What Does System Restore ACTUALLY Do?
ฝัง
- เผยแพร่เมื่อ 10 ก.ค. 2024
- Ever wonder what's really going on when you create a restore point?
▼ Time Stamps: ▼
0:00 - Intro
1:24 - Enabling System Restore
2:22 - What System Restore Actually Does
4:42 - Behind The Scenes
7:52 - Don't Rely On It for Document Recovery
9:50 - In Summary
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬
Merch ⇨ teespring.com/stores/thiojoe
⇨ / thiojoe
⇨ / thiojoe
⇨ / thiojoetv
My Gear & Equipment ⇨ kit.co/ThioJoe
▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬▬ - วิทยาศาสตร์และเทคโนโลยี
System Restore saved my life more times than I have fingers and toes. A great feature especially if you are prone to install suspicious software.
Reading the comments, it appears Windows 10, and more so Windows 11 does not always restore successfully.
I'm still gloriously happy with my Windows 7, which gets the job done.
🐧
Windows 7 was built before Microsoft added a bunch of forced apps and tracing software integrated the new OS. You could remove a lot windows features without breaking windows so a system restore worked the best in windows 7. I work in a computer store and have found system restore broke more windows 10/11 installations then it fixed. Even if nothing was wrong from before the restore.
@@Bishop1091 yeah but no security updates
I would rather use something like Sandboxie (or any sandboxing software) to test potentially harmful software, rather than rely on System Restore.
@@DouglasWalrath Its really not that big of a deal if you stay away from fishy websites.
I've learned the hard way that Windows System Restore fails more often than it succeeds. It is now turned off on all my computers. Why take up space with restore points if they aren't reliable? Instead, I make frequent Macrium Reflect backups. They have never failed me.
I've learned my lesson to not trust system restore. Macrium or something similar is the way to go.
There's some irony in that it basically always worked for me in the Windows ME days. My ME machine was so unstable and prone to some sort of corruption and I had to use it very frequently.
You and me, brother. You never know when you will get a virus that could brick your computer no matter how careful you are where it purposely mess with system restore first. I've been using macrium reflect like for about 20 years now. I regularly create images of my windows drive in an external drive, especially before a windows/driver update. It takes a bit of work but a guaranteed rollback exactly to the state when your computer is working perfectly makes it all worth it. Saves me a ton of headache.
What I've learned is to never trust a single thing TheoJoe ever says.
@@michaelszczys8316 go away hater
The term you where searching for at 5:30 is "copy on write". The entire file system gets a time stamp put on. Each entry in the master file table gets it as well. And when you start to change a file (or even just a block in a file), that timestamp is checked. And if it's the same as the one of the file system, windows knows that this block represents the state in a VSS snapshot. Then windows duplicates the block (keeping the old in the snap shot) and creates a new one for the current file.
Thanks to Windows ME, I got very familiar with System Restore. Couldn't ask for a better tutorial than having to restore my OS every few weeks.
-- All those Kernels that magically appeared and fought each other, right? :^)
Well this is going to be helpful to know, as I create system restore points when I do something that might potentially be dangerous (I would typically test somethings in a virtual machine before I do it on my main device).
ayo what are you doing with the powershell oc on your avatar
PWSH ❤
Forget system restore, use an imaging program instead.
@Maximus Gabriel Well I don't really use system restore points to be honest. I mostly create a restore point after something like a feature update or before I install an update that might possibly ruin my device. But I do actually have one of those multi boot drives. Which I use for installing linux onto my devices. And for recovery purposes.
Like one time when I was at school, I had a class where the computers didn't have stuff like group policy on it. And one time after I scanned for some corrupted files. I later tried to boot it up. But it didn't boot up, and before I reimagined my drive (we just go up to a computer, and we boot it up to have it run a disk imaging script that would copy the windows 10 installation from another drive). I tried to fix my system with my multiboot drive. And unfortunately I wasn't able to fix it with my multiboot drive. And I ended up having to reimage my drive, which meant I had to reinstall a ton of programs that I use. But I at least tried to fix it without having to have my drive formatted and reimaged.
