Windows 11 Can Now Undo the Last 72 Hours. Here’s How.

What is Point-in-time Restore in Windows 11?

Point-in-time Restore is a recovery feature that takes automatic snapshots of your entire system and lets you roll the whole machine back to one of them. Microsoft first showed it at Ignite in late 2025, declared it generally available on June 23, 2026, and pushed it to a broad rollout with the July Patch Tuesday update.

Under the hood it uses the Volume Shadow Copy Service, the same snapshot technology that has shipped in Windows since XP. VSS takes a read-only copy of a disk volume at a moment in time without interrupting whatever you are doing, so the capture happens quietly in the background.

The scenario it exists for is specific and familiar: a driver update makes your machine unstable, a program installs something that breaks another program, or you change a setting you cannot find your way back from. Instead of troubleshooting for an afternoon or reinstalling Windows, you roll back to yesterday. Microsoft says the feature was running on more than two million devices during its preview period before it went generally available.

How is it different from System Restore?

This is the question that matters most, and getting it wrong is how people lose work. The two features look similar and behave very differently.

Read the second row twice. System Restore was safe to run casually because your documents were never in scope. Point-in-time Restore excludes nothing. If you wrote a report this morning and roll back to yesterday’s snapshot, that report is gone. Downloads, new installs, saved passwords, certificates — all reverted.

The one exception is anything already synced to a cloud service. Files in OneDrive or a similar service live on the server, not just your disk, so a rollback does not delete them, though they may need to resync afterwards. That is a strong argument for keeping your working documents in a synced folder rather than on the desktop, and worth knowing before you go changing OneDrive backup settings.

Do you already have Point-in-time Restore?

Quite possibly. The feature turns itself on by default for a large share of home PCs, so the first job is checking rather than enabling.

You need Windows 11 version 24H2 or newer, and the broad rollout arrived with Microsoft’s July 14 update, KB5101650. It is available across Home, Pro, Enterprise and Education editions. The default state then depends on two things:

• Your OS drive is 200GB or larger: the feature is on by default
• Your OS drive is smaller than 200GB: it is off, but you can switch it on manually
• Work or school managed PC: on domain-joined or organisation-managed Pro devices, and on Enterprise and Education, it stays off by default until Windows 11 version 26H2

Windows also keeps a floor of roughly 20GB of free disk space. If your drive fills past that point, Windows starts deleting older restore points to make room, which means a nearly full drive quietly reduces how far back you can go. If you are running tight, our guide to freeing up disk space on Windows 11 is worth an hour of your time for this reason alone.

How do you turn Point-in-time Restore on?

You need to be signed in as a local administrator. Standard user accounts can see nothing here, which is deliberate — a recovery feature that any account could disable would not be much of a safety net.

1. Open Settings and go to System > Recovery.
2. Find Point-in-time restore and select View or edit.
3. Approve the User Account Control prompt.
4. Toggle the feature on if it is not already.
5. Use the disk usage slider to cap how much space restore points may consume. More space means more restore points survive before Windows starts pruning them.

On Home and Pro you get the on/off toggle and the disk usage cap. Controls for how often restore points are captured and how long they are retained are limited to Enterprise editions, as 4sysops documented in its configuration walkthrough, so most readers are working with the 24-hour capture and 72-hour retention defaults. If the option is missing entirely, you are most likely on an older build — check whether the July 2026 update has installed, and if updates are not arriving at all, our stuck update fixes cover the usual causes.

How do you actually roll your PC back?

Here is the part that surprises people: you cannot start a restore from inside Windows. It runs only from the Windows Recovery Environment, known as WinRE. Microsoft has said remote and in-Windows triggering is planned, but today it is a local, offline operation.

Before you begin, two things to have ready. First, your BitLocker recovery key if your drive is encrypted, because you cannot complete a restore without it. Second, a copy of anything you have created since the snapshot you plan to roll back to, saved somewhere off the machine — a USB drive or cloud storage. That second step is not optional advice. The restore will delete those files.

1. Open Settings > System > Recovery and choose Restart now under Advanced startup. (If Windows will not boot at all, hold the power button through three failed boots and WinRE loads on its own.)
2. In WinRE, select Troubleshoot.
3. Select Point-in-time restore.
4. Enter your BitLocker recovery key if prompted.
5. Choose the restore point you want from the list of available snapshots.
6. Confirm and let the process run, then let the PC reboot into the restored state.

The rollback itself typically takes minutes rather than the hours a reinstall would. Afterwards, expect cloud-synced folders to spend a while catching up, and expect Windows Update to want to reinstall whatever update you just reverted. Pausing updates for a few days while you confirm the machine is stable is sensible.

What does Point-in-time Restore not protect you from?

It is a rollback tool, not a backup, and the distinction is not academic.

Restore points are stored locally on the same machine. If the drive fails, is stolen, or is encrypted by ransomware, your restore points are as gone as everything else. Point-in-time Restore does nothing that a real backup does — it does not give you a second copy in a second place. Treat it as the fast fix for a bad software day, and keep a genuine backup for everything else.

The 72-hour window is the other hard limit. A problem you notice on Monday that started the previous Thursday is outside the range. This makes the feature excellent for bad updates and driver mishaps, which announce themselves immediately, and useless for slow-building problems. If you have already lost files and there is no suitable restore point, file recovery on Windows 11 is the better route. If your PC is merely slow rather than broken, rolling back is a heavy-handed answer — start with the usual fixes for sluggishness after an update instead.

Should you leave it switched on?

For most people, yes. The cost is disk space you can cap yourself, and the benefit is a genuine undo button for the category of problem that used to mean a long evening or a reinstall.

The case for turning it off is narrow: a small SSD where every gigabyte counts, or a machine where you would rather spend the space on files. Even then, consider lowering the disk usage cap before disabling it outright.

The one thing worth doing today, whether or not you ever use the feature, is finding your BitLocker recovery key and storing it somewhere you can reach from another device. It is in your Microsoft account under your device’s details. A recovery tool you cannot unlock at the moment you need it is not a recovery tool, and this is the single most common way people discover their key was never saved anywhere.

FAQ

Does Point-in-time Restore delete my files?

Yes, if they were created or changed after the restore point you select. Unlike the older System Restore, this feature rolls back your personal files along with the operating system, apps and settings. Anything saved after the snapshot is lost. Files already synced to OneDrive or another cloud service are not affected, though they may need to resync afterwards.

How far back can Point-in-time Restore go?

72 hours by default. Windows captures restore points roughly every 24 hours and removes them after three days, or sooner if disk space runs low. Only Enterprise editions can change the capture frequency and retention period, so Home and Pro users are working with those defaults. Problems older than three days fall outside the window.

Why can’t I find Point-in-time Restore in Settings?

Three common reasons. You may be signed in as a standard user rather than a local administrator, since only admins can view these settings. Your PC may be running a Windows 11 version older than 24H2. Or your device may be domain-joined or managed by an organisation, where the feature stays off by default until Windows 11 version 26H2.

Do I need my BitLocker key to use Point-in-time Restore?

Yes, if your drive is encrypted with BitLocker. The restore runs from the Windows Recovery Environment, which cannot read an encrypted volume without the recovery key. Find your key in your Microsoft account under your device’s details and save it somewhere accessible from another device before you need it.

Is Point-in-time Restore a replacement for backups?

No. Restore points are stored locally on the same drive, so drive failure, theft or ransomware takes them along with everything else. It is a fast rollback for software problems within a 72-hour window, not a second copy of your data in a second location. Keep a real backup alongside it.