Windows recovery environment Archives

Winsage

August 18, 2026

Microsoft is working on a major WinRE enhancement for IT admins in Windows 11

Microsoft has introduced updates in Windows 11 Insider Preview builds, including the removal of the Drag Tray experience and the discontinuation of the Windows Management Instrumentation Command-line (WMIC) tool. The Windows Recovery Environment (WinRE) has been upgraded to improve connectivity options, allowing users to automatically utilize eligible saved Wi-Fi profiles, including those with certificate-based authentication. Previously, WinRE's networking capabilities were limited, requiring manual connections for certain networks. This enhancement is currently being rolled out to Windows 11 Beta Insiders and is expected to be available to broader Windows 11 version 26H2 users later this year.

Winsage

August 13, 2026

Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows

Nightmare Eclipse has released a new zero-day exploit called ShieldBreak, which can bypass Microsoft's RoguePlanet patch (CVE-2026-50656) and allow attackers to gain SYSTEM privileges on fully patched Windows 10, Windows 11, and Windows Server systems. The exploit has been confirmed by security expert Kevin Beaumont, who provided detection methods for it. ShieldBreak is the tenth zero-day from Nightmare Eclipse since April and was released shortly after Microsoft's monthly Patch Tuesday. The exploit allows local privilege escalation and has a 100% success rate on the latest version of Windows 11 and Windows Server 2025, while Windows 10 remains vulnerable. Microsoft is aware of the vulnerability and is investigating it, emphasizing the importance of coordinated vulnerability disclosure. Previous exploits from Nightmare Eclipse include LegacyHive and GreatXML, with earlier vulnerabilities having been patched but recent ones still unaddressed. Microsoft had threatened legal action against Nightmare Eclipse in May but later reconsidered its approach to vulnerability disclosure.

Winsage

August 2, 2026

Microsoft released Windows 11 KB5102117 update for OS recovery

Microsoft released a Windows 11 preview update, KB5101684, which improves RAM consumption and addresses performance issues on minimum-spec PCs. Alongside this, a dynamic update was introduced to enhance the Windows Recovery Environment (WinRE) and improve the installation experience. The dynamic update packages are meant for existing Windows images before deployment, preserving essential components during upgrades. The specific recovery update, KB5102117, enhances WinRE for Windows 11 versions 24H2 and 25H2, with the WinRE version post-installation being 10.0.26100.8971. Both updates will be automatically downloaded and installed via the Windows Update channel.

Winsage

July 19, 2026

The 200GB catch hiding in Windows 11’s new recovery feature

Microsoft has introduced point-in-time restore for Windows 11 users, enhancing the traditional System Restore. This new recovery tool allows users to recover their PCs from software issues, problematic drivers, or faulty updates, even when Windows won’t boot. It uses the Volume Shadow Copy Service (VSS) to automatically generate restore points every 24 hours, which include both system and user files, unlike System Restore. Point-in-time restore manages storage by deleting restore points after 72 hours and integrates seamlessly into Windows Settings, being activated by default for volumes over 200GB. Users with smaller volumes must activate it manually. It also incorporates Reserved Storage to ensure restore points do not consume regular disk space. The feature is available on Windows 11 Home and Pro editions with the installation of the optional Preview Update KB5095093. Users can access point-in-time restore through Windows Settings under System > Recovery, and initiate recovery via the Windows Recovery Environment (Windows RE).

Winsage

July 16, 2026

Windows 11 has more recovery options than ever, and here’s exactly when I would use each one to fix a broken PC

Microsoft has enhanced Windows 11 with various recovery tools that allow users to address system issues without needing to perform a complete reinstall. Key features include: - Reset This PC: Offers two options: "Keep my files" (reinstalls Windows while retaining personal files) and "Remove everything" (wipes the computer before reinstalling). Users can choose between a Local reinstall or Cloud download. - Cloud Rebuild: Accessible via the Windows Recovery Environment (WinRE), it reformats the OS partition, downloads a fresh Windows image, and restores the original setup without relying on local recovery images. - Go Back (Rollback): Allows users to revert to a previous installation after an upgrade if issues arise, utilizing the Windows.old folder, but is time-sensitive (files purged after about ten days). - Uninstall Updates: Enables users to remove recent updates that may cause problems without a full system reset. - System Restore: Creates restore points to revert to a stable state without affecting personal files. - Startup Repair: A tool in WinRE that scans for and fixes common startup issues. - Safe Mode: Starts Windows with essential drivers and services to troubleshoot problems. - Quick Machine Recovery: Automatically connects to Microsoft's recovery service to download fixes if Windows fails to start due to a faulty update or driver. - Point-in-Time Restore: Automatically reverts the system to a previous working state when updates fail. Other tools include the Windows Recovery Environment (WinRE), Recovery Drive for bootable USB access, Command Prompt, Startup Settings, and the Windows Backup app for restoring settings and files. The legacy Backup and Restore (Windows 7) tool is still available for creating backups and full system images.

