSRM password was set successfully. |
| 3131 | Error | Cannot delete the copied backup file %12. Details: %23. |
| 3132 | Error | Cannot delete the IPSec backup file %12. Details: %23. |
| 3133 | Error | The specified DNS servers %48 are not available. |
| 3134 | Information | Current IpSec rules were backed up to %12. |
| 3135 | Information | Starting the Active Directory reinstallation. Administrator name: %66,replication source domain controller:%6, replica domain DNS name:%64, site name:%65, enable GC after install: %67 |
| 3136 | Information | BitLocker drive encryption was successfully disabled for volume %72. |
| 3137 | Error | Cannot disable BitLocker drive encryption for volume %72. Details: %23. |
| 3138 | Information | BitLocker drive encryption was successfully enabled for volume %72. |
| 3139 | Error | Cannot enable BitLocker drive encryption for volume %72. Details: %23. |
| 3140 | Information | Custom password filters were successfully enabled. |
| 3141 | Error | Cannot enable custom password filters. Details: %23. |
| 3142 | Information | Custom password filters were disabled successfully. |
| 3143 | Error | Cannot disable custom password filters. Details: %23. |
| 3144 | Information | Metadata for the domain controller %6 was successfully removed. |
| 3145 | Information | Metadata removing for the domain controller %6 completed with warnings: %38. |
| 3146 | Error | Cannot set the DSRM password. Details: %23. |
| 3147 | Information | Password for the krbtgt account was reset successfully. |
| 3148 | Error | Cannot reset the password for the krbtgt account. Details: %23. |
| 3149 | Error | Cannot validate the backup file. Details: %23. |
| 3150 | Information | The test operation was successfully completed. |
| 3151 | Information | The Active Directory reinstallation successfully completed. |
| 3152 | Information | The domain controller was successfully demoted. |
| 3153 | Information | Resetting the passwords for trusts. |
| 3154 | Information | Set service %52 start type to %88. |
| 3155 | Error | Cannot change start type for service %52. Details: %23. |
| 10002 | Information | %89 started using authentication service %90. |
Forest Recovery Console events
| Event ID | Event type | Description |
|---|---|---|
| 5000 | Informational | Forest Recovery project was created: %56 |
| 5001 | Informational | Forest Recovery project was updated: %56 |
| 5002 | Informational | Recovery project validation was started: %56. Method %63 |
| 5003 | Informational | Forest Recovery project %56 was successfully validated. Domain Controller: %6 |
| 5005 | Error | Forest Recovery project %56 validation failed. See previous events for details. |
| 5006 | Error | Forest Recovery operation failed: %18. Domain Controller: %6; Details: %23 |
| 5007 | Informational | The recovery process was started using the following method: %63; Domain Controller: %6; Backup file: %12; Forest Recovery project %56 |
| 5008 | Informational | Recovery process was finished. Domain Controller: %6; Forest Recovery project %56 |
| 5010 | Error | Recovery process failed. See previous events for details. Domain Controller: %6; Forest Recovery project %56 |
| 5011 | Informational | Operation: %18 was canceled, Domain Controller %6 |
| 5012 | Informational | Operation: %18 was retried; Domain Controller %6 |
| 5013 | Informational | Operation: %18 was paused; Domain Controller %6 |
| 5014 | Informational | Operation %18 was unpaused, Domain Controller %6 |
| 5015 | Informational | %18, Domain Controller: %6 |
| 5016 | Informational | Forest Recovery Agent operation: %18 was finished successfully. Domain Controller %6; Version: %62 |
| 5017 | Error | Forest Recovery Agent operation failed: %18; Domain Controller %6; Version: %62 |
| 5018 | Informational | Health check was started. Active Directory Forest: %7; Forest Recovery Project %56 |
| 5019 | Informational | Health check was completed successfully. Active Directory Forest: %75; Forest Recovery Project %56 |
| 5020 | Error | Health check was failed. Domain Controller %6; Details: %23 |
| 5021 | Error | Scheduled project operation failed to start. Project: %56; Operation: %18; Details: %23 |
| 5022 | Informational | The recovery process was resumed by the Forest Recovery Console instance %95. The original console instance where the recovery process was initiated: %94. |
| 10003 | Informational | Console connected to %89 on %91 using authentication service %90. |
Active Directory Virtual Lab events
| Event ID | Event type | Description |
|---|---|---|
| 6100 | Information | New Virtual Lab Project was created: Project: %56 |
| 6101 | Information | Virtual Lab Project was changed: Project: %56 |
| 6102 | Information | Virtual Lab Project successfully connected to %57 hypervisor: Address: %58; User: %66; Project: %56 |
| 6103 | Error | Virtual Lab Project cannot connect to %57 hypervisor. Address: %58; User: %66; Error: %23; Project: %56 |
| 6104 | Information | Source machine was added to the Virtual Lab Project. Machine: %59; Project: %56 |
| 6105 | Information | Source machine was removed from the Virtual Lab Project. Machine: %59; Project: %56 |
| 6110 | Information | Forest Recovery Agent was installed on %59. |
| 6111 | Error | Forest Recovery Agent installation failed on %59: %23 |
| 6112 | Information | Forest Recovery Agent was uninstalled on %59. |
| 6113 | Error | Forest Recovery Agent uninstallation failed on %59: %23 |
| 6114 | Information | VMware agent was installed on %59. |
| 6115 | Error | VMware agent installation failed on %59: %23 |
| 6116 | Information | VMware agent was uninstalled on %59. |
| 6117 | Error | VMware agent uninstallation failed on %59: %23 |
| 6118 | Information | SCVMM agent/Disk2Vhd tool was installed on %59. |
| 6119 | Error | SCVMM agent/Disk2Vhd tool installation failed on %59: %23 |
| 6120 | Information | SCVMM agent/Disk2Vhd tool was uninstalled on %59. |
| 6121 | Error | SCVMM agent/Disk2Vhd tool uninstallation failed on %59: %23 |
| 6201 | Information | Virtual Lab project settings were successfully verified. Project: %56 |
| 6202 | Error | Virtual Lab project settings verification failed: Error(s): %37; Warning(s): %38; Project: %56 |
| 6203 | Warning | Virtual Lab project settings verification was finished with warning(s): %38 Project: %56 |
| 6299 | Warning | Virtual Lab project settings verification was finished with warning(s) but it was ignored. Then the lab creation was started. Project: %56 |
| 6300 | Information | Virtual Lab project lab creation was started. Project: %56 |
| 6301 | Error | Virtual Lab project lab creation failed. Failed targets: %37; Project: %56 |
| 6302 | Error | Virtual machine creation failed. Machine: %59; Error: %23 |
| 6303 | Information | Virtual Lab creation was successfully finished. Created targets: %68; Project: %56 |
| 6304 | Warning | Virtual machine creation was interrupted by a user. Machine: %59 |
| 6401 | Information | Virtual machine network was enabled: Machine: %59; Machine: %59 |
| 6402 | Error | Enabling virtual machine network failed: Machine: %59; Error: % |
