Skip to content
Recovery

When something breaks: restore points, registry backups and a calm head

Something will eventually go wrong. The difference between a bad evening and a lost weekend is what you set up before it did.

The four layers of undo

Recovery is not one action, it is a ladder. Start at the top and only climb down as far as you have to.

LayerUndoesCost
Flip the setting backOne registry-based changeSeconds
Re-import your previous configAll managed settings at onceMinutes
Registry backup restoreRegistry-level damage beyond managed settingsRestart + risk
System restore pointSystem state including services and some installsRestart, keeps your files

Below all four sits a clean install, which is not a failure. It is the floor of the ladder and sometimes the fastest route.

Diagnosing before undoing

The instinct when something breaks is to undo everything. Resist it for ten minutes, because undoing everything also destroys the evidence of what went wrong, and you will do it again.

  1. What changed most recently? If you followed the one-category-at-a-time rule, you already have your answer.
  2. Does it survive a restart? A surprising number of symptoms are a service that has not caught up yet.
  3. Is it actually related? Windows Update, a driver, or an application updating itself the same evening is a common coincidence. Check the update history before blaming the thing you were doing.
  4. Can you name the mechanism? If you removed a capability and a device stopped working, that is a plausible chain. If you turned off a notification category and Wi-Fi dropped, it probably is not.

Using a restore point properly

System Restore keeps your documents and reverts system state. Two things people get wrong: it is not a backup of your files, and it can be silently disabled on a fresh install, which is exactly why a tool creating one on first launch is worth more than it sounds.

Verify protection is on before you need it

Open System Protection and confirm your system drive shows protection enabled with some space allocated. If it is off, no restore point exists, no matter what any tool reported.

Restore from within Windows if you can boot. If you cannot, hold Shift while choosing Restart to reach the recovery environment, or interrupt boot twice to get there automatically.

Restoring a registry backup

Backups live in C:\ProgramData\Winhance\Backups, dated, from first launch. This is a heavier instrument than it looks: restoring a registry hive from weeks ago also reverts software installed since then into an inconsistent state.

I use it in one situation — a setting is stuck, will not flip back, and I can see the value is wrong in Registry Editor. In every other case, re-importing a configuration file is safer and narrower.

Export before you restore

Whatever you are about to overwrite, export it first. A broken machine you can return to is strictly better than a broken machine you cannot.

When to stop and reinstall

There is a point where recovery costs more than starting over, and recognising it early is a skill. My own triggers:

  • Two hours in with no clear cause identified.
  • A removed component that cannot be reinstalled and that something depends on.
  • Symptoms that keep moving — fix one, another appears.
  • Any machine that has to work tomorrow morning.

This is where a saved configuration and, if you built one, a prepared installer stop being conveniences and start being the plan. A clean install plus a config import is roughly forty minutes. Debugging a machine you no longer trust can be a weekend.


Written on my own hardware, with my own money, on my own time. Nobody paid for a mention here. If a page ever does contain a paid placement or an affiliate link, it will say so at the top — see the disclaimer.