Winsage

July 12, 2026

We explain why Cloud Rebuild is one of Windows 11’s most important new features, and how it lets you recover your PC without a USB drive or complicated steps

Microsoft has introduced a new recovery feature for Windows 11 called Cloud rebuild, currently in preview mode. This feature allows users to restore their systems by downloading the Windows 11 image and necessary device drivers directly from Windows Update, eliminating the need for USB installation media or custom recovery images. OneDrive remains unaffected during the recovery process, enabling users to restore their files after signing back in. For organizations, devices managed via Windows Autopilot and Microsoft Intune can automatically re-enroll and restore settings post-rebuild. However, Cloud rebuild requires compatible hardware, a healthy Windows Recovery Environment, and internet connectivity. Currently, it can only be initiated from the Windows Recovery Environment or an elevated Command Prompt, with remote deployment not yet supported. The feature aims to simplify recovery processes and reduce reliance on USB drives, although it is not intended to replace existing recovery tools.

Winsage

July 10, 2026

Microsoft’s new Windows 11 recovery tool is the ultimate Undo button

On July 19, 2024, at 12:09 AM EDT, 8.5 million Windows PCs, including devices from half of the Fortune 500 companies and the leading U.S. cybersecurity agency, experienced a catastrophic failure due to the Blue Screen of Death, leading to reboot loops. IT teams had to physically access each machine to resolve the issue by removing a problematic CrowdStrike file. CrowdStrike released an automated remediation tool three days later, on July 22. Microsoft pledged to improve Windows' resilience, introducing Quick Machine Recovery nearly a year later. Microsoft unveiled a new recovery feature called Point-in-time Restore, which allows users to revert their PCs to a previous state when functioning correctly. This feature generates daily snapshots of the entire system using the Volume Shadow Copy Service, retaining the three most recent snapshots and consuming minimal disk space (typically 2% of the system drive). Users can access the restore point through the Windows Recovery Environment after three failed startups, with the restoration process taking 30 to 45 minutes. Point-in-time Restore differs from System Restore, which creates less comprehensive snapshots and preserves document files. Point-in-time Restore is automatically enabled for systems with at least 200 GB drives in retail or OEM editions of Windows Home or Pro, while it must be manually activated for smaller drives. In Windows 11 Enterprise edition, it is disabled by default and may require administrative approval to activate. The feature intelligently manages disk usage, discarding older snapshots as needed, but users must enter a BitLocker recovery key if their system drive is encrypted. Users are warned about the risk of losing unsaved work when applying a restore snapshot, and reversing the operation is not straightforward.

Winsage

July 8, 2026

Windows 11’s new Cloud Rebuild can fix your PC even when it won’t boot

Microsoft has introduced a new recovery feature for Windows 11 called Cloud Rebuild, aimed at simplifying the restoration of non-booting PCs without the need for physical recovery drives. Announced at the Ignite 2025 conference, it is available in the Windows 11 Insider Experimental Preview Build 26300.8772. Cloud Rebuild allows users to restore their PCs to a clean state by performing a full OS reinstall, downloading the necessary Windows image and drivers directly from Windows Update. This feature is designed for recovery scenarios and can be accessed even when the system is unresponsive. It may first attempt a Quick Machine Recovery, and if that fails, it will transition to a cloud-based reinstallation. To use Cloud Rebuild, users must navigate to Troubleshoot → Recovery and Uninstallation → Cloud Rebuild within the Windows Recovery Environment (WinRE), and it will erase all existing files on the computer. Currently, it is primarily aimed at system administrators, and users of Windows 11 Home may consider upgrading to Windows 11 Pro to utilize its features.

Winsage

July 8, 2026

You can soon restore Windows 11 from scratch even if it can’t boot up

Microsoft is previewing a recovery tool called Cloud rebuild for Windows 11, allowing users to reinstall the operating system from scratch even if it is unresponsive. This feature provides a clean version of Windows, free from previous drivers and files, and automatically includes the latest updates. Unlike the existing "Reset this PC" feature, Cloud rebuild does not retain personal files, settings, or applications, necessitating independent restoration of these elements. Users can test Cloud rebuild with the latest Windows 11 insider build (Preview Build 26300.8772 or higher) by navigating to Settings > System > Recovery. The timeline for broader availability is uncertain and depends on testing feedback. Other recovery options include recovery drives, resets, Quick Machine Recovery, and a preview feature called Point-in-Time restore.

Winsage

July 8, 2026

You can soon restore Windows 11 from scratch even if it can’t boot up

Microsoft is previewing a recovery tool called Cloud rebuild for Windows 11, which allows for a clean reinstallation of the operating system even if it fails to boot. This tool automatically downloads the latest updates and drivers, eliminating the need for manual installations after recovery. Unlike the existing "Reset this PC" feature, Cloud rebuild does not retain personal files, settings, or applications, requiring users to restore these independently. To use Cloud rebuild, users need the latest Windows 11 insider build (Preview Build 26300.8772 or higher) and must follow specific steps in the Windows Recovery Environment. The timeline for broader availability of Cloud rebuild is uncertain, depending on ongoing testing and feedback. Other recovery options in Windows 11 include recovery drives, reset functions, Quick Machine Recovery, and a testing feature called Point-in-Time restore.