PERSONAL TECH

Point-in-time restore offers a 72-hour escape hatch for stricken PCs

Users with hopelessly borked Windows devices have a new avenue of recovery in the form of point-in-time restore for Windows 11.

The service is designed to restore a Windows 11 PC to its exact state at an earlier point in time and is accessed through the Troubleshoot menu in the Windows Recovery Environment.

According to Microsoft, each restore point covers the operating system, apps, settings, and local files. It is stored locally and automatically deleted after 72 hours or when free disk space falls below 20 GB. New points are created approximately every 24 hours by default, although the interval can be configured.

Like the existing System Restore functionality, point-in-time restore uses the Volume Shadow Copy Service (VSS) to get a device back to a previous state. However, there are differences. Point-in-time restores are scheduled, whereas System Restore requires an event or manual intervention to trigger a restore point. Point-in-time restore mitigates storage impact by using reserved storage and also has a maximum retention period of 72 hours for each restore point.

Point-in-time restore is on by default on devices with an OS volume size of 200 GB or greater and not under enterprise management, such as Windows Home and Pro. It'll be off by default on managed systems until Windows 11 26H2 arrives.

There are some downsides. A restore can only be triggered locally, although Microsoft plans to add remote initiation via Intune in the future. The upshot is that it has limited utility for administrators.

There is also the potential for problems with Outlook, where a data file (.ost) mismatch might occur after a restore, necessitating the deletion or renaming of files, and Windows Recall may be disabled after a restore. Some might argue the latter is more of a feature than a known issue.

"Point‑in‑time restore is an important foundation for the future of Windows recovery," Microsoft said, labeling it part of the company's Windows resiliency initiative. It's been in public preview for some time and is enabled on more than two million devices.

However, nagging questions remain. Why has it taken so long to add this capability to Windows, and why does the operating system allow updates that can leave users needing to restore their PCs in the first place? ®