Point-in-time restore for Windows 11 is now generally available



 Windows IT Pro Blog:

When a Windows PC experiences an unexpected issue, every minute of downtime matters. Devices are constantly evolving through updates, apps, policies, drivers, and user activity, which can make recovery complex. For IT teams, getting users back to work often means time-consuming troubleshooting, or full rebuilds that take hours.

Today, we’re excited to announce the general availability of point‑in‑time restore for Windows 11 new built-in recovery capability designed to recover in minutes instead of hours, with confidence, by safely rolling a device back to a previous state. Available in Windows Enterprise, Pro and Home SKUs, point-in-time restore provides admins and employees a quick, built‑in ability to go back in time to a moment before the issue occurred.

This release marks an important step forward in Windows recovery and resilience and reflects what we’ve heard consistently from Windows users and IT admins: recovery should be reliable, simple, and easy to use when it matters most.

bS00NTA4MTAxLWVta21yNg

Point-in-time restore shown in the Troubleshoot menu for Windows Recovery Environment (Windows RE)

What is point‑in‑time restore for Windows 11 PCs?

Point‑in‑time restore automatically captures comprehensive restore points on a predictable cadence and stores them locally on the device.

With point‑in‑time restore, a device can be restored to the exact system state captured earlier, including:
  • Windows OS
  • Installed applications
  • System and app configurations
  • Settings
  • Local user files
Key characteristics:
  • Automatic and predictable: Restore points are captured on a recurring schedule (default: every 24 hours), so recent recovery points are already available if an issue occurs.
  • Fast, full‑system recovery: Restore the entire system to a previous state in minutes*, minimizing user and business impact.
  • Designed for real‑world disruptions: Useful for both one‑off device issues and wider incidents affecting many machines, such as a problematic updates, driver regressions, app corruption, configuration errors or other user or admin-initiated changes that result in system instability.
  • Built into Windows 11: Configuration is available within system settings, and restore operations are initiated from Windows RE, providing a trusted recovery path even when the Windows PC won’t boot.
*Note: Restore time is dependent on several factors, such as changes that have occurred on the system since restore point capture and system performance.

Point‑in‑time restore is part of Windows resiliency, focused on helping organizations prevent, manage, and recover from PC incidents more effectively. Check out the click-through demo to see the configuration and restore experience. 

How is this different from System Restore?​

You may be wondering how point‑in‑time restore compares to System Restore. While both features leverage Volume Shadow Copy Service (VSS) under the hood, point‑in‑time restore is more comprehensive and is built for modern Windows PCs management and recovery.

Point-in-time restoreSystem Restore
Restore pointsAutomatic, configurable cadence; user files are included in restore pointEvent-triggered or manual only; user files are excluded from restore point
ReliabilityStrict retention and cleanup policiesNo retention limits
User experienceIntegrated in system settingsLimited to control panel
Storage impactMinimizes storage impact by integrating with reserved storage*Higher impact to storage space
ManagementWill support robust remote management capabilitiesLimited remote management capabilities
*Note: Reserved storage is a Windows feature that sets aside a portion of disk space for successful update installation. It helps ensure that updates, temporary files, and system processes can run reliably, without requiring users to free up space.

How does this feature in Windows 11 compare to point-in-time restore for Windows 365?​

Some of you are already familiar with point‑in‑time restore for Windows 365 Enterprise, which protects Cloud PCs. While these features share the same goals of fast recovery and minimal downtime, they are optimized for different environments.

Each solution is purpose‑built for its environment, and organizations may use both depending on device types.

Windows ClientWindows 365
Feature enablementCan be enabled or disabledAlways on
Restore point retentionUp to 72 hoursUp to 1 month
Restore point typesShort-term onlyShort-term, long term, and manual
Restore point sharingNo sharing, restore points remain localSupport sharing across Windows 365 and Azure Cloud
Restore speedLikely faster due to local storage of restore pointSpeed is affected by network latency and bulk vs. single restores
Storage constraintsBound by physical disk limitsScalable, cloud storage

What’s included in general availability (GA)?​

Since its initial public preview, point-in-time restore has been enabled on over 2M devices and the feature has continued to mature based on feedback and real‑world testing. GA signals that point‑in‑time restore is ready for production use and to become part of your Windows recovery toolkit.

