Quick Question Re: SYSTEM RESTORE

Using WINDOWS XP HOME EDITION SP1

In re: System Restore,
1. I think the computer automatically makes a restore point every once in a
while so if the thing crashes, one can go back to a previous restore point
to re-enable working registry settings, etc. True?

2. When I install a new program via Add/Remove, it automatically makes a
restore point so that if the new program crashes things, one can uninstall
the new program and go back to the restore point just before installation of
the offending program. True?

3. I can manually set a restore point just prior to adding new software.
True?

4. I may have a problem or don't understand this because to test things, I
go into System Restore and make a "restore point." I then turn off computer
and reboot and go into system restore and ask it to restore to the check
point I just set and I always get a response that says "can't restore to
that point." (quote may not be exact). Why? Is my restore program not
working?

5. On the calendar in the System Restore module, various dates are in bold
type. They are called "checkpoints." Is this a "restore" point or are
there different kinds of points?

6. I want to get this resolved prior to finally adding Windows XP SP2.
When I crash it, I'd like to recover!!!

Thanks,
Chet

Hi Chet,

< inline >

CGB wrote:
> Using WINDOWS XP HOME EDITION SP1
>
> In re: System Restore,
> 1. I think the computer automatically makes a restore
> point every once in a while so if the thing crashes, one
> can go back to a previous restore point to re-enable
> working registry settings, etc. True?

True, System Restore creates an automatic restore point ever 24 hours by default. This
configurable via the registry.

> 2. When I install a new program via Add/Remove, it
> automatically makes a restore point so that if the new
> program crashes things, one can uninstall the new program
> and go back to the restore point just before installation
> of the offending program. True?

True some of the time. Provided the application utilizes an installer that is System
Restore compliant. A restore point will be created when the installation of an un-signed
driver and when Windows Auto runs.

> 3. I can manually set a restore point just prior to
> adding new software. True?

True, yes you can and should. A restore point should be set whenever installing any new
software, hardware or making configuration changes that you suspect could make the system
unstable.

> 4. I may have a problem or don't understand this because
> to test things, I go into System Restore and make a
> "restore point." I then turn off computer and reboot and
> go into system restore and ask it to restore to the check
> point I just set and I always get a response that says
> "can't restore to that point." (quote may not be exact).
> Why? Is my restore program not working?

There are several reasons this may occur. Let's take a look at Event Viewer for any System
Restore logs that may have been created recently that may help us diagnosing the problem.

Go to Start - Run and type eventvwr.msc and press enter.
Click on System in the left pane.
Click the gray title “Source” at the top of the source name column in the right pane to
sort by source name, look for "sr" and "srservice".
Double click on each of these events, then click on the button below the two arrows in the
upper right corner. This will copy the event information to the clipboard. Paste the
information for each of the two event here.

How do I use the Event Viewer to search for System Restore logs?
http://bertk.mvps.org/html/tips.html#EventViewer

> 5. On the calendar in the System Restore module, various
> dates are in bold type. They are called "checkpoints."
> Is this a "restore" point or are there different kinds of points?

The bold dates indicate that at least one restore point(s) exist from that day. They are
all restore points.

> 6. I want to get this resolved prior to finally adding
> Windows XP SP2. When I crash it, I'd like to recover!!!

Check my web site for more information on System Restore.
All About System Restore in WinXP
http://bertk.mvps.org/

>
> Thanks,
> Chet

Bert,
Thank you for the reply. In re: your instructions

> There are several reasons this may occur. Let's take a look at Event
Viewer for any System
> Restore logs that may have been created recently that may help us
diagnosing the problem.
>
> Go to Start - Run and type eventvwr.msc and press enter.
> Click on System in the left pane.
> Click the gray title "Source" at the top of the source name column in the
right pane to
> sort by source name, look for "sr" and "srservice".
> Double click on each of these events, then click on the button below the
two arrows in the
> upper right corner. This will copy the event information to the clipboard.
Paste the
> information for each of the two event here.
>
> How do I use the Event Viewer to search for System Restore logs?
> http://bertk.mvps.org/html/tips.html#EventViewer
>

I followed your directions and when I sort the "Source" column, I get
nothing listed as "sr" or "srservice" I have a LOT of listings for "Service
Control Manager" Far too many that you would want me to post!!! However,
some of them (seem to be in groups of 4) are marked as "Error" under the
"Type" column. Since I'm not finding the "sr" or "srservice" what do I do
next?

I have not yet checked out the links to your web site, but will ASAP.
Thanks,
Chet

Then the problem is most likely corruption of a restore points. If any of the previous
restore points is corrupt then this will cause the failure you are seeing. The only
recourse in this case is to delete all of the existing restore points. This can be done by
disabling and then enabling System Restore.

