What Are System Restore Points — and What They Never Save

What a restore point actually captures

When Windows creates a restore point, the Volume Shadow Copy service snapshots a strictly defined set of components: the registry hives, files protected by Windows Resource Protection, and the state of installed drivers. The snapshot lands in the System Volume Information folder at the root of the monitored drive, inside a space budget you configure yourself — and when that budget runs out, the oldest points are quietly deleted first. Creation takes seconds and happens automatically before driver installations, Windows updates, and the setup of many programs that register system components. The very cheapness of points is what makes them weak: they track system state, not data.

Rolling back returns the system halves of the registry and the protected files to the snapshot moment. Programs installed after the point frequently lose their registration and need a reinstall, while their folders — and everything you have ever saved — stay exactly where they were. It is a time machine with a very short, very specific track.

What no restore point will ever save

The expensive misunderstanding runs in both directions. Some people treat a point as a backup and expect it to return deleted photos; others fear that restoring will wipe their documents, and skip the one tool that could have saved them hours of registry archaeology. Points are neither a data safety net nor a data shredder — if ransomware encrypts your documents, a restore may undo its system-level changes and return exactly none of the files.

• Documents, photos, videos — anything in your user folders stays exactly as it is, deleted included
• Data on other drives and partitions, because System Protection is configured per volume
• Browser profiles: passwords, history, cookies and extensions are not part of the snapshot
• Email, chat archives and cloud-sync folders — outside the mechanism by design
• Program folders themselves: a rollback removes registry entries, not the files on disk
• Windows.old and previous file versions, which are separate mechanisms with separate rules

How to use restore points without illusions

First check that System Protection is enabled at all: on a clean Windows 11 install it is often switched off, which makes every conversation about restore points academic until you turn it on for drive C:. Give it a modest budget — a few percent of the disk holds plenty of points — and build the habit of creating one manually before risky moves: a driver swap, an experiment with startup items, a registry edit you found on a forum. Kleaner PRO follows the same model in its own lane, creating a fresh point before every deep clean, because the entire value of a point is that it exists before the damage.

For your actual data, only a real backup counts: File History, a cloud folder, or an external drive. Test that backup once a month — an untested backup is a hope, not a plan. A restore point is insurance for the system's state, not a copy of your life; confusing the two is the surest way to lose the second.

Questions and Answers

Read next