system restore

Winsage
July 28, 2026
A user on Reddit reported that Windows Explorer was using over 21GB of memory, which can cause performance issues on systems with less than 8GB of RAM. One cause of excessive memory consumption is third-party shell extensions, which can be identified by booting into Safe Mode. A tool called ShellExView can help locate problematic extensions. To create a system restore point, users can press Win + R, type systempropertiesprotection.exe, click Create, enter a description, and click Create. Windows Explorer may also retain large caches of temporary data, leading to high memory usage. To clear temporary files, users can press Win + I, navigate to System > Storage > Temporary files, check the relevant boxes, and click Remove files. They can also manually clean the thumbnail and icon cache by deleting specific files in the %localappdata% directory. Corrupted system files can contribute to high memory usage, and users can run DISM and SFC tools to repair these files by accessing the Terminal (admin) and executing the commands DISM.exe /Online /Cleanup-image /Restorehealth and sfc /scannow.
Winsage
July 23, 2026
Since June 23, Microsoft has been implementing a point-in-time restore feature on Windows 11, which is enabled by default for Home and Pro editions when the system drive exceeds 200 GB. This feature captures a complete snapshot of the machine approximately every 24 hours using the Volume Shadow Copy service, including system, applications, settings, and local files. Users can revert to a previous state in case of issues, but restoring from a snapshot older than 48 hours will erase all changes made since then, except for OneDrive data. The feature retains snapshots for up to 72 hours and reserves 2% of drive space, capped at 50 GB. If free space drops below 20 GB, older snapshots are deleted. Restoration occurs locally through WinRE, and users need a BitLocker recovery key if the drive is encrypted. After a restore, the feature pauses and requires user consent to resume. Snapshots from upgraded editions are not accessible, and only the Enterprise edition allows adjustments to snapshot settings. The feature can be disabled in system settings. It is not a backup solution, and users are advised to maintain separate backups for important files.
Winsage
July 19, 2026
Microsoft has introduced point-in-time restore for Windows 11 users, enhancing the traditional System Restore. This new recovery tool allows users to recover their PCs from software issues, problematic drivers, or faulty updates, even when Windows won’t boot. It uses the Volume Shadow Copy Service (VSS) to automatically generate restore points every 24 hours, which include both system and user files, unlike System Restore. Point-in-time restore manages storage by deleting restore points after 72 hours and integrates seamlessly into Windows Settings, being activated by default for volumes over 200GB. Users with smaller volumes must activate it manually. It also incorporates Reserved Storage to ensure restore points do not consume regular disk space. The feature is available on Windows 11 Home and Pro editions with the installation of the optional Preview Update KB5095093. Users can access point-in-time restore through Windows Settings under System > Recovery, and initiate recovery via the Windows Recovery Environment (Windows RE).
Winsage
July 16, 2026
Microsoft has enhanced Windows 11 with various recovery tools that allow users to address system issues without needing to perform a complete reinstall. Key features include: - Reset This PC: Offers two options: "Keep my files" (reinstalls Windows while retaining personal files) and "Remove everything" (wipes the computer before reinstalling). Users can choose between a Local reinstall or Cloud download. - Cloud Rebuild: Accessible via the Windows Recovery Environment (WinRE), it reformats the OS partition, downloads a fresh Windows image, and restores the original setup without relying on local recovery images. - Go Back (Rollback): Allows users to revert to a previous installation after an upgrade if issues arise, utilizing the Windows.old folder, but is time-sensitive (files purged after about ten days). - Uninstall Updates: Enables users to remove recent updates that may cause problems without a full system reset. - System Restore: Creates restore points to revert to a stable state without affecting personal files. - Startup Repair: A tool in WinRE that scans for and fixes common startup issues. - Safe Mode: Starts Windows with essential drivers and services to troubleshoot problems. - Quick Machine Recovery: Automatically connects to Microsoft's recovery service to download fixes if Windows fails to start due to a faulty update or driver. - Point-in-Time Restore: Automatically reverts the system to a previous working state when updates fail. Other tools include the Windows Recovery Environment (WinRE), Recovery Drive for bootable USB access, Command Prompt, Startup Settings, and the Windows Backup app for restoring settings and files. The legacy Backup and Restore (Windows 7) tool is still available for creating backups and full system images.
