Overview #
System Restore (Windows) and Time Machine (macOS) are lifesavers when updates or installations go wrong — but they sometimes fail to run, freeze during restoration, or refuse to create restore points.
This guide walks you through fixing these built-in recovery systems, repairing snapshot services, and safely restoring your system to a previous working state.
What you’ll learn
- How to fix restore or backup system errors
- How to re-enable snapshot services and drivers
- How to rebuild restore points or Time Machine backups
- How to perform safe rollbacks without data loss
Estimated time: 20–40 minutes
Skill level: Intermediate
Terms and Definitions #
| Term | Meaning |
|---|---|
| System Restore Point | Snapshot of Windows system files and registry for rollback |
| VSS (Volume Shadow Copy Service) | Windows service that creates system snapshots |
| Time Machine | macOS backup system for files, apps, and system state |
| Backup Disk | External or internal drive that stores Time Machine or restore snapshots |
| Restore Rollback | Reverting the operating system to a previously stored point in time |
Steps #
Step 1 — Check for Recent Errors or Failed Restores #
Windows PowerShell
Get-WinEvent -LogName Application | Where-Object {$_.Message -like "*System Restore*"} | Select TimeCreated, Message -Last 10
If you see messages like “The shadow copy failed” or “Restore point creation failed”, it indicates the VSS service is malfunctioning.
macOS Terminal
log show --predicate 'eventMessage CONTAINS "backupd"' --last 24h
This checks for Time Machine errors such as “Backup volume not available” or “Snapshot failed.”
Step 2 — Verify Restore or Backup Drive Availability #
Windows
Get-Volume
Ensure your system drive (C:) shows HealthStatus = Healthy.
If using a secondary drive for restore points, it must have NTFS formatting.
macOS
diskutil list
Verify your Time Machine drive appears under /Volumes/.
If not, reconnect or power-cycle the external drive.
Step 3 — Check Restore / Snapshot Services #
Windows
Get-Service VSS, swprv, Sdrsvc, srservice
If any show Stopped, restart them:
Start-Service VSS
Start-Service swprv
Start-Service Sdrsvc
Start-Service srservice
These are responsible for system restore point creation.
macOS
Check the Time Machine service:
sudo launchctl list | grep backupd
If inactive, restart it:
sudo launchctl kickstart -k system/com.apple.backupd-auto
Step 4 — Recreate the Restore or Backup Configuration #
Windows
- Open Control Panel → System → System Protection.
- Select your system drive → Configure.
- Turn on System Protection and allocate at least 5–10 GB.
- Click Create to manually create a test restore point.
macOS
- Open System Settings → General → Time Machine.
- Re-add your backup disk if missing.
sudo tmutil setdestination /Volumes/YourBackupDrive - Verify automatic backups are enabled:
sudo tmutil enable
Step 5 — Clear Old or Corrupt Snapshots #
Windows PowerShell
vssadmin list shadows
vssadmin delete shadows /all /quiet
Then recreate a restore point:
Checkpoint-Computer -Description "Clean Restore Point"
macOS
Delete damaged Time Machine snapshots:
sudo tmutil listlocalsnapshots /
sudo tmutil deletelocalsnapshots 2025-10-09-120011
(Replace the timestamp with the snapshot name from the list.)
Rebuild a fresh snapshot:
sudo tmutil localsnapshot
Step 6 — Repair File System Integrity #
Windows
Run:
sfc /scannow
DISM /Online /Cleanup-Image /RestoreHealth
These repair corruption that prevents snapshots from completing.
macOS
diskutil verifyVolume /
diskutil repairVolume /
Reboot after completion.
Step 7 — Test Restore Functionality #
Windows
List available restore points:
vssadmin list shadows
Or use the System Restore interface:
rstrui.exe
Choose the most recent working restore point and run through the wizard.
macOS
Initiate a Time Machine restore:
- Click the Time Machine icon in the menu bar.
- Select Enter Time Machine → navigate to a date prior to the issue.
- Restore files or the full system if necessary.
Step 8 — Check for Security or Policy Restrictions #
Windows
Some antivirus tools or corporate Group Policies disable restore features.
Run:
gpedit.msc
Navigate to Computer Configuration → Administrative Templates → System → System Restore.
Ensure “Turn off System Restore” and “Turn off Configuration” are both set to Not Configured.
macOS
Ensure the Time Machine drive is not encrypted or restricted by MDM policies.
sudo fdesetup status
If FileVault is on, unlock the drive before backing up.
Step 9 — Monitor for New Snapshots #
Windows
Create a daily scheduled restore point:
Checkpoint-Computer -Description "Daily Auto Restore Point"
macOS
Force a new local snapshot:
sudo tmutil localsnapshot
Confirm success:
tmutil listlocalsnapshots /
Verification #
| Check | Command | Expected Result |
|---|---|---|
| Services | Get-Service VSS / launchctl list | All Running |
| Restore point | Checkpoint-Computer | Completed successfully |
| Snapshot list | vssadmin list shadows / tmutil listlocalsnapshots | Entries appear |
| Drive | Get-Volume / diskutil list | Healthy and mounted |
Conclusion #
If System Restore or Time Machine fails, the problem is rarely catastrophic. It’s almost always due to disabled snapshot services, full drives, or corrupted restore data.
By restarting the right services, clearing old snapshots, and rebuilding new ones, you can restore system recovery capability and protect your machine from future failures.
Keep automatic restore or backup scheduling turned on — it’s your fastest way back to normal when things go wrong.
