Windows 10: System restore Event ID?

Does anyone know how I can check whether or not the machine was able to successfully do a system restore through the event viewer?

If so, can you provide the event ID’s for system restore and if I need to check either the windows or application logs to get the latest time and date of whether or not the restore was successful.

Your help is greatly appreciated, thanks in advance!

:)

 

File System Filter 'wcifs' EVENT ID 4


Afternoon all ... just an FYI,

I can create a restore point, says it created successful (event id 4 'wcifs') and on system restore I'm getting the ... System Restore fails: AppxStaging %ProgramFiles%\WindowsApp 0x80070091.

Tried the fix here in the forum for 0x80070091, with no luck. Seems I can only do a restore from Safe Mode/Recovery.

Tried creating restore point and doing system restore, with 'wcifs filter' unloaded/stopped, but still failed with the 0x80070091. So it doesn't seem the (event id 4 'wcifs') is affecting system restore, at least in my case.

NOTE: I haven't seen any adverse affects from unloading/stopping the 'wcifs filter'.
If anyone else has the same (event id 4 'wcifs') and wants to do some testing

To stop (event id 4 'wcifs') from showing up.
1. Open a command prompt as administrator
2. fltmc filters and fltmc instances - to see if wcifs is listed
3. sc stop wcifs - you should be able to create a restore point now without (event id 4 'wcifs') showing up.
4. sc config wcifs start= demand - otherwise (event id 4 'wcifs') will show up on reboot.

Note: edited for brevity....

>fltmc filters
Filter Name Num Instances Altitude Frame
------------------------------ ------------- ------------ -----
wcifs 1 189900 0

>fltmc instances
Filter Volume Name Altitude Instance Name Frame SprtFtrs VlStatus
-------------------- ------------------------------------- ------------ ---------------------- ----- -------- --------
wcifs C: 189900 wcifs Instance 0 00000000

 

event id 10016

Hi Steven,

Go through this
forum post and follow the troubleshooting steps listed.

Let us know how it goes.

Regards.

 

computer failed to boot - disk error event id 153 + 98


Hi, suggest you try Hard Disk Sentinel (trial) - gives a great quick analysis (SSDs too).

Please post the results.

Event ID 153:
This event may be an indication that the specified drive may be failing soon. This is especially true if the event is recorded regularly. The first step is to run the maintenance utilities related to hard drives, starting with CHKDSK and the utilities available from the manufacturer for that specific brand.

Event ID 98:
Event ID: 98