How to Use System Restore to Roll Back Windows 11

What a rollback changes — and what it leaves alone

A restore unwinds the system state to the chosen point: the registry, system files, drivers and Windows updates that arrived after the point are reverted, and programs installed after it will typically stop working, because their registry entries and system-level components disappear while their leftover folders stay. Always read the Scan for affected programs list before confirming — it names both the programs and drivers that will be removed and the ones that will be restored.

Your files are outside the snapshot by design. Documents, photos, downloads, browser history and passwords are not reverted; a browser profile lives in AppData, not in the registry hives System Restore touches. The rollback also does not free disk space or remove malware that lives in user folders — a fact ransomware authors exploit, since many strains delete shadow copies precisely to cut off this escape route.

• Registry — reverted, including most system and application settings
• System files, drivers and Windows updates installed after the point — removed
• Programs installed after the point — usually broken; plan to reinstall them
• Personal files, browser profiles, passwords — untouched
• Free disk space and junk in user folders — unchanged
• Malware in user folders and browser extensions — survives the rollback

Running the rollback

Press Win+R, type rstrui and hit Enter — or open Create a restore point in Start search and click System Restore. In the wizard, pick a point; the Show more restore points checkbox reveals older ones hidden by default, and points created automatically before updates and driver installs are marked as such. Click Scan for affected programs, read both lists, then Next, Finish, and Yes to the warning — the machine reboots, applies the snapshot and reboots again, typically 10–15 minutes on an SSD.

If Windows boots only to a black screen or loops, reach the same wizard from outside: hold the power button to interrupt boot three times, and Windows 11 offers Automatic repair → Advanced options, or boot from a recovery drive; then Troubleshoot → Advanced options → System Restore. The wizard is identical, and it also rescues you when a bad driver or update broke the boot chain — that scenario, not general slowness, is what the feature is for.

Undoing, redoing and follow-up

A restore is itself reversible: run rstrui again immediately afterwards and you will find Undo System Restore offered, which returns you to the pre-restore state. The practical follow-ups after a success: reinstall the programs the wizard removed, re-check Windows Update — the updates you rolled back will be re-offered, so pause updates if the point existed specifically to escape a bad one — and create a fresh restore point once the system is stable, since old points age out and are deleted as the quota fills.

Two habits keep the safety net real. First, verify that protection is enabled for drive C: — a clean Windows 11 install often ships with System Restore disabled, and there is nothing to roll back to until you switch it on. Second, remember that a restore point is a system snapshot, not a backup: for files that matter, keep a copy on a separate drive or in the cloud. The rollback fixes what broke; the backup fixes what the rollback cannot.

Questions and Answers

Read next

All articles · FAQ