Winsage
July 15, 2026
Microsoft unveiled its July 2026 Patch Tuesday update, identified as KB5101650, for Windows 11 versions 25H2 and 24H2. The update introduces the Point-in-Time Restore (PITR) feature, allowing users to take full backups and create snapshots every 4 to 24 hours, with snapshots retained for a maximum of 72 hours. PITR can restore local files and applications. Users can now pause Windows updates for up to 35 days. Other enhancements include discreet widget operation, optimized taskbar notifications, faster File Explorer startup, quicker disk image mounting, improved Bluetooth functionality, reduced eye strain through screen tinting, and enhancements in voice control and input capabilities. Not all features will be available immediately after installation, with security-related improvements being deployed universally.
Winsage
July 14, 2026
Microsoft has introduced a point-in-time restore feature on its Microsoft Learn platform, allowing users to revert Windows systems to a previous state to protect against data loss and system errors. The company is also addressing critical security vulnerabilities, including CVE-2026-20833 and CVE-2026-50656, by working on patches and updates to enhance security.
Winsage
July 10, 2026
On July 19, 2024, at 12:09 AM EDT, 8.5 million Windows PCs, including devices from half of the Fortune 500 companies and the leading U.S. cybersecurity agency, experienced a catastrophic failure due to the Blue Screen of Death, leading to reboot loops. IT teams had to physically access each machine to resolve the issue by removing a problematic CrowdStrike file. CrowdStrike released an automated remediation tool three days later, on July 22. Microsoft pledged to improve Windows' resilience, introducing Quick Machine Recovery nearly a year later. Microsoft unveiled a new recovery feature called Point-in-time Restore, which allows users to revert their PCs to a previous state when functioning correctly. This feature generates daily snapshots of the entire system using the Volume Shadow Copy Service, retaining the three most recent snapshots and consuming minimal disk space (typically 2% of the system drive). Users can access the restore point through the Windows Recovery Environment after three failed startups, with the restoration process taking 30 to 45 minutes. Point-in-time Restore differs from System Restore, which creates less comprehensive snapshots and preserves document files. Point-in-time Restore is automatically enabled for systems with at least 200 GB drives in retail or OEM editions of Windows Home or Pro, while it must be manually activated for smaller drives. In Windows 11 Enterprise edition, it is disabled by default and may require administrative approval to activate. The feature intelligently manages disk usage, discarding older snapshots as needed, but users must enter a BitLocker recovery key if their system drive is encrypted. Users are warned about the risk of losing unsaved work when applying a restore snapshot, and reversing the operation is not straightforward.
Winsage
July 7, 2026
Microsoft has rolled out a point-in-time restore feature for Windows 11, available to all client PCs running version 24H2 and later, including Enterprise, Pro, and Home editions. This feature automatically creates local restore points every 24 hours, stored for up to 72 hours and limited to 2% of disk space. It is enabled by default on Windows Home and unmanaged Windows Pro devices with at least 200 GB OS volume, while it is disabled by default on Windows Enterprise, Education, and organization-managed Windows Pro systems. Users can initiate restores locally via the Windows Recovery Environment, but any changes made after the selected restore point will be lost. Microsoft plans to introduce remote initiation capabilities through Intune recovery. The upcoming Windows 11 version 26H2 will maintain a low-disruption update experience, allowing devices on versions 24H2 or 25H2 to transition via a small enablement package. Devices running version 26H1 cannot upgrade directly to 26H2.
Winsage
June 24, 2026
Microsoft has introduced a new feature called point-in-time restore for Windows 11, which allows users to easily revert to previous system states. This feature is available across all editions of Windows 11, including Enterprise, Pro, and Home, and automatically generates restore points every 24 hours. Point-in-time restore captures a comprehensive snapshot of the system, including the operating system, applications, configurations, settings, and local files. It is enabled by default for Windows Home and Pro devices unless under enterprise management, while enterprise-managed systems require Windows 11 version 26H2 for activation. Systems with an OS volume smaller than 200GB have this feature disabled by default. Unlike the traditional System Restore, which requires manual image capture and does not include user files, point-in-time restore integrates user data and can be managed remotely by IT professionals. During its public preview, over two million devices enabled the feature, allowing Microsoft to refine it based on user feedback.
Search