What is rstrui.exe? It’s the executable file that launches System Restore in Windows, a built-in recovery tool that can roll back your computer to an earlier working state when something goes wrong.
If your PC is crashing, running slowly, or acting strange after installing new software or updates, rstrui.exe might be exactly what you need. This file lives in your Windows system folder and gives you access to restore points that Windows automatically creates.
Let me show you everything you need to know to use this tool safely and effectively.
rstrui.exe Basics
The rstrui.exe file is a legitimate Windows component. You’ll find it in *C:\Windows\System32* on almost every Windows computer.
File size: Typically 200-300 KB
Publisher: Microsoft Corporation
Purpose: Launches the System Restore wizard
When you run this executable, it opens a window that lets you choose from previously saved restore points. These are snapshots of your system files, registry settings, and installed programs from specific dates.
What System Restore Actually Does
System Restore affects:
- Windows system files
- Registry entries
- Installed programs and drivers
- System settings and configurations
System Restore does NOT affect:
- Your personal files (documents, photos, videos)
- Emails and email settings
- Browser bookmarks in most cases
- Data files stored in user folders
This distinction matters. You can restore your system without losing your work.
When Should You Use rstrui.exe?
Run System Restore through rstrui.exe in these situations:
After bad software installations. A program conflicts with Windows or other software, causing crashes or errors.
Following driver updates. New graphics, audio, or network drivers sometimes break functionality. Restore points from before the update can fix this.
When malware causes damage. Some infections modify system files. System Restore can undo these changes (though you should still run antivirus software).
After Windows updates fail. Occasionally, updates cause more problems than they solve. Rolling back helps.
When registry errors appear. Corrupted registry entries often respond well to System Restore.
Real Example Scenario
Your laptop worked perfectly yesterday. Today you installed a graphics utility, and now Windows won’t boot properly. You can access Safe Mode. Running rstrui.exe from Safe Mode lets you choose yesterday’s automatic restore point, reversing the problematic installation.
How to Run rstrui.exe: Five Methods
Method 1: Through Windows Search
- Click the Start button or press Windows key
- Type “system restore” or “rstrui”
- Click “Create a restore point” from results
- Click the “System Restore” button in the window that opens
This works on Windows 10 and Windows 11.
Method 2: Using Run Dialog
- Press Windows key + R together
- Type rstrui.exe in the box
- Press Enter or click OK
This method is fastest if you remember the command.
Method 3: From Command Prompt
- Open Command Prompt (type “cmd” in Start menu)
- Type rstrui.exe and press Enter
- The System Restore wizard opens immediately
Use this method when your Start menu isn’t working properly.
Method 4: In Safe Mode
Safe Mode is crucial when Windows won’t start normally.
- Restart your computer
- Press F8 repeatedly during boot (Windows 7) or hold Shift while clicking Restart (Windows 10/11)
- Choose Safe Mode from the menu
- Once Windows loads, use any method above to run rstrui.exe
Method 5: From Advanced Startup Options
When Windows won’t boot at all:
- Force shutdown by holding the power button
- Turn on your PC
- Repeat this three times until Windows shows “Automatic Repair” screen
- Click “Advanced options”
- Choose “System Restore”
Windows runs rstrui.exe automatically from this menu.
Step-by-Step: Using System Restore
Once rstrui.exe opens, follow these steps:
Step 1: Welcome Screen
The wizard explains what System Restore does. Click “Next” to continue.
Step 2: Choose a Restore Point
You see a list of available restore points with dates and descriptions.
Check “Show more restore points” to see older options. Each entry shows:
- Date and time created
- Description (what triggered creation)
- Type (Manual, System, or Install)
Step 3: Scan for Affected Programs
Click “Scan for affected programs” before proceeding. This shows which programs will be removed or restored.
Review this list carefully. Programs installed after your chosen restore point will be uninstalled.
Step 4: Confirm Your Choice
Click “Next” after reviewing. Windows shows a final confirmation screen.
Important: Once you click “Finish,” the process cannot be interrupted. Save all open work first.
Step 5: Restoration Process
Your computer restarts automatically. The restoration takes 15 to 45 minutes typically.
A progress bar shows the status. Your PC will restart again when complete.
Step 6: After Restoration
Windows shows a success or failure message. If successful, your system now matches the state from your chosen restore point.
Test your computer to verify the problem is fixed.
Creating Restore Points Manually
Don’t wait for problems. Create restore points before major changes.
