System Restore registry key missing

[Vickie]

Two days ago I had read it was a good idea to occassionally run an
online antivirus scan sort of as a second opinion to one you run
installed on your computer so I ran the Kaspersky Online Scan which
said it found three items. (Norton is installed on the machine and
found nothing.)

I sent three files to Kaspersky to evaluate and in the meanwhile I
disabled and then enabled System Restore again. A restore point was
created at that time by itself.

After the fact I received an email from Kaspersky apologizing but it
was a false result. Great. Now I lost all my previous restore points
and it has not created a System Checkpoint since I enabled it again.

I went to check the registry and from what I've read online there
should be an entry determining checkpoint frequency
"HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion
\SystemRestore" but it's missing. Nothing.

I have this one "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
\Sr"

I also have this one "HKEY_LOCAL_MACHINE\System\CurrentControlSet
\Services\Srservice"

Is there some handy little vbs file or easy fix to get that registry
key back again?


Thank you-

Vickie

 

[Vickie]

I did find a key in a different place HKEY_CURRENT_USER\Software
\Microsoft\Windows NT\CurrentVersion\Windows\
Name: DisableSR
Type: Reg_DWORD
Data: 0X00000000 (0)

Is this the same thing?

I'm so upset over this. I've had no issues with System Restore for
the 5 years I've had this system.

Thank you-
Vickie

 

[AJR]

Vickie - regarding "...it has not created a System Checkpoint since I
enabled it again...." - default setting is to create a System Checkpoint, in
the absence of any other Resrore point creation, every 24 hours the computer
is operating - note that it is not 24 hours of operating time.

 

[Vickie]

Thank you for your reply.

I Enabled System Restore yesterday morning, so it's been about 36
hours or so and no checkpoint. (It has faithfully made checkpoints
just about every day for years.)

There's no registry key for HKEY_LOCAL_MACHINE\Software\Microsoft
\WindowsNT\CurrentVersion \SystemRestore

I'm worried there should be one there or I'll get no System
Checkpoints now.

Vickie

 

[Nepatsfan]

Two days ago I had read it was a good idea to occassionally run an
online antivirus scan sort of as a second opinion to one you run
installed on your computer so I ran the Kaspersky Online Scan which
said it found three items. (Norton is installed on the machine and
found nothing.)

I sent three files to Kaspersky to evaluate and in the meanwhile I
disabled and then enabled System Restore again. A restore point was
created at that time by itself.

After the fact I received an email from Kaspersky apologizing but it
was a false result. Great. Now I lost all my previous restore points
and it has not created a System Checkpoint since I enabled it again.

I went to check the registry and from what I've read online there
should be an entry determining checkpoint frequency
"HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion
\SystemRestore" but it's missing. Nothing.

I have this one "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
\Sr"

I also have this one "HKEY_LOCAL_MACHINE\System\CurrentControlSet
\Services\Srservice"

Is there some handy little vbs file or easy fix to get that registry
key back again?


Thank you-

Vickie

Are you saying that you're missing this entire registry key?

HKLM\Software\Microsoft\WindowsNT\CurrentVersion\SystemRestore

You should find a value named RPGlobalInterval set to 86400 decimal under that
key.

If it's not there, you could try reinstalling System Restore. Take a look at
this web site for more info.

Courtesy of Bert Kinney, MS-MVP
How to Reinstall System Restore in Windows XP
http://bertk.mvps.org/html/reinstall.html

Another approach would be to see if you can run the first .vbs file listed on
this page.

http://bertk.mvps.org/html/srscripts.html

Good luck

Nepatsfan

 

[Vickie]

Exactly. The whole key is missing. I'm pretty sure I remember the
key existing years ago, (I've had no need to check it any time
recently), but I'm not sure if I may have looked at the one in
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows
\

I'll try the .vbs file first.

Thank you-
Vickie

 

[AJR]

Vickie - I made an error in my first reply - regarding
"... note that it is not 24 hours of operating time...."
- it should have read "...note that it IS 24 hours of operating time....".
In other words if your computer is on six hours a day, it would be 4-5 days
before a routine System Checkpoint would be created.




Thank you for your reply.

I Enabled System Restore yesterday morning, so it's been about 36
hours or so and no checkpoint. (It has faithfully made checkpoints
just about every day for years.)

There's no registry key for HKEY_LOCAL_MACHINE\Software\Microsoft
\WindowsNT\CurrentVersion \SystemRestore

I'm worried there should be one there or I'll get no System
Checkpoints now.

Vickie

 

[Vickie]

Boy am I a dummy. I didn't expand Current Version and scroll down to
where System Restore is listed. I thought it was a value I should
have seen simply by highlighting Current Version.

OK, here are some values from the right side:

Name: DisableSR Type: REG_DWORD Data: 0x00000000 (0)
Name: Restore Status Type: REG_DWORD Data: 0x00000001 (1)
Name: RPGlobalInterval Type: REG_DWORD Data: 0x00015180 (86400)
Name: RPLifeInterval Type: REG_DWORD Data: 010076a700
(7776000)

I think the values are set for System Restore to be Enabled and make a
restore point every 86400 seconds (24 hours), is that right?

What is the Restore Status for and the value of (1) mean?

Are these set correctly?

Thanks again-
Vickie

 

[Vickie]

Thanks, AJR. My computer is usually on 24 hours a day.

Vickie

 

[Vickie]

I found the descriptions at Microsoft http://support.microsoft.com/kb/295659.

• CompressionBurst

This value, listed in seconds, specifies the idle time compression:
The amount of time to compress data after the computer reaches its
idle time. A service can compress data for the amount of time that is
specified in this value, and then stop. Then, at the next idle time
compression, the computer can repeat the process.