Highlights in the GA release include:
  • Availability for all users on consumer and commercial editions of Windows 11
  • CSPs for remote configuration
  • Integration with system reserved storage to minimize local storage impact
  • Visibility into restore points on the system and their disk usage
  • Consistency in settings across feature updates and integration with OneSettings
  • Updated documentation and guidance

Configuring point-in-time restore​

Configuration defaults for general availability are outlined below:

ConfigurationDefaultOptionsEditions eligible to configure
Feature On/OffSee belowOn, OffHome, Pro, Enterprise
Restore point frequencyEvery 24 hours4, 6, 12, 16, 24 hoursEnterprise only
Restore point retention72 hours4, 6, 12, 16, 24, 72 hoursEnterprise only
Maximum usage limit2% of diskPercent of disk (min 2 GB, max 50 GB equivalent)Home, Pro, Enterprise

Point-in-time restore is on by default on some systems not under enterprise management:
  • Windows Home edition devices
  • Windows Pro edition devices that are not domain joined and not enrolled in enterprise endpoint management
Point-in-time restore is off by default, until Windows 11, version 26H2 on some enterprise-managed systems:
  • Windows Enterprise and Education edition devices
  • Windows Pro edition devices that are domain joined or managed by an organization
*Note: Only devices with an OS volume size of 200GB or greater, will have the feature on by default. The feature will be off by default on devices with OS volume size below 200GB, but admins can turn the feature on if desired.

Point-in-time restore can be configured in system settings: System > Recovery > Point-in-time restore. Only local admins can view or edit point-in-time restore settings on their system.

bS00NTA4MTAxLUtVbTA0dg

Point-in-time restore settings page in System > Recovery

Important considerations before you restore​

Point‑in‑time restore is a powerful recovery tool, and it’s important to understand its behavior and impact:
  • Data loss: Any changes made after the selected restore point including files, apps, and settings will be lost. Cloud data is not affected but may require resync. Microsoft recommends storing data in the cloud.
  • Local storage: Restore points are stored locally and require sufficient disk space. Older restore points are automatically removed when limits are reached.
  • BitLocker protection: A BitLocker recovery key is required when restoring encrypted devices.
For detailed requirements, limitations, and best practices, we strongly recommend reviewing the documentation.

Restoring a device​

Currently, a restore can only be triggered locally by the user when the device is in Windows RE. The steps to perform a point-in-time restore are below:
  1. In Windows RE select Troubleshoot > Point-in-time restore
  2. Enter Bitlocker recovery key
  3. Select a restore point to restore PC to the exact state it was at the time of the restore point
  4. Acknowledge the risks and limitations associated with this feature by selecting Continue
  5. Review the restore point selection, OS version and warning of data loss and select Restore to start the restore process
*Note: Microsoft has announced plans to enable remote initiation in the future, through Intune recovery, giving organizations a more scalable way to restore devices when that capability becomes available.

Start using point‑in‑time restore today and provide feedback​

Point‑in‑time restore is now generally available on Windows 11 Client PCs on versions 24H2 and later.
Learn more and get started: point-in-time restore for Windows 11 Microsoft Learn.

We strongly encourage you to share feedback through Feedback Hub, within Recovery and Uninstall > Point-in-time restore as we continue investing in Windows recovery and resiliency.

Looking ahead​

Point‑in‑time restore is an important foundation for the future of Windows recovery. As part of Windows resiliency, we’ll continue to enhance point-in-time restore and expand recovery options, improving manageability, and reducing the time it takes to get users back to productivity across a broad range of issues.


 Source:

 
Even though I had not enabled Point-in-time restore, my laptop woke itself up at 04:37 and did something. But 517.5 MB is too small to be of much use.
Is there any way to know the location of this volumeshadow copy backup?

1782289129483.webp

I tried using VSSADMIN

PS C:\Users\Martin> vssadmin list shadowstorage
vssadmin 1.1 - Volume Shadow Copy Service administrative command-line tool
(C) Copyright 2001-2013 Microsoft Corp.

Shadow Copy Storage association
For volume: (C:)\\?\Volume{c33d64ca-495d-4e5a-8d0a-5aeebfa59c61}\
Shadow Copy Storage volume: (C:)\\?\Volume{c33d64ca-495d-4e5a-8d0a-5aeebfa59c61}\
Used Shadow Copy Storage space: 529 MB (0%)
Allocated Shadow Copy Storage space: 832 MB (0%)
Maximum Shadow Copy Storage space: 4.64 GB (1%)


Windows Update did install this today;