- Type “create a restore point” in Start menu search
- Click the matching result
- In System Protection tab, click “Create”
- Type a descriptive name like “Before installing video editor”
- Click “Create” and wait a few minutes
Windows automatically creates restore points:
- Before Windows Updates install
- Before driver installations
- Before some program installations
- Once weekly if no other points were created
You can have multiple restore points. Windows manages disk space automatically, deleting older points when needed.
Common rstrui.exe Problems and Fixes
Problem: “System Restore is Disabled”
Solution: Enable System Protection for your C: drive.
- Open System Properties (search “create a restore point”)
- Select your C: drive
- Click “Configure”
- Select “Turn on system protection”
- Allocate at least 5% of disk space
- Click Apply
Problem: No Restore Points Available
Causes:
- System Protection was recently enabled
- Disk space too low
- Restore points were manually deleted
- Disk cleanup removed them
Solution: Create a restore point now for future use. Free up disk space if necessary.
Problem: System Restore Failed to Complete
Error message: “System Restore did not complete successfully.”
Solutions:
Try Safe Mode. Run rstrui.exe from Safe Mode instead of normal Windows. This prevents software conflicts.
Disable antivirus temporarily. Some security software blocks System Restore. Disable it before running rstrui.exe.
Check disk space. You need at least 300 MB free on your system drive.
Run System File Checker:
- Open Command Prompt as Administrator
- Type sfc /scannow
- Press Enter and wait for completion
- Restart and try System Restore again
Problem: rstrui.exe Won’t Open
Solutions:
Check for malware. Some infections disable System Restore. Run a full antivirus scan with Windows Security or your preferred security software.
Verify the file exists:
- Open File Explorer
- Navigate to C:\Windows\System32\
- Look for rstrui.exe
- Check file size (should be 200-300 KB)
If missing or wrong size, run System File Checker as described above.
Check Group Policy settings (Windows Pro/Enterprise):
- Press Windows key + R
- Type gpidit.msc and press Enter
- Navigate to Computer Configuration > Administrative Templates > System > System Restore
- Ensure “Turn off System Restore” is set to “Not Configured”
Is rstrui.exe Safe? Security Concerns
Legitimate rstrui.exe from Microsoft is completely safe. However, malware sometimes disguises itself with this name.
How to Verify Authenticity
Check the file location. Real rstrui.exe exists only in C:\Windows\System32. If you find it elsewhere, it’s suspicious.
Verify the digital signature:
- Right-click the file in File Explorer
- Choose Properties
- Click the Digital Signatures tab
- Check that Microsoft Corporation is listed
Compare file size. Authentic rstrui.exe is 200-300 KB. Significantly larger or smaller files are suspicious.
Monitor resource usage. Real rstrui.exe uses minimal CPU and RAM when not actively restoring. If a process named rstrui.exe constantly uses resources, investigate.
What If It’s Malware?
Disconnect from the internet immediately. Run a full system scan with updated antivirus software. Consider using multiple scanning tools like Malwarebytes alongside Windows Security.
Boot into Safe Mode with Networking. This prevents most malware from running while allowing you to download security tools.
Use System Restore if you have a clean restore point from before the infection. This can remove malware that modified system files.
System Restore Limitations You Should Know
Restore points can fail. Corrupted system files, disk errors, or interrupted processes cause failures. Always have backups of important data.
Recent programs disappear. Anything installed after your chosen restore point gets removed. You’ll need to reinstall these programs.
Some infections persist. Sophisticated malware may survive System Restore. Don’t rely on it as your only malware removal tool.
Limited restore point history. Windows automatically deletes old restore points to save space. You might not have a point from when you need.
Driver issues aren’t always fixed. Sometimes hardware problems require manual driver updates, not system restoration.
Advanced: Command Line Options for rstrui.exe
Power users can run rstrui.exe with parameters from Command Prompt or scripts.
Basic command: rstrui.exe Opens the System Restore wizard normally.
Silent restoration: rstrui.exe /offline:C:\windows=active Restores Windows offline image (advanced scenarios only).
These commands work in administrative Command Prompt only. Most users never need command line options, but they exist for automation and advanced troubleshooting.
System Restore vs Other Recovery Options
System Restore vs System Reset
| Feature | System Restore | System Reset |
|---|---|---|
| Personal files | Keeps all | Optional (can keep or remove) |
| Installed programs | Removes recent ones | Removes all |
| System files | Restores to restore point | Reinstalls Windows |
| Time required | 15-45 minutes | 30-120 minutes |
| Data loss risk | Very low | Medium (if you choose remove all) |
Use System Restore for minor problems. Use Reset for serious corruption or when selling your PC.
