System State Restore Fails on Windows Server 2008 R2 Read-Only Domain Controller

When you attempt to perform a system state restore on a Windows Server 2008 R2 read-only domain controller (RODC), the operation fails with the following error:

The recovery of the system state failed [Date - Time].
Log of files successfully recovered:
C:\Windows\Logs\WindowsServerBackup\SystemStateRestore-Date-Time.log

Log of files for which recovery failed:
C:\Windows\Logs\WindowsServerBackup\SystemStateRestore_Error-Date-Time.log

If you look in the error log you will see lines similar to this:

Error Restoring C:\Windows\SYSVOL\domain\ during write: Error [0x80070005] Access is denied.
Error Restoring C:\Windows\SYSVOL\domain\DfsrPrivate\ during write: Error [0x80070005] Access is denied.
Error Restoring C:\Windows\SYSVOL\domain\DfsrPrivate\ during write: Error [0x80070005] Access is denied.
Error Restoring C:\Windows\SYSVOL\domain\Policies\ during write: Error [0x80070005] Access is denied.
Error Restoring C:\Windows\SYSVOL\domain\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\ during write: Error [0x80070005] Access is denied.
Error Restoring C:\Windows\SYSVOL\domain\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\GPT.INI during write: Error [0x80070005] Access is denied.

To resolve this issue unload the DFSR read-only filter driver before trying to restore the system state on a domain controller. To successfully restore the system state on a read-only domain controller, use these steps:

1. Run this command from an elevated command window to unload the DFSR read-only filter driver:
   
   Fltmc unload DfsrRo
   
   
2. Restore your system state backup.
   
   
3. Load the DFSR read-only filter driver with this command:
   
   Fltmc load DfsrRo