JSI Tip 9620. Your Windows XP System event log contains contains Event ID 1 with a description that indicates that System Restore has stopped monitoring a volume?

Jerold Schulman

August 2, 2005

1 Min Read
ITPro Today logo in a gray background | ITPro Today

Your Windows XP System event log contains:

Event Type: Error
Event Source: sr
Event ID: 1
Description: The System Restore filter encountered the unexpected error '0xC0000035' while processing the file <FileName> on the volume . It has stopped monitoring the volume.

This behavior is indicative of more that 1000 restarts. When you restart Windows XP, the Change.log file that System Restore uses to track activity is renamed Change.log., where is the next available number, up to 1000. If the number has reached 1000, Windows XP cannot rename the file and System Restore is disabled.

To workaround this behavior, turn off and turn on System Restore.

NOTE: All restore points will be deleted.

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like