System restore files

Status
Not open for further replies.

jayno20

Posts: 106   +0
I went through the whole thing to get access to the system volume information folder (clicking show hidden folders, etc.) but for some reason no matter what i do when i click on that folder a window pops up that says "system volume information is not accessable access is denied" and the properties also read "0 bytes" anyone know what the deal is?
 
As far as I know you used to be able to access those files prior to Service Pack 1. SP1 applied a fix so that those files became inaccessible. Have you tried accessing them through dos?

c:\> reg query "HKLM\System\CurrentControlSet\Control\BackupRestore
\FilesNotToBackup" /v "System Restore"

And then, you can cd to the System Restore Directory.

(example)
c:\> cd \System Volume Information\_restore{8716531F-212F-45F1-8BAA-
FB69F0C7FAEF}

Within Restore Point Directories(RP0, RP1, ...), you will find a
directory called "snapshot" including registry hive data.

_REGISTRY_MACHINE_SAM
_REGISTRY_MACHINE_SECURITY
_REGISTRY_MACHINE_SOFTWARE
_REGISTRY_MACHINE_SYSTEM
_REGISTRY_USER_.DEFAULT
_REGISTRY_USER_NTUSER_S-1-5-18

Haven't tried it but I don't think it will work anymore...
.....
 
I accessed this folder about 3 months ago for a similar reason, i scanned my computer with a virus scanner and it showed there being viruses in there. I know i can turn off system restore to delete all the files, but the fact that i was once able to access this folder and now i am not able to worries me. I tried that command line thru dos and it didnt seem to work?
 
Only other thing I can think of is to make sure you are logged in as the system administrator.
 
Microsoft have written a page for you HERE

It`s a matter of adding your user account under the security tab.
 
Status
Not open for further replies.
Back