@@mintmag8748 Well I don't really rely on system restore points. Because I have a multiboot usb drive, and I think it's a better way to fix a system rather than using snapshots (or restore points) to fix your system. Because having the windows iso image on a drive, would give you an option to repair your installation.
One of the most underrated services of Windows ever, I would love if Linux have a feature like this. You should create a Task (Task Scheduler) to have a regular snapshot, that save me a lot to recover files, even against Ransomware. Seriously, we're talking about of one of that services that we must need to have enabled hands down.
you should look into btrfs which most Linux distros support. you can create snapshots of any folder or the entire filesystem and it also has a bunch of other neat stuff
@@AlexanderPrussak I use btrfs instead ext4 since years, but Shadow copies works like a charm, way better for me.
Use timeshift
@@CesarPeron You don't even need file system support for it. As @Telefon Makinesi mentioned, there's timeshift, but you could even just use cron coupled with diff and rsync. Could probably even use git if you set it up right, though I wouldn't recommend that.
Thanks for the Video ThioJoe!
Oh my god, I haven't seen your videos in so long, I used to watch you all the time in middle school when you still did your joke videos! Glad to see you're still uploading!
10:12 the windows registry is actually partially stored in the user directory. It is (most likely) still included by file type since .DAT files are (most likely) on the list.
Amazing and useful video as always. Thanks for the tip.
I'm actually so glad System Restore exists. I had a major problem where an application changed something, which caused my disk to malfunction and won't shut down my laptop, and System Restore solved the problem.
always learn something new on this channel!
I've been waiting for this so long
It's amazing how after all these years I'm still finding out about features that Windows has and yet doesn't promote the heck out of and just go under the radar. They should promote the shadow copy feature and have some security features on it. What's more, if system restore doesn't backup your user files automatically, they should add that functionality into it so your data can be safeguarded too.
Considering it’s on every computer with windows for the past 20 or so years and is literally an option if something happened to your computer you can click on on the big scary blue screen , and its in your settings ….. it doesn’t need to be promoted .
@@laserkeyboardpro4239 I don't use Windows, so I don't get BSOD's. System restore isn't a feature that I hear people talking about when they complain that Windows has lost their data, so I just assumed it didn't have such functionality. On Linux-based systems, we've got something similar to that in every major distro, easy manual backup functionality thanks to multiple choices of programs over the past 25 years, and even file systems that can handle that functionality.
Useful video, I love your channel!
As someone working in a computer store this helped a few times when I am looking for a time saver solution but personally on my own pc nothing feels better then a fresh install of windows to remove all my experimental mistakes.
Very clear explanation 👍
Has saved me more times that I can remember. I do count on using this when things go wrong.
Thanks for spreading information or other things
Thank you for this interesting explanation 👍
Thank you for talking about this. I've wondered this too.
I appreciate this video Joe
Great video!
Great video thanks I love it 👍
Interesting Video! 👍
I was also wondering at some point, what the heck does that "system restore" does. Thank you Joe!
Back with Windows 98 I installed Norton GoBack which continually marked safe points so that the entire drive could be restored to any point as required. Great for trying out stuff that made a mess of the system as you could simply go back to an earlier point in time.
Thank you! I've always wanted to know this since Win98 (I think that was the first time I saw it, I could be mistaken). Really appreciate the information.
Thank you, very useful for me
This inspired me a bit, because I'm a tinkerer and (kind of) a messy guy in terms of gadgets, and I mess with the drivers in device manager or the actual directory. I didn't create restore points before and there have been times where the system refuses to boot due to an incompatible driver, and I just don't have a restore point. Now actually I will regularly create them so I don't mess up anytime soon.
I've been looking for a video exactly like this for a year now
Yay a new video ^^
I didn't realize it used the volume shadow service, half the time I would disable this service because it would constantly be running on my old computer. Thanks for the info!
Rather interesting vid!
Good video!
Thiojoe I am asking you is it safe like it don't delete the stuff that the user stored in the computer?
Thanks, TJ~
Good video! I assume you are talking about Windows 10 here?
And are any of the links under Windows 10 “Recovery” similar to (or capable of) making a restorable clone of C: on another internal drive? (You see, so far I’ve been too timid to try those.)
