I. System Restore Overview The emergence of Windows System Restore allows users to restore a faulty system to a normal state without reinstalling the system. In normal times, the System Restore tool automatically runs in the background and monitors system files and changes to certain application files and creates restore points. Usually, the system restore program automatically creates a restore point every day, but when the system has the following events triggered, the system restore program will automatically create a restore point: a. application installation; b. automatic update installation; c. in Microsoft backup tool Before resuming work; d. Install uncertified drivers; e. System recovery; (When the user restores the system using the system recovery program to a manually created restore point that is not working properly, the recovery can be easily cancelled, and Select another restore point to recover.) f. Administrators can manually create system restore points. Windows System Restore requires 200MB of free hard disk space to store the data needed for the restore point. When the free space is less than 200MB, the system restore automatically shuts down until there is so much space. When the System Restore program creates a restore point, it creates a simple image of the registry and some key dynamic data stores, makes an entry to the restore point log, and saves a copy of the registry and data as an archive file. The archive file periodically collects restore points so that users can select the appropriate restore point for system restore when needed. When the space of the archive file is fixed, there will always be no way to save more restore point data. At this time, the system overwrites the previous restore point and makes room for the new restore point data, which is why we default to the situation. The restore point that was made a long time ago will disappear automatically later. This storage method is called FIFO (first in/first out). Then, after the Windows system restore, what data is restored, and which data has not been restored? Here we look at the restored data: 1. Registry; 2. Local configuration files (Profiles); 3. COM + database; 4. Windows file protection (WFP.dll) cache; 5. WMI database; 6. IIS Metabase; 7. The file saved by default in the above archive file. Data not to be recovered: 1.DRM settings; 2.WPA settings; 3.SAM; 4. Files not saved in the above archive file; 5. Items listed in the registry Filesnottobackup and KeysnottoRestore; 6. User configuration The data store created by the user in the file; 7. Redirect the contents of the folder. In addition, the user cannot specifically specify which one or more files to be backed up in the restore point data of the default archive file, or all of them will be restored, or will not be restored. Second, the use of system restore
1) Method of creating a restore point: 1. Click Start -> All Programs -> Attachments -> System Tools -> System Restore to open the System Restore program, as shown First, select the "Create a restore point" radio button and click "Next" to continue. Figure 1. 2. At this time, you need to enter the description of the restore point, as shown in Figure 2. When the system needs to be restored and the restore point is selected, the description appears in the corresponding place to distinguish it from other automatic or manual restore points. Click the "Create" button to continue. Figure 2 3. The "Restore Point Created" dialog box appears, and the time of creation, the name of the restore point (description) is displayed. Click "Home" to enter the main page shown in Figure 1. Click "Close" to close the system restore utility. program. 2) Select the restore point for system restore: 1. Click Start -> All Programs -> Attachments -> System Tools -> System Restore to open the System Restore program, as shown in Figure 3, select "Restore My Computer to an earlier time "Radio" box, and then click "Next" to continue. Figure 3 2. The "Select a Restore Point" dialog box appears, as shown in Figure 4. Since the system will automatically create a restore point when it is triggered or when a specific event is triggered, the date of the restore point will be bold in the calendar on the left. Indicates that clicking on an ideal date in bold will display a description of all the restore points in the selected date in the list of restore points on the right, select an ideal restore point, and click "Next" to continue. Figure 4 3. The "Confirm Restore Point Selection" dialog box appears, where the system highlights the selected restore point in red and prompts to close all remaining applications, as shown in Figure 5. After all the applications have ended and click "Next", System Restore will begin. System restore is reversible. If you feel regret after the restore, you can use the same method to undo this restore, so I won't go into details here. Figure 5 4. After the computer successfully restores and restarts the computer, if the restore is successful, the "Complete Restore" dialog box will be displayed, telling you that the computer has been successfully restored to a certain restore point, and prompting you if the restore is not Can solve the problem, you can find another restore point to vouch or cancel this restore. After pressing the "Finish" button, the entire system restore work is completely over. Conclusion
Windows XP's system restore feature is reliable and easy to use. This article aims to make new contacts to administrators and superusers of Windows versions with System Restore by providing an overview of system recovery functions and how to use them. Technicians recognize this feature and learn to use it – it's essential to be familiar with how to use it, and in many cases it can reduce the complexity of troubleshooting and make troubleshooting more efficient.