This one has been nagging me for years. Does anyone know of a 100% way to prevent system restore from turning itself back on and creating restore points (preferably that does not cause errors all over the event log). I have already: 1. Turned it off in the System Properties dialog. 2. Disabled it in gpedit.msc + a couple areas saying things like "turn off creation of system restore checkpoints" and "Prevent creation of a system restore point during device activity blah blah blah". 3. Added registry settings "DisableSR"=dword:00000001 = same as gpedit. It still turns itself back on and creates a restore point now and then when changing a driver, doing updates, other random, unknown things? It is infuriating!
i used to block it via ... didn't return Code: HKLM\Software\Microsoft\Windows NT\CurrentVersion\SystemRestore HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore
I have the gpedit.msc one: HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore = "DisableSR"=dword:00000001 but what goes in: HKLM\Software\Microsoft\Windows NT\CurrentVersion\SystemRestore = ??? ("DisableSR"=dword:00000001 again?) Will give these a try for a while and see if it helps.
There is also an alternative way to shut it off : Code: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients] "{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}"=- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "RPSessionInterval"=dword:00000000 Don't forget to make a backup of the {09F7EDC5-294E-4180-AF6A-FB0E6A0E9513} key though, should you wish to restore it for one reason or another. Using this tweak you will notice that it now says System Restore is disabled by System Administrator in the System Protection tab. This should 100% block it from turning itself back on.
you can also use this. in addition to what ap.. said Code: vssadmin delete shadows /all /Quiet powershell Disable-ComputerRestore %SystemDrive%
what about deleting the service ? create a backup before or removing / renaming the dll related to it
What service? Volume Shadow Copy? I've done that and I think it works, but causes event viewer error "spam" because something else is still trying to turn it on.
mb there same dll related to it that if renamed will make it start without making any actions or check what spams
So far so good with the following, but not sure yet, sometimes it takes a while or a driver swap, etc. but it made it through a cumulative update: Edit: NVM, it came back on after installing an audio interface driver. Code: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore] "DisableSR"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR"=dword:00000001 "RPSessionInterval"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients] "{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}"=-
Try the following, taken from "Slimdown10" by Wojciech Keller. Code: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore] "DisableSR"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore] "DisableConfig"=dword:00000001 Microsoft Software Shadow Copy Provider (swprv) service > Manual Delete "SystemRestore\SR" task. It should hopefully be enough for your needs.
@Dude Guyman I just thought I should explain in details my previous post. And this is what I want to add: after reading your thread I remembered that I had always set System Restore OFF since Windows XP, and then Vista, 7, 8 and currently 10 and I've never noticed the fact that you describe of its automatic setting to ON after certain events. Since up to Windows 8 I always only disabled System Restore from System settings GUI and it never automatically set itself to ON then I thought that this kind of behaviour could be a prerogative of Windows 10. On the other hand, since I installed my Windows 10 running the above already mentioned Slimdown10 and System Restore has always remained OFF (just as I want) I thought that it was thanks to the work done by its author on Slimdown10 that setting remained OFF and was not automatically set to ON by some external event. So I went to look at the content of the Slimdown10 batch file and I obtained the settings above that I then suggested to you without wanting to take unfair credit. That's all. It just took much longer to explain...
I understood, yup. I am actually using a "Slimdown10" install. The Slimdown10 settings are the same as the registry settings posted above. The only new one to me, and the one I am testing still is: Code: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR"=dword:00000001 I'm still unsure if the "DisableSR"=dword:00000001 part is even correct on that one. @Dark Dinosaur didn't specify.
@Dude Guyman While I can confirm that never System Restore automatically sets itself to ON here I would like to point out to you that the correct Registry key is the following Code: [ [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore] "DisableSR"=dword:00000001 not
I don't care about the "DisableConfig" setting, just the "DisableSR" ones. I always have to undo the "DisableConfig" one anyway to be able to turn it back off and delete restore points. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore] "DisableConfig"=dword:00000001 is a totally different area than... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR"=dword:00000001 I got the second from post #2 but am not sure if the value is correct...but my guess at "DisableSR"=dword:00000001 has been working (not harming at least) so far and I have seen that value recommended from other sources, meaning the "DisableSR" one in both locations. It's the same place as the "RPSessionInterval" setting though, so maybe that was all he was talking about? This is what I have so far. Some may be old or incorrect, not sure: Code: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore] "DisableSR"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR"=dword:00000001 "RPSessionInterval"=dword:00000000 "RPGlobalInterval"=dword:00000000 "RPLifeInterval"=dword:00000000 "TimerInterval"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SPP\Clients] "{09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}"=-
Mine by default would have had that "SRInitDone" one and nothing else. I do not have the "SystemRestorePointCreationFrequency" one, will add it. I have added or may add: "DisableSR"=dword:00000001 "RPSessionInterval"=dword:00000000 "RPGlobalInterval"=dword:00000000 "RPLifeInterval"=dword:00000000 "SystemRestorePointCreationFrequency"=dword:00000000 "TimerInterval"=dword:00000000
I do not know about your way to reach the above. Here i've IoT Enterprise LTSC 21H2 19044.4412 installing through Slimdown10 and related Registry entries are those I posted above. On the other hand, Sysyem Restore here is absolutely OFF under any circumstances.
Yeah, no idea why mine turns itself back on "randomly". I've had the same issue on every version of Windows 10 from LTSB 1607, LTSC 1809, LTSC 21H2 to Enterprise 22H2 and everything in between. You would think the gpedit.msc "Turn off System Restore = enabled" setting would be final...but noooooooo! It used to turn itself "on" but make no restore points, so seemed to only be graphical, not really on, but lately it has been making actual restore points. I may have fixed it with the above, new registry settings. I won't trust it 100% until I install a few updates and driver changes (several months). I found that and some other similar ones elsewhere...figured I'd throw EVERYthing at it...just in case.