Skip to content
NoticeWelcome to Osteup! Practical tools and optimization tweaks shared freely.
Osteup LogoOsteup

How to Fix "System Restore Is Disabled by Your System Administrator" in Windows 10 & 11

oosteup
··3 min read·0 views
Windows
Khắc phục lỗi System Restore Is Disabled by Your System Administrator trên Windows 10 và 11

When attempting to open the recovery tools on Windows 10 or Windows 11, you may encounter a red warning banner or greyed-out recovery options stating: "System Restore is disabled by your system administrator".

This lockout occurs when Local Group Policy rules or Windows Registry subkeys enforce the DisableSR restriction flag. It commonly manifests after running aggressive third-party optimization scripts, installing stripped-down custom Windows ISOs (Lite/Ghost editions), or when using a computer managed by enterprise IT policies.

Note for Windows Home Users: The Group Policy Editor (gpedit.msc) is not included by default on Windows 10/11 Home edition. Proceed directly to Method 2 (Registry Editor) to unlock System Restore immediately.

Troubleshooting Methods by Windows Edition

Method System Tool Supported Windows Editions Primary Benefit
1. Group Policy gpedit.msc Windows 10/11 Pro, Enterprise, Education GUI-based, safe, easily reversible
2. Windows Registry regedit All editions (including Windows Home) Directly clears the policy lockout flags
3. Volume Shadow Copy services.msc All Windows editions Resolves disabled VSS background service dependencies
4. System File Repair cmd (Admin) All Windows editions Repairs corrupted restore binaries and DLLs

Method 1: Enable System Restore via Group Policy (gpedit.msc)

For systems running Windows Pro, Enterprise, or Education:

  1. Press the Windows + R keys to open the Run dialog.
  2. Type gpedit.msc and press Enter to launch the Local Group Policy Editor.
  3. Navigate through the left directory tree:
    Computer Configuration > Administrative Templates > System > System Restore.
  4. In the right pane, locate the policy named Turn off System Restore. Double-click to open it.
  5. Change the radio selection from Enabled to Not Configured (or Disabled), then click Apply > OK.
  6. Check the Turn off Configuration policy (if present) and set it to Not Configured as well.
  7. Reboot your computer for the policy override to take effect.

Method 2: Remove Lockout Keys via Registry Editor (regedit)

This method applies universally to all editions of Windows, including Windows 10 and 11 Home:

  1. Press Windows + R, type regedit, and hit Enter. Click Yes on the UAC prompt.
  2. Paste the following address into the top navigation bar of the Registry Editor:
    HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore
  3. In the right pane, look for the following DWORD entries: DisableSR DisableConfig
  4. Double-click each value and change its Value data from 1 to 0 (or right-click and select Delete to purge the restrictive keys completely).
  5. Close the Registry Editor and restart your computer.

Method 3: Start the Volume Shadow Copy Service (VSS)

System Restore depends on the Volume Shadow Copy service to take differential snapshots of NTFS drives. If this background service is set to disabled, System Restore cannot initialize:

  1. Press Windows + R, type services.msc, and hit Enter.
  2. Scroll down and double-click Volume Shadow Copy.
  3. Set the Startup type dropdown to Automatic (or Manual).
  4. If the Service status shows Stopped, click the Start button to run the service immediately.
  5. Click Apply > OK.
  6. Locate the Microsoft Software Shadow Copy Provider service and verify that it is running with a matching configuration.

Method 4: Repair Corrupted System Files Using SFC & DISM

If group policies are unlocked but the System Restore configuration page throws errors, core Windows binaries may be corrupted:

  1. Press the Start button, type cmd, right-click Command Prompt, and choose Run as administrator.
  2. Execute the DISM component repair tool first:
    DISM /Online /Cleanup-Image /RestoreHealth
  3. Once the DISM scan reaches 100% completion, run the System File Checker command:
    sfc /scannow
  4. Wait for the scan to finish replacing corrupted files, then reboot your computer.
Enabling gpedit.msc on Windows 10/11 Home

If you prefer using Group Policy on Windows Home without purchasing a Pro license upgrade, you can load the Microsoft servicing packages via DISM directly by running a batch script containing the official Microsoft-Windows-GroupPolicy-ClientTools-Package commands with administrator privileges.

Was this article helpful?

Related Articles

Comments(0)

No comments yet. Be the first to join the conversation!