Thanks for this info. I had a problem and Windows 10 could not restore from the restore point in Windows. I figured out that I could run the System Restore from the installation media and that solved the problem.
Hope this helps.
I have never used any restore options, I usually do a fresh install of the OS.
I do backup and sync my important files to a different drive and the cloud.
Thanks Jeo
Thanks for reminding me to create a restore point.
Wow that is good stuff.
That's interesting to know. However, System Restore stopped working for me when I upgraded from Windows 7 Pro to Windows 10 Pro for some reason. So, I use a hard drive clone program instead to regularly clone my entire C: drive instead.
He said in this video that on Windows 10 it is disabled by default. He also showed how to enable it.
@@OneAndOnlyZekePolaris Oh I know how to enable it, and that's what I did right away too after switching OS. But it still refuses to work, despite the fact it's all setup correctly to run.
@@ebaylistinginfo Same so I just disable it.
You might wanna backup your files and fresh install the Windows then it might get fixed and all other small issues you might have. I know it'll take time but it's worth it.
@@user-ir6xh2mx9d That doesn't work for me the whole thing got removed because of GeekSquad aka BestBuy's tech support team.
0:01 System restore was introduced with Windows XP, in the introduction video was shown a kid with a plastic toy hammer hitting on the keyboard of a PC which was left on, scrambling files around out of the display case, then came the elder sister and used the new feature to repair everything 😀
Good video.
System shadow snapshot (also known as VSS ) is amazing technology, but "system restore" is the worst implantation of it. Imagining programs such as Macrium Reflect or Todo Backup make far better use of this technology than Sys restore.
VSS is what allows you to make a clone of your C drive while it is still in use. Further more, said clone can be mounted and even used as a virtual drive without affecting any of the data stored in it.
It can also be compressed quite drastically as well. This technology is not available on Linux.
This might be an interesting challenge to implement on Linux. I mean there must be a way to monitor file changes in Linux. So you only need to write a lightweight service that uses that information and maintains such shadow copy.
@@redcrafterlppa303 This technology has been around since XP service pack 3. Linux still doesn't have it.
@@mintmag8748 what's your point? You think it can't be done just because no one did it yet?
@@redcrafterlppa303 I like some of the software based on the Linux kernel, I think the community is pathetic.
@ 2:17 I enabled System Restore a while ago and set the Max Usage at 60% (60.00 GB). Is it advisable to set the Disk Space Usage to 100%?
You wouldn’t have space for anything else 🤔
@@ThioJoe Okay. Got it. Thanks
I wouldnt set it to any more than 15%. You have it set to 60% of your entire drive
I like to set it to 10GB, I have found that setting the space very large (30+GB) can slow down some procedures.
>vssadmin Resize ShadowStorage /For=C: /On=C: /MaxSize=10GB
@@NotEvents Thank you
System restore did help me at some points, I was deleting users directories to clear up space, and I ended up deleting an windows admin user and some stuff broke before I was able to cancel, but I did a System Restore before that I named "bc_nuke" and everything came back like nothing ever happen, it also helped when I tried to update AMD GPU drivers with their official tool on a, I think at the time, 7 year old computer and it kinda corrupt both it's and intel integrated drivers, used this so I could put my computer in a working condition faster than to remove the drivers and reinstall them while hoping my computer wouldn't freeze up because of the GPU's drivers, it's a laptop that I am still using it, because yes.
Greetings Joe, I have been watching your videos for years and have learned many things. Recently I learned there is a difference between USB C charge cables and data cables. Is your 2017 video about USB C still relevant or is there new information about USB C?
You are very significant in these videos. What do you do as a job? By the way, I've been watching you for over 4 years!
Nice video
Woooo a new vid ! Continue like that joe your amazing 👍👍👍
Edit: Ty joe for your heart first time i recieve a heart from a big youtuber
Unfortunately, the heart is now gone. If you receive a heart on your comment from a channel owner, and edit the comment, the heart is removed from your comment.
@@Eternal_Tech oh )': i didnt know that 😭😭😭
Interesting video. Just FYI, I resetted my PC not a while ago and I have Restore Point enabled by default on C drive.