System Restore vs Backup/Recovery Image
System Restore only affects system files and settings. A full system image backup includes everything: personal files, programs, Windows, the works.
Create system images regularly using Windows Backup or third-party tools. These provide complete recovery when System Restore isn’t enough.
System Restore complements backups. Use both for maximum protection.
Optimizing System Restore Performance
Allocate sufficient disk space. The default 5% works, but 10% provides more restore points.
- Open System Properties
- Click Configure under System Protection
- Adjust the slider to 10%
- Click Apply
Create restore points before risky operations. Install beta software? Make a manual restore point first. Editing registry? Create a restore point. This takes 30 seconds and can save hours of troubleshooting.
Don’t rely solely on automatic points. Windows might not create a point before every risky action. Manual points give you control.
Test your restore points occasionally. Once every few months, try restoring to a recent point, then immediately undo it. This confirms the feature works when you need it.
Keep adequate free space. System Restore needs working room. Keep at least 15% of your system drive free.
Troubleshooting Specific Error Codes
Error 0x80070091
Meaning: Directory not empty or file in use.
Fix:
- Close all programs
- Disable antivirus temporarily
- Run System Restore from Safe Mode
Error 0x80070005
Meaning: Access denied.
Fix:
- Run rstrui.exe as Administrator
- Check file permissions on C:\Windows\System32\
- Disable User Account Control temporarily
Error 0x800423F3
Meaning: Volume Shadow Copy service issue.
Fix:
- Press Windows key + R
- Type services.msc and press Enter
- Find “Volume Shadow Copy”
- Right-click and choose Start
- Set startup type to Automatic
Best Practices for System Restore in 2026
Enable System Protection on all drives. Not just C:, but any drive where you install programs.
Create descriptive restore point names. “Before update” is vague. Use “Before installing Photoshop 2026” instead.
Document your restore points. Keep a simple text file listing dates and what each restore point represents.
Understand what triggers automatic points. Windows creates them before major changes, but not every change qualifies.
Combine with other protection. Use System Restore alongside:
- Regular file backups
- Antivirus software
- Windows updates
- Careful software installation habits
Know the undo option exists. After a restoration, you can undo it if things got worse. Look for “Undo System Restore” in the rstrui.exe wizard.
Frequently Asked Questions
How long do restore points last?
Restore points remain until Windows needs the disk space they occupy or 90 days pass, whichever comes first. Windows automatically deletes the oldest points when space runs low. You can increase allocated space to retain more points for longer periods.
Can System Restore remove viruses?
System Restore can remove some malware by reversing system file changes, but it’s not a reliable antivirus tool. Sophisticated malware often survives restoration because it hides in places System Restore doesn’t touch. Always run dedicated antivirus software after detecting infections.
Will System Restore delete my photos and documents?
No. System Restore only affects Windows system files, installed programs, drivers, and registry settings. Your personal files in Documents, Pictures, Downloads, and other user folders remain completely untouched. However, always maintain separate backups of important files as a general safety practice.
Why does System Restore fail so often?
Common failure causes include insufficient disk space, corrupted system files, conflicts with antivirus software, interrupted restoration processes, and damaged restore points. Running System Restore from Safe Mode significantly improves success rates by preventing software conflicts during the restoration process.
Can I use System Restore on Windows 11?
Yes. System Restore works identically on Windows 11, Windows 10, Windows 8, and Windows 7. The rstrui.exe file and System Protection feature remain consistent across modern Windows versions. Access methods and the user interface are nearly identical across these operating systems.
Conclusion
The rstrui.exe executable provides access to one of Windows’ most valuable recovery features. When used correctly, System Restore fixes many common problems without data loss or complex troubleshooting.
Remember these key points:
System Restore saves your system configuration at specific points in time. Run rstrui.exe from Windows Search, Run dialog, Command Prompt, or Safe Mode depending on your situation. Create manual restore points before major changes to your system. Enable System Protection and allocate adequate disk space for restore points. Verify rstrui.exe authenticity if you suspect malware. Combine System Restore with regular backups for comprehensive protection.
System Restore isn’t perfect. It won’t fix hardware failures, can’t guarantee removal of all malware, and sometimes fails for various technical reasons. But for software-related problems, driver conflicts, and registry issues, it provides a fast, safe solution that preserves your personal files.
Take five minutes right now to verify System Protection is enabled on your computer. Create a manual restore point. Knowing how to use rstrui.exe effectively can save you hours of frustration when problems inevitably occur.
Your future self will thank you when something goes wrong and you have a clean restore point ready to fix it.