June 23, 2026—KB5095093 (OS Builds 26200.8737 and 26100.8737) Preview
 

My Computers My Computers

  • At a glance

    Windows 11 Pro 25H2 26200.8655AMD Ryzen 7 5825U with Radeon Graphics16GB
    OS
    Windows 11 Pro 25H2 26200.8655
    Computer type
    Laptop
    Manufacturer/Model
    Acemagic LX15PRO
    CPU
    AMD Ryzen 7 5825U with Radeon Graphics
    Motherboard
    BIOS CT_BI_AMI_LX15PRO_AB8139_A-004
    Memory
    16GB
    Screen Resolution
    1920 x 1080
    Hard Drives
    SSD 2TB
    Internet Speed
    30 Mbps
    Browser
    Brave
    Antivirus
    Defender/Windows Security
    Other Info
    System 3

    Acer Swift SF114-34 laptop
    OS Windows 11 Pro 26200.8655
    CPU Pentium Silver N6000
    RAM 4GB
    BIOS v1.17
    SSD Samsung 970 EVO Plus SSD 2TB (an upgrade)
  • At a glance

    Windows 11 Pro 23H2 22631.2506Atom N450 1.66GHz2GB
    Operating System
    Windows 11 Pro 23H2 22631.2506
    Computer type
    Laptop
    Manufacturer/Model
    HP Mini 210-1090NR PC (bought in late 2009!)
    CPU
    Atom N450 1.66GHz
    Memory
    2GB
    Browser
    Brave
    Antivirus
    Webroot
3. I keep my Macrium backup files on a removable SSD that is normally not connected to my PC. With this new dynamic backup should I give up making Macrium backups?
4. Or should I disable this new feature and just continue my usual routine of making Macrium backups?

You should absolutely keep using disk imaging.

Consider: your system disk starts to fail. Maybe your PC is unbootable. Which would then help you?

Further consider- you can image any disk and partition. How does that fit with PIT Restore?
It's not dissimilar to why and when you should and can use System Restore vs disk imaging.

2. Will my C:\ drive Macrium backups now be much larger than before due to the increased page file size?
No. Page file is excluded from the image file, as is hyberfil.sys
  • Placeholders only: When creating the image, Macrium only includes empty placeholders for the page file (pagefile.sys).
  • Space-saving: This saves a lot of space in your backup, as page files can be enormous.
  • Why it works: These files are temporary system data. Windows deletes or recreates them when it reboots, so they are not needed to restore your system
 

My Computer My Computer

At a glance

Windows 11 Proi7-8650U16GBIntel UHD 620
OS
Windows 11 Pro
Computer type
Laptop
Manufacturer/Model
Lenovo t480s
CPU
i7-8650U
Memory
16GB
Graphics Card(s)
Intel UHD 620
Screen Resolution
1920x1080
Hard Drives
C SN810 SDCPNRY-512G-1006
Browser
Edge, Firefox
Antivirus
Defender
Excellent information dalchina - thanks. I didn't know (but am not surprised) that Macrium was smart enough to treat Page & Hyberfile that way.
 

My Computer My Computer

At a glance

Win11 ProAMD Ryzen 5 5500U16 GBRadeon 2100
OS
Win11 Pro
Computer type
PC/Desktop
Manufacturer/Model
BeeLink SER Mini
CPU
AMD Ryzen 5 5500U
Motherboard
BeeLink SER
Memory
16 GB
Graphics Card(s)
Radeon 2100
Sound Card
none
Monitor(s) Displays
Primary: Phillips 4K; Secondary: LG 4K
Screen Resolution
Both 3860 x 2160
Hard Drives
C: NVme 500 GB Windows only
D: 128 GB NVme User data + Windows Temp via Junction Link
PSU
External
Case
Mini
Cooling
Internal fan
Keyboard
Logitech Wireless Lighted
Mouse
Kensington ExpertMouse wireless trackball
Internet Speed
500/500
Browser
Brave
Antivirus
Windows Defender
I'm sure Hasleo and others do the same.
 

My Computers My Computers

  • At a glance

    Windows 11 Pro 25H2 26200.8655AMD Ryzen 7 5825U with Radeon Graphics16GB
    OS
    Windows 11 Pro 25H2 26200.8655
    Computer type
    Laptop
    Manufacturer/Model
    Acemagic LX15PRO
    CPU
    AMD Ryzen 7 5825U with Radeon Graphics
    Motherboard
    BIOS CT_BI_AMI_LX15PRO_AB8139_A-004
    Memory
    16GB
    Screen Resolution
    1920 x 1080
    Hard Drives
    SSD 2TB
    Internet Speed
    30 Mbps
    Browser
    Brave
    Antivirus
    Defender/Windows Security
    Other Info
    System 3