You should be able to look at existing shadow copies without extra software. Right click any file and choose to view previous versions. At least it was like that in years past. That dialog (at least used to) show both your shadow copies and any copies in file history drove (if configured).
Those clouds on your desktop wallpaper are moving.
I'd like to see you cover how to restore, say windows 10, from a drive image. Where can/should the drive image be stored, how to perform the restoration, etc.
Hay thiojoe I have a little concern, is that when an ade comes up on an app and when try to click of of it it makes a bubble wrap noise like 10 click at once not sure why can you help please thanks your still the best😁💯👍
Is a very important feature I have used it 2x in 10 years but its very useful although I have not used it recently
Haven't used it since the 98/XP days, where it never helped me much. Bsod @ startup was still game over for OS.. And to my experience Windows fixes itself pretty good these days.. + i use OneDrive etc. for backups instead.. and the space for something else..
So not as handy as timeshift in linux etc...(where I break sjitt all the time), but still quite usefull. (and prolly gotten alot better since then...)
Thanx for sharing! 👍
The File History feature is just shadow copies that is ran on a schedule and is still not a replacement to a good backup. We have a couple of companies that we have shadow copy configured to take a snapshot twice a day for quickly restoring preview copies of documents but they also have proper backups in place for times when shadow copy doesn't have the file.
This saved me many times. What do you think about NMAP can you do a video i think your followers will enjoy it
So does system restore changes back to the old version of folder or the pc
Been doing system restore points before @ThioJoe made a video on it.
I can confirm it does remove directories of program files, even more so if it's under affected programs list. I've had that happen to me more than once on multiple computers.
So if you delete a file after the restore point can someone go into that collection of files in system restore and retrieve the file? That could be quite dangerous. (incriminating even!)
I use Paragon BU and Restore. Usually, I back up a whole partition or the OS plus the MS reserved partitions.
What about when the VSS file becomes corrupted and you don't know until it's too late? Is there a way to fix that? Is there a way to ensure the integrity of the VSS files over time?
If I'm not mistaken I think the biggest reason for a VSS file to become corrupted is a faulty hdd/ssd. By this time you should think about replacing your drive and use a external to do a clone backup. Clone back-ups to a external is still the best form of recovery by a long shot.
For me system restore was actually enabled by default, despite me only finding out about it a couple months ago. I installed Windows 10 in July of last year.
Essentially it's a snapshot at the file system level. It has been there since shadow copy was introduced.
It could be theoretically used to do backups, which is exactly what that half backed, half deprecated "File history" feature in Windows 10 is supposed to do.
However since restore can fail and in typical Microsoft fashion the user doesn't need to know what's happening under the hood, Microsoft themselves suggest using third party programs to achieve the same.
ok I got a question. I got windows 10, in system and security it says back up and restore windows 7. I watched a video on several ways to see which version I'm running,say am
Hi I have an older MacBook Pro which had El Capitan on it well my son had the computer “wiped” so there’s no OS loaded on it
My question is can El Capitan be added I’m told by local tech guys no
Apple doesn’t support older OSs
Is that true?
Anyway of loading it ?
Cool!
what is the size difference between orignal file size and shadow file size ?
If memory serves me right. System Restore was first seen as a feature in Windows ME
I remember having a bad time with viruses that actually link themselves into the restore points in order to keep infecting your PC if you ever tried to restore after getting infected. I would prefer that people use third party cloning and backing up data, rather than using Restore, even if they want to do it after an installation.
Can you make a video about Drivedroid (or any other app) and how to install windows using your smartphone as a usb drive?
Every time I've used system restore, it's always failed. My most recent build, I was installing a game on steam and it needed to install an oldd direct X and some other windows files for running programs, it ended up messing my system up, this was odd to me because I've done this many times and this is the first time it messed it up. I thought it would be a quick fix with system restore but it just kept failing for some reason, so I just ended up reinstalling the whole OS again.
As someone who bought a QLC boot drive by mistake, I have to wonder if the reason restore points are off by default is an attempt to reduce writes on SSDs.
Thanks so much
It's only worked for me once, and that was on XP on a fresh install. Installed a bad driver that made the system sluggish and unstable. Couldn't roll back the driver, just kept throwing up errors.
