How to Fix "System Restore Is Disabled by Your System Administrator" in Windows 10 & 11

When attempting to open the recovery tools on Windows 10 or Windows 11, you may encounter a red warning banner or greyed-out recovery options stating: "System Restore is disabled by your system administrator".
This lockout occurs when Local Group Policy rules or Windows Registry subkeys enforce the DisableSR restriction flag. It commonly manifests after running aggressive third-party optimization scripts, installing stripped-down custom Windows ISOs (Lite/Ghost editions), or when using a computer managed by enterprise IT policies.
Note for Windows Home Users: The Group Policy Editor (gpedit.msc) is not included by default on Windows 10/11 Home edition. Proceed directly to Method 2 (Registry Editor) to unlock System Restore immediately.
Troubleshooting Methods by Windows Edition
| Method | System Tool | Supported Windows Editions | Primary Benefit |
|---|---|---|---|
| 1. Group Policy | gpedit.msc |
Windows 10/11 Pro, Enterprise, Education | GUI-based, safe, easily reversible |
| 2. Windows Registry | regedit |
All editions (including Windows Home) | Directly clears the policy lockout flags |
| 3. Volume Shadow Copy | services.msc |
All Windows editions | Resolves disabled VSS background service dependencies |
| 4. System File Repair | cmd (Admin) |
All Windows editions | Repairs corrupted restore binaries and DLLs |
Method 1: Enable System Restore via Group Policy (gpedit.msc)
For systems running Windows Pro, Enterprise, or Education:
- Press the Windows + R keys to open the Run dialog.
- Type
gpedit.mscand press Enter to launch the Local Group Policy Editor. - Navigate through the left directory tree:
Computer Configuration>Administrative Templates>System>System Restore. - In the right pane, locate the policy named Turn off System Restore. Double-click to open it.
- Change the radio selection from Enabled to Not Configured (or Disabled), then click Apply > OK.
- Check the Turn off Configuration policy (if present) and set it to Not Configured as well.
- Reboot your computer for the policy override to take effect.
Method 2: Remove Lockout Keys via Registry Editor (regedit)
This method applies universally to all editions of Windows, including Windows 10 and 11 Home:
- Press Windows + R, type
regedit, and hit Enter. Click Yes on the UAC prompt. - Paste the following address into the top navigation bar of the Registry Editor:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore - In the right pane, look for the following DWORD entries:
DisableSRDisableConfig - Double-click each value and change its Value data from
1to0(or right-click and select Delete to purge the restrictive keys completely). - Close the Registry Editor and restart your computer.
Method 3: Start the Volume Shadow Copy Service (VSS)
System Restore depends on the Volume Shadow Copy service to take differential snapshots of NTFS drives. If this background service is set to disabled, System Restore cannot initialize:
- Press Windows + R, type
services.msc, and hit Enter. - Scroll down and double-click Volume Shadow Copy.
- Set the Startup type dropdown to Automatic (or Manual).
- If the Service status shows Stopped, click the Start button to run the service immediately.
- Click Apply > OK.
- Locate the Microsoft Software Shadow Copy Provider service and verify that it is running with a matching configuration.
Method 4: Repair Corrupted System Files Using SFC & DISM
If group policies are unlocked but the System Restore configuration page throws errors, core Windows binaries may be corrupted:
- Press the Start button, type
cmd, right-click Command Prompt, and choose Run as administrator. - Execute the DISM component repair tool first:
DISM /Online /Cleanup-Image /RestoreHealth - Once the DISM scan reaches 100% completion, run the System File Checker command:
sfc /scannow - Wait for the scan to finish replacing corrupted files, then reboot your computer.
Enabling gpedit.msc on Windows 10/11 Home
If you prefer using Group Policy on Windows Home without purchasing a Pro license upgrade, you can load the Microsoft servicing packages via DISM directly by running a batch script containing the official Microsoft-Windows-GroupPolicy-ClientTools-Package commands with administrator privileges.
Related Articles

RimikoOS 11 PRO: Lightweight Windows 11 Lite OS for Low-End PCs & Gaming
Download RimikoOS 11 PRO (Build 22631.4112 23H2), a debloated Windows 11 Lite ISO with no telemetry, removed Edge, and optimized RAM for low-end gaming PCs.

How to Use Windows MSRT (Malicious Software Removal Tool)
Learn how to launch Microsoft Malicious Software Removal Tool (MSRT) using the mrt command to scan and remove worms, trojans, and malicious software on Windows 10/11.

Essential CMD & PowerShell Commands to Boost Windows 10/11 Performance
Master native Windows terminal tweaks: disable CPU-heavy RAM compression, unlock Ultimate Performance power scheme, and minimize gaming input latency.

Windows BCDEdit Optimization: Tweaks for Latency and FPS Stability
Learn how to configure Windows BCD store via elevated Command Prompt to optimize system timers, reduce DPC latency, and stabilize frame pacing in games.
Comments(0)
Sign in to join the conversation
Sign in with Google, Facebook or Email to leave a comment and get notified of replies.
No comments yet. Be the first to join the conversation!