    Acer Swift SF114-34 laptop
    OS Windows 11 Pro 26200.8655
    CPU Pentium Silver N6000
    RAM 4GB
    BIOS v1.17
    SSD Samsung 970 EVO Plus SSD 2TB (an upgrade)
  • At a glance

    Windows 11 Pro 23H2 22631.2506Atom N450 1.66GHz2GB
    Operating System
    Windows 11 Pro 23H2 22631.2506
    Computer type
    Laptop
    Manufacturer/Model
    HP Mini 210-1090NR PC (bought in late 2009!)
    CPU
    Atom N450 1.66GHz
    Memory
    2GB
    Browser
    Brave
    Antivirus
    Webroot
Excellent information dalchina - thanks. I didn't know (but am not surprised) that Macrium was smart enough to treat Page & Hyberfile that way.
Thanks- easy to Google/AI search that sort of thing these days, whereas previously one might search the user guide.

Also note that exclusions can be set when creating the imaging task.

And Kelper's right:
Hasleo Backup Suite automatically excludes the Windows page file (virtual memory) and hiberfil.sys (hibernation file) when creating system backups.
1.webp
Makes a huge amount of sense- else those would be included in every single subsequent differential or incremental backup.... ouch!

Similarly e.g.

Macrium Reflect does not include Windows System Restore Points in its backup images.

When you restore a Macrium image, your computer reverts to the exact state it was in when the image was created. Any System Restore Points you made before the backup will not be available afterward.
 

My Computer My Computer

At a glance

Windows 11 Proi7-8650U16GBIntel UHD 620
OS
Windows 11 Pro
Computer type
Laptop
Manufacturer/Model
Lenovo t480s
CPU
i7-8650U
Memory
16GB
Graphics Card(s)
Intel UHD 620
Screen Resolution
1920x1080
Hard Drives
C SN810 SDCPNRY-512G-1006
Browser
Edge, Firefox
Antivirus
Defender
As a long time Windows user one of the first things I learned is to NOT depend on Windows Recover and Trouble shooting to be available when you have problems with your operating system. Point in time is a nice option to have but it should not be used as your primary recovery. You need to have a bootable USB that includes WiFI, Command Prompt and your backup program of choice.
 

My Computer My Computer

At a glance

Windows 11 & Zorin ProIntel® Core™ Ultra 9 Processor 275HX 2.7 GHz32 gbNVIDIA® GeForce RTX™ 5060 Laptop GPU
OS
Windows 11 & Zorin Pro
Computer type
Laptop
Manufacturer/Model
Asus Rog Strix G16
CPU
Intel® Core™ Ultra 9 Processor 275HX 2.7 GHz
Motherboard
AsusteK Computer
Memory
32 gb
Graphics Card(s)
NVIDIA® GeForce RTX™ 5060 Laptop GPU
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
Laptop 16 inch
Screen Resolution
2560 X 1600
Hard Drives
Boot: Samsung 9100 NVME 2 TB Microsoft Storage Controller: Standard NVM Express Driver: Microsoft 6/21/2006. No SATA/AHCI on my motherboard or in bios
Mouse
Pad
Browser
Google Chrome
Antivirus
Microsoft
Other Info
Printer: HP Color LaserJet MFP M477dw
I have this feature after installing yesterday's KB, but no restore point has been created so far. I rebooted the computers—nothing.
 

My Computer My Computer

At a glance

windows 11
OS
windows 11
I have been using create checkpoint and had several checkpoints in place. Microsoft removed the create checkpoint feature and my checkpoints. They installed Point in Time and created 2 checkpoints. All this happened without my knowledge or permission. I have turned this feature off because it doesn't allow me to create an adhoc point in time of my choosing. Check point was more useful for me as it had a narrow focus it just backed up the system.
 

My Computer My Computer

At a glance

Windows 11 & Zorin ProIntel® Core™ Ultra 9 Processor 275HX 2.7 GHz32 gbNVIDIA® GeForce RTX™ 5060 Laptop GPU
OS
Windows 11 & Zorin Pro
Computer type
Laptop
Manufacturer/Model
Asus Rog Strix G16
CPU
Intel® Core™ Ultra 9 Processor 275HX 2.7 GHz
Motherboard
AsusteK Computer
Memory
32 gb
Graphics Card(s)
NVIDIA® GeForce RTX™ 5060 Laptop GPU
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
Laptop 16 inch
Screen Resolution
2560 X 1600
Hard Drives
Boot: Samsung 9100 NVME 2 TB Microsoft Storage Controller: Standard NVM Express Driver: Microsoft 6/21/2006. No SATA/AHCI on my motherboard or in bios
Mouse
Pad
Browser
Google Chrome
Antivirus
Microsoft
Other Info
Printer: HP Color LaserJet MFP M477dw
I hope this feature works well. Last year I tried the regular System Restore as I thought it was the easiest way to roll back a change I'd made and althugh it booted once, it didnt look 100% healthy and on next reboot bug checked with a non recoverable unbootable error - requiring a W11 re-install - all I had left was the previous c: contents kept by the installer.