How to Disable and Enable System Restore.
http://bertk.mvps.org/html/disablesr.html

Once that is done, test System Restore using these instructions and let me know how if it
worked.
http://bertk.mvps.org/html/tips.html#HowToTest

--
Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org

CGB wrote:
> Bert,
> Thank you for the reply. In re: your instructions
>
>> There are several reasons this may occur. Let's take a
>> look at Event Viewer for any System Restore logs that
>> may have been created recently that may help us
>> diagnosing the problem.
>>
>> Go to Start - Run and type eventvwr.msc and press enter.
>> Click on System in the left pane.
>> Click the gray title "Source" at the top of the source
>> name column in the right pane to sort by source name,
>> look for "sr" and "srservice".
>> Double click on each of these events, then click on the
>> button below the two arrows in the upper right corner.
>> This will copy the event information to the clipboard.
>> Paste the information for each of the two event here.
>>
>> How do I use the Event Viewer to search for System
>> Restore logs?
>> http://bertk.mvps.org/html/tips.html#EventViewer
>>
>
> I followed your directions and when I sort the "Source"
> column, I get nothing listed as "sr" or "srservice" I
> have a LOT of listings for "Service Control Manager" Far
> too many that you would want me to post!!! However,
> some of them (seem to be in groups of 4) are marked as
> "Error" under the "Type" column. Since I'm not finding
> the "sr" or "srservice" what do I do next?
>
> I have not yet checked out the links to your web site,
> but will ASAP. Thanks,
> Chet

Bert,
Just talking to you MVP's is helpful!!! I just "tested" the system restore
function as described on you website and now it's working. I made no
changes prior to this so it must have been because of you aura.

Can you explain why, when running "eventvwr.msc" I don't get the "sr" or
"srservice" listed as you describe?

Also, I went into my root of Drive C and after allowing explorer to show
hidden and system files and also show contents of system files, I saw
"System Volume Information" listed under Drive C. However, on
double-clicking it as directed by your site and also by the MS website to
see what it said, I got a window saying access was denied. How come?

I noted on your web site that you said not to allow System Restore to
monitor the recovery disk if using an HP. I checked and it was monitoring
drive D, my recovery drive on my HP, so I disabled the monitoring of that
drive as you recommended.

Thanks,
Chet




"Bert Kinney" <bert@NSmvps.org> wrote in message
news:u1RbHWP0FHA.3300@TK2MSFTNGP15.phx.gbl...
> Then the problem is most likely corruption of a restore points. If any of
the previous
> restore points is corrupt then this will cause the failure you are seeing.
The only
> recourse in this case is to delete all of the existing restore points.
This can be done by
> disabling and then enabling System Restore.
>
> How to Disable and Enable System Restore.
> http://bertk.mvps.org/html/disablesr.html
>
> Once that is done, test System Restore using these instructions and let me
know how if it
> worked.
> http://bertk.mvps.org/html/tips.html#HowToTest
>
> --
> Regards,
> Bert Kinney MS-MVP Shell/User
> http://bertk.mvps.org
>
> CGB wrote:
> > Bert,
> > Thank you for the reply. In re: your instructions
> >
> >> There are several reasons this may occur. Let's take a
> >> look at Event Viewer for any System Restore logs that
> >> may have been created recently that may help us
> >> diagnosing the problem.
> >>
> >> Go to Start - Run and type eventvwr.msc and press enter.
> >> Click on System in the left pane.
> >> Click the gray title "Source" at the top of the source
> >> name column in the right pane to sort by source name,
> >> look for "sr" and "srservice".
> >> Double click on each of these events, then click on the
> >> button below the two arrows in the upper right corner.
> >> This will copy the event information to the clipboard.
> >> Paste the information for each of the two event here.
> >>
> >> How do I use the Event Viewer to search for System
> >> Restore logs?
> >> http://bertk.mvps.org/html/tips.html#EventViewer
> >>
> >
> > I followed your directions and when I sort the "Source"
> > column, I get nothing listed as "sr" or "srservice" I
> > have a LOT of listings for "Service Control Manager" Far
> > too many that you would want me to post!!! However,
> > some of them (seem to be in groups of 4) are marked as
> > "Error" under the "Type" column. Since I'm not finding
> > the "sr" or "srservice" what do I do next?
> >
> > I have not yet checked out the links to your web site,
> > but will ASAP. Thanks,
> > Chet
>
>

Addendum,
I just re checked the eventvwr.msc and "srservice" is now showing for
the first time!!! On double clicking, it revealed my latest action of
having drive D: not monitored.