How do you round the corners of top bar of files and applications?
Anyone? Thanks.
Should you do a system restore in safe mode if you got a virus online?
I'm a big fan of the System Restore feature. I regularly create restore points. For the first time ever I saw a strange drive that looks like a network drive path. How can I get rid of this strange drive?
oo im curious to see what it has
Reboot Restore RX or Toolwiz Time Freeze can both be used as tools to keep systems in a stable state when installing unknown software.
Agreed, I use RollBack Rx regularly on my testing machine. Malware could also uninstall uninstall these but I often find that these snapshots are a lot more reliable than the built-in ones.
For me it was already on and I dint ever tur it on and I installed windows when my pc got done being built on July 27 2022 and I’m able to select the whole drive
Never had to use it, but I thought I noticed my own restore points would be deleted. I now just clone the drive - which I'm overdue.
i love restore points
While trying to understand why some people have issues when restoring in both Windows 10 and Windows 11, and complain in my server or in my dms, I've found out 2 possible reasons (not all of them, unfortunately) during my tests:
1) Seems like OneDrive can actually interfere with the restore process. Yes, OneDrive. There is some kind of permissions issue whenever System Restore tries to restore OneDrive, but I still don't know what causes it since it doesn't always happens on every single install. Erasing OneDrive completely from both the OS in the current status and also in the snapshot will fix this particular problem (registry changes not required). Deleting OneDrive from the snapshot was suggested by another tweaker but, in my tests, it worked just fine without erasing OneDrive from the snapshot.
2) When restoring a drive that is encrypted with BitLocker, the restore will fail if allowedinmemorysettings is different than 0x15000075. You can use bcdedit /enum to check the current value and use bcdedit /set allowedinmemorysettings 0x15000075 to restore it.
Hope this helps some people having trouble with System Restore.
why my system restore points all suddenly disappeared in windows 10? I checked there were few restore points a few days ago
My laptop randomly became slow and running videos very slow the problem is not cpu or ram and memory i'm going crazy i don't know what the reason is can someone help me
I find sys restore often fails in normal windows mode (even with antivirus, firewall & anything else that might interfere with it shut down), but it usually works okay in safe mode. As a result I now always just go into safe mode & run it from there.
Try restoring from windows recovery of a usb stick. It much better than disabling your antivirus and it almost always results in a successful restore most of the times.
If you have bitlocker prepare your recovery key. Most people don't have it since their device came with bitlocker fully set up. I was trying to change a forgotten password for a friends laptop last year and I couldn't do it because the drive was encrypted. The recovery environment became much more useless with the introduction of drive encryption (because most people don't have their key) .
hello thio
my windows 10 will not keep the up dates
my pc down loads them for 1 1/2 hours then after that it keeps doing uninstalling updates
HELP THIO HELP
ian
It appears that your installation of Windows 10 is corrupt. Therefore, you may wish to scan the system files and restore the corrupted files. To do this, open up an elevated (Run as Administrator) command prompt and enter the following:
*DISM.exe /Online /Cleanup-image /Restorehealth*
When this is done, then run the following command:
*sfc /scannow*
When this is done, restart the computer and then run Windows Update again.
I had a piece of software I needed to install today and I did a restore point before i installed it, and yes my system restore is turned on ,
both my windows 10 Pro & 11 Pro. After installing said software I did a system restore point before I installed that software. After waiting some time it came up System wasn’t able to restore. So I went to the 11 Pro installed a different software and before I did I created a restore point as well.
So it did the same thing on the Windows 11 Pro. So if anyone has any answers hit me up.
It actually just saved me a few hours ago, my user account was showing after i modified some stuff.
More times than not SYSTEM RESTORE has saved me from the nightmare of reinstalling Windows and the gazillion OEM software I added on over the years. It's even considerate enough to warn me about what programs it will not restore. So 3 cheers for SYSTEM RESTORE as far as I'm concerned.
what i coincidence i did my FIRST system restore ever on my computer because of some themes lagged my pc and completely freezes it
Back in the day I used system restore....nowadays i have backups, cloud storage so if i really suspect something heinous I just do a clean install from the get go.