Newer recovery mechanisms do seem better - on a PC that suffered some issue and wouldn't boot it automatically entered recovery and the option to uninstall last Windows update was successful. The 'fix issues using Windows Update' option also seems reliable - so hopefully this new feature is as good.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
My OS disk is sized at 230Gb, with 100GB free. How can Point-in-time possibly create a backup with so little free space?
 

My Computers My Computers

  • At a glance

    Windows 11 Pro 25H2 26200.8655AMD Ryzen 7 5825U with Radeon Graphics16GB
    OS
    Windows 11 Pro 25H2 26200.8655
    Computer type
    Laptop
    Manufacturer/Model
    Acemagic LX15PRO
    CPU
    AMD Ryzen 7 5825U with Radeon Graphics
    Motherboard
    BIOS CT_BI_AMI_LX15PRO_AB8139_A-004
    Memory
    16GB
    Screen Resolution
    1920 x 1080
    Hard Drives
    SSD 2TB
    Internet Speed
    30 Mbps
    Browser
    Brave
    Antivirus
    Defender/Windows Security
    Other Info
    System 3

    Acer Swift SF114-34 laptop
    OS Windows 11 Pro 26200.8655
    CPU Pentium Silver N6000
    RAM 4GB
    BIOS v1.17
    SSD Samsung 970 EVO Plus SSD 2TB (an upgrade)
  • At a glance

    Windows 11 Pro 23H2 22631.2506Atom N450 1.66GHz2GB
    Operating System
    Windows 11 Pro 23H2 22631.2506
    Computer type
    Laptop
    Manufacturer/Model
    HP Mini 210-1090NR PC (bought in late 2009!)
    CPU
    Atom N450 1.66GHz
    Memory
    2GB
    Browser
    Brave
    Antivirus
    Webroot
It's not creating a full backup, it's more of a giant "Undo recent changes" feature.

PITR creates a series of shadow volume snapshots, to make it possible to roll back to a previous point. Therefore it only needs to hide recent file changes (deleted or updated files) in the snapshot like a secret Recycle Bin. When you want to restore something, it looks in the metadata and only pulls whatever the old version back out for use.

A full backup is normally meant to be a copy is saved somewhere else (not on the same drive). This could be another drive, a removable storage device, or across the network to a server. PITR doesn't help if Windows or the system drive is damaged or wiped out.

In that sense it isn't a "backup" but more an undo function for users, that doesn't require you to install a 3rd-party package. Something is better than nothing. Obviously if you understand the value of having real backups, then PITR doesn't benefit you. It's for the casual user.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
I hope this feature works well. Last year I tried the regular System Restore as I thought it was the easiest way to roll back a change I'd made and althugh it booted once, it didnt look 100% healthy and on next reboot bug checked with a non recoverable unbootable error - requiring a W11 re-install - all I had left was the previous c: contents kept by the installer.

Newer recovery mechanisms do seem better - on a PC that suffered some issue and wouldn't boot it automatically entered recovery and the option to uninstall last Windows update was successful. The 'fix issues using Windows Update' option also seems reliable - so hopefully this new feature is as good.

My OS disk is sized at 230Gb, with 100GB free. How can Point-in-time possibly create a backup with so little free space?
Space estimates: (which I imagine varies with the extent of change e.g. in user data covered by this:
1.webp
 

My Computer My Computer

At a glance

Windows 11 Proi7-8650U16GBIntel UHD 620
OS
Windows 11 Pro
Computer type
Laptop
Manufacturer/Model
Lenovo t480s
CPU
i7-8650U
Memory
16GB
Graphics Card(s)
Intel UHD 620
Screen Resolution
1920x1080
Hard Drives
C SN810 SDCPNRY-512G-1006
Browser
Edge, Firefox
Antivirus
Defender
How can Point-in-time possibly create a backup with so little free space?

I think it uses something like change block tracking so it is just logging changes with a reference point not actually backing up the files.
 

My Computer My Computer

At a glance

Windows 11 Pro
OS
Windows 11 Pro
Back
Top Bottom