Event Type: Information

Event Source: SRService

Event Category: None

Event ID: 114

Date: 10/14/2005

Time: 4:50:13 PM

User: N/A

Computer: Edited out for security reasons

Description:

System Restore monitoring was disabled on drive D:\.



Have no idea what's been happening but I'll take it!



Chet

< inline >

CGB wrote:
> Bert,
> Just talking to you MVP's is helpful!!! I just "tested"
> the system restore function as described on you website
> and now it's working. I made no changes prior to this so
> it must have been because of you aura.

Strange!

> Can you explain why, when running "eventvwr.msc" I don't
> get the "sr" or "srservice" listed as you describe?

No recent logs were created, or they expired.

> Also, I went into my root of Drive C and after allowing
> explorer to show hidden and system files and also show
> contents of system files, I saw "System Volume
> Information" listed under Drive C. However, on
> double-clicking it as directed by your site and also by
> the MS website to see what it said, I got a window saying
> access was denied. How come?

You missed a couple of steps, as described here:
http://bertk.mvps.org/html/tips.html#SRFileLocation

> I noted on your web site that you said not to allow
> System Restore to monitor the recovery disk if using an
> HP. I checked and it was monitoring drive D, my recovery
> drive on my HP, so I disabled the monitoring of that
> drive as you recommended.

Good.

> Thanks,
> Chet
>
>
>
>
> "Bert Kinney" <bert@NSmvps.org> wrote in message
> news:u1RbHWP0FHA.3300@TK2MSFTNGP15.phx.gbl...
>> Then the problem is most likely corruption of a restore
>> points. If any of the previous restore points is corrupt
>> then this will cause the failure you are seeing. The
>> only recourse in this case is to delete all of the
>> existing restore points. This can be done by disabling
>> and then enabling System Restore.
>>
>> How to Disable and Enable System Restore.
>> http://bertk.mvps.org/html/disablesr.html
>>
>> Once that is done, test System Restore using these
>> instructions and let me know how if it worked.
>> http://bertk.mvps.org/html/tips.html#HowToTest
>>
>> --
>> Regards,
>> Bert Kinney MS-MVP Shell/User
>> http://bertk.mvps.org
>>
>> CGB wrote:
>>> Bert,
>>> Thank you for the reply. In re: your instructions
>>>
>>>> There are several reasons this may occur. Let's take a
>>>> look at Event Viewer for any System Restore logs that
>>>> may have been created recently that may help us
>>>> diagnosing the problem.
>>>>
>>>> Go to Start - Run and type eventvwr.msc and press
>>>> enter. Click on System in the left pane.
>>>> Click the gray title "Source" at the top of the source
>>>> name column in the right pane to sort by source name,
>>>> look for "sr" and "srservice".
>>>> Double click on each of these events, then click on the
>>>> button below the two arrows in the upper right corner.
>>>> This will copy the event information to the clipboard.
>>>> Paste the information for each of the two event here.
>>>>
>>>> How do I use the Event Viewer to search for System
>>>> Restore logs?
>>>> http://bertk.mvps.org/html/tips.html#EventViewer
>>>>
>>>
>>> I followed your directions and when I sort the "Source"
>>> column, I get nothing listed as "sr" or "srservice" I
>>> have a LOT of listings for "Service Control Manager"
>>> Far too many that you would want me to post!!!
>>> However, some of them (seem to be in groups of 4) are
>>> marked as "Error" under the "Type" column. Since I'm
>>> not finding the "sr" or "srservice" what do I do next?
>>>
>>> I have not yet checked out the links to your web site,
>>> but will ASAP. Thanks,
>>> Chet


--
Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org

Stopping D: from being monitored by System Restore should have fixed the problem. Test
System Restore every so often to make sure it working correctly.

You may find this page of interest also.
Keeping System Restore Healthy
http://bertk.mvps.org/html/healthy.html

--
Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org

CGB wrote:
> Addendum,
> I just re checked the eventvwr.msc and "srservice"
> is now showing for the first time!!! On double clicking,
> it revealed my latest action of having drive D: not
> monitored.
>
> Event Type: Information
> Event Source: SRService
> Event Category: None
> Event ID: 114
> Date: 10/14/2005
> Time: 4:50:13 PM
> User: N/A
> Description:
> System Restore monitoring was disabled on drive D:\.
>
> Have no idea what's been happening but I'll take it!
>
> Chet

Bert,
Many thanks for all your replies, time and effort.
Chet

You're very welcome Chet.

--
Regards,
Bert Kinney MS-MVP Shell/User
http://bertk.mvps.org

CGB wrote:
> Bert,
> Many thanks for all your replies, time and effort.
> Chet