• DiskPercent

This value relates to the percentage of disk space that System Restore
uses for its data store. The default value is 12 percent. The data
store size is always calculated as "max(12 percent, DSMax),"
regardless of the size of the hard disk. The maximum (max) size is
what is specified in DSMax. For hard disk sizes that are less than 4
gigabytes (GB) in size, 12 percent is less than 400 megabytes (MB), so
"max(12 percent, DSMax) equals 400 MB." For hard disk sizes that are
greater than 4 GB, 12 percent is greater than 400 MB, so "max(12
percent, DSMax) equals 12 percent." This data store size is not a
reserved disk space, and the data store size is used only on demand.

• DSMax

This value specifies the maximum size for the System Restore data
store. The default size of the data store is 400 MB. The data store
size is always calculated as "max(12 percent, DSMax)," regardless of
the size of the hard disk. The maximum (max) size is what is specified
in DSMax. For hard disk sizes that are less than 4 GB, 12 percent is
less than 400 MB, so "max(12 percent, DSMax) equals 400 MB." For hard
disk sizes that are greater than 4 GB, 12 percent is greater than 400
MB, so "max(12 percent, DSMax) equals 12 percent." This data store
size is not a reserved disk space, and the data store size is used
only on demand.

• DSMin

This value relates to the minimum amount of free disk space that
System Restore needs so that it can function during the installation
process. Also, this value relates to the minimum amount of free disk
space that is needed for System Restore to reactivate and to resume
the creation of restore points after System Restore has been disabled
because of low disk space.

• RestoreStatus

This value specifies if the last restore operation failed (0),
succeeded (1), or had been interrupted (2).

• RPGlobalInterval

This value specifies, in seconds, the amount of time that System
Restore waits before it creates the automatic computer check points
for elapsed time. The default value is 24 hours.

• RPLifeInterval

This value specifies, in seconds, the restore points Time to Live
(TTL). When a restore point reaches this time and it is still on the
system, it gets deleted. The default value is (7776000), which will be
90 days.

• RPSessionInterval

This value specifies, in seconds, the amount of time that System
Restore waits before it creates the automatic computer check points
for session time (the amount of time that the computer has been on).
The default value is zero (0), which means that this feature is turned
off.

• ThawInterval

This value specifies, in seconds, the amount of time that System
Restore waits before it activates itself from a disabled state (after
the conditions for this process to occur have been met). If you start
the System Restore user interface, System Restore is activated
immediately.

 

[Nepatsfan]

Sorry, but that's incorrect. A new restore point will be created 24 hours after
the previous one at a time when the computer is idle. It's 24 hours according to
the clock, not how long the computer has been running.

If you're looking for a reference, take a look at the Scheduled restore points
section of this article.

Microsoft Windows XP System Restore
http://msdn.microsoft.com/en-us/library/ms997627.aspx#windowsxpsystemrestore_auto

"In addition to creating restore points before certain events, System Restore
provides users with the ability to restore to other specific days and times. It
does this by creating a restore point every 24 hours of calendar time. By
default, System Restore will create a restore point every day that the machine
is running. These restore points are only created during idle time; for example,
when there is no mouse, keyboard, or disk i/o activity."

Nepatsfan

 

[Nepatsfan]

The registry values you listed are correct. Here's the entire list of values
under that registry key on a computer that has no problems creating automatic
restore points.

"DisableSR"=dword:00000000
"CreateFirstRunRp"=dword:00000001
"DSMin"=dword:000000c8
"DSMax"=dword:00000190
"RPSessionInterval"=dword:00000000
"RPGlobalInterval"=dword:00015180
"RPLifeInterval"=dword:0076a700
"CompressionBurst"=dword:0000003c
"TimerInterval"=dword:00000078
"DiskPercent"=dword:0000000c
"ThawInterval"=dword:00000384
"RestoreDiskSpaceError"=dword:00000000
"RestoreStatus"=dword:00000001
"RestoreSafeModeStatus"=dword:00000000

Keep in mind that the computer has to be idle for a reasonable amount of time
for an automatic restore point to be created. If you turn your computer on and
off all day, there might not be a window of opportunity for Windows to create a
restore point.

Here's a web site with some other things you can check.

Troubleshooting steps to take when System Restore fails to create an automatic
restore point
http://bertk.mvps.org/html/srauto.html

Good luck

Nepatsfan

 

[Vickie]

The computer created a System Checkpoint last night around 11PM, so
things are looking good now.

Thank you, Nepatsfan, for taking the time to post some really helpful
replies. My registry data values have number inside ( ) following
each value you posted. Aside from that all things match up with
yours.

Thanks again-

Vickie

 

[Nepatsfan]

You're welcome. Thanks for letting us know System Restore is working properly.

Nepatsfan

 

[AJR]

This may be a duplicate post - if so I apologize

Vickie - I made an error in my first reply - regarding
"... note that it is not 24 hours of operating time...."
- it should have read "...note that it IS 24 hours of operating time....".
In other words if your computer is on six hours a day, it would be 4-5 days
before a routine System Checkpoint would be created.

 

[Peter Foldes]

Vickie

Is your resident AV Norton by any chance. Norton is known for knocking out the restore point. Anyway I am glad you got it going again with the help from Nepatsfan

--
Peter

Please Reply to Newsgroup for the benefit of others
Requests for assistance by email can not and will not be acknowledged.

The computer created a System Checkpoint last night around 11PM, so
things are looking good now.

Thank you, Nepatsfan, for taking the time to post some really helpful
replies. My registry data values have number inside ( ) following
each value you posted. Aside from that all things match up with
yours.

Thanks again-

Vickie