Windows 11 point-in-time restore and System Restore solve different recovery problems. Point-in-time restore returns the entire Windows system drive to a recent snapshot, including local files, applications, settings, passwords, certificates and keys. System Restore primarily rolls back system files and settings while normally leaving personal files unchanged, although its coverage of applications and related user data can vary. Choose point-in-time restore for a serious, recent problem when you can accept losing all local changes made after the snapshot. Choose System Restore for a more targeted driver, application or settings problem, especially when preserving current personal files matters.
How the two restore options differ
Microsoft made point-in-time restore generally available on June 23, 2026. It is a built-in recovery feature for eligible computers running Windows 11 version 24H2 or later with the June 2026 non-security update or a later cumulative update that includes it. Both recovery tools use the Volume Shadow Copy Service, often shortened to VSS, but their restore points have different scopes and should not be treated as interchangeable.
| Feature | Point-in-time restore | System Restore |
|---|---|---|
| What it restores | The full state of the Windows system drive, including Windows, applications, settings and local files | Primarily system files and settings; application and user-data coverage varies |
| Effect on personal files | Local files return to their state at the selected snapshot time | Personal files are normally left unchanged |
| Applications and credentials | Applications, passwords, certificates and keys can all be rolled back | Recent application, driver, update and settings changes may be reversed |
| Restore-point creation | Automatic only, according to a schedule | Automatic during certain system events or manual |
| Default frequency | Approximately every 24 hours | No fixed daily schedule |
| Retention | Up to 72 hours | Subject to available disk space and cleanup |
| Where recovery starts | Windows Recovery Environment only | Windows or Windows Recovery Environment |
| Best use | A serious recent problem affecting much of the computer | A driver, application, registry or settings problem |
For example, restoring a point-in-time snapshot from yesterday can remove an application installed today, but it can also delete a document created today and return an edited local file to yesterday’s version. System Restore may reverse the application or driver change without replacing those personal documents. However, you should still save important work and maintain a separate backup before using either recovery tool.
Point-in-time restore affects only the volume on which Windows is installed. Other internal volumes and external drives are not restored. Files held exclusively in a cloud service such as OneDrive are also unaffected, although Windows may need to reconcile cloud and local copies after the computer reconnects.
Availability and default settings
On an eligible computer, open Settings > System > Recovery and look for Point-in-time restore. Its default state depends on the Windows edition, the size of the operating-system volume and whether the device is managed by an organisation.
- Windows Home: The feature is on by default when the Windows volume is at least 200 GB.
- Unmanaged Windows Pro: It is also on by default when the Windows volume is at least 200 GB, provided the device is not domain joined and is not enrolled in enterprise endpoint management.
- Managed Windows Pro: It is off by default before Windows 11 version 26H2 when the device is domain joined or managed by an organisation.
- Windows Enterprise and Education: It is off by default before Windows 11 version 26H2.
- Smaller Windows volumes: A device with an operating-system volume below 200 GB can support the feature, but an administrator must turn it on manually.
This distinction is important for business administrators. A computer running Windows Pro is not necessarily treated as an unmanaged consumer device. Domain membership or organisational management places it in the managed category for point-in-time restore defaults. An organisation can also use management policy to configure the feature rather than relying on the default for the installed Windows version.
Windows creates point-in-time restore snapshots approximately every 24 hours by default and retains them for up to 72 hours. These periods are targets rather than guarantees. A computer that is turned off, sleeping, recently restarted or short of storage may capture a snapshot later than expected or remove one early.
The default maximum storage limit is 2% of the disk. This is a limit rather than space permanently taken away from normal use. Older snapshots can be removed when they exceed the retention period, VSS reaches its configured limit, free disk space falls to 20 GB or less, or a storage condition prevents VSS from preserving the necessary data.
Home, Pro and Enterprise editions allow the feature to be turned on or off and permit adjustment of its maximum storage use. Microsoft documents a minimum limit of 2 GB and a maximum equivalent to 50 GB. Only Enterprise devices expose frequency and retention choices in the Windows settings interface.
How to configure and inspect restore points
Configure point-in-time restore
- Open Settings.
- Select System, followed by Recovery.
- Select Point-in-time restore, then View or edit.
- Approve the User Account Control prompt. You must be a local administrator.
- Turn on the feature if it is disabled.
- Review the available snapshot times and current disk usage.
- Adjust the maximum storage slider if necessary. Enterprise devices may also display frequency and retention controls.
You cannot manually create a point-in-time restore snapshot. After the feature is enabled, Windows schedules automatic snapshots based on the configured frequency, device activity, boot timing and the age of the most recent snapshot.
Configure System Restore
- Search the Start menu for Create a restore point and open the matching result.
- On the System Protection tab, select the Windows drive and choose Configure.
- Select Turn on system protection.
- Choose the maximum disk space System Protection may use, then select Apply.
- To make a manual restore point, select Create and enter a useful description.
System Protection is not enabled by default on every computer, so check it before assuming that System Restore points exist. Windows can create points automatically before certain significant events when protection is active, but you can also create one manually before installing software, changing a driver or modifying system settings.
To inspect or apply a System Restore point, open Control Panel > Recovery > Open System Restore. Alternatively, press the Windows logo key and R, enter rstrui.exe, and press Enter. Select Show more restore points if necessary, and use Scan for affected programs to see which applications and drivers might be removed or restored.
How to choose and start recovery
Point-in-time restore can be started only from the Windows Recovery Environment. Before proceeding, locate your BitLocker recovery key if the Windows drive is encrypted. You may need that key to unlock the drive. You should also copy any accessible files created after the chosen snapshot to separate storage because those local changes will otherwise be lost.
- Open Settings > System > Recovery and select Restart now beside Advanced startup. You can also hold Shift while selecting Restart.
- In the Windows Recovery Environment, select Troubleshoot > Point-in-time restore.
- Enter the BitLocker recovery key if requested.
- Select a snapshot from before the problem began.
- Review its date, Windows version and warning about later changes being lost.
- Select Continue, confirm the snapshot and select Restore.
Connect a laptop to power and do not switch off the device during restoration. Once Windows starts, check Windows Update because the rollback may have reversed recent security updates. Confirm that essential applications, security software, accounts and sign-in credentials still work.
- Use point-in-time restore when a serious issue began within the previous 72 hours and you accept rolling back local files, applications, settings and credentials.
- Use System Restore for a driver, application or settings problem when current personal files must remain in place, or when you need a point older than three days.
- Use Uninstall Updates when a particular recent Windows update caused the problem and a targeted reversal is available.
- Use a file backup when the problem is a deleted, damaged or overwritten document rather than Windows itself.
- Use Reset this PC or reinstall Windows when no suitable restore point exists or serious corruption remains after less disruptive options fail.
Neither restore feature replaces a proper backup. Point-in-time snapshots are stored on the same computer, retained only briefly and vulnerable to disk failure, storage pressure and VSS errors. System Restore also is not intended to protect personal documents. Keep important files in a correctly configured cloud service, on separate backup storage or in both places, and periodically confirm that the backups can be accessed.
