registry

Restore Windows 10 Registry from Backup using Command Prompt


When Windows 10 have some problems with registry files (in case of corruption, accidental deletion etc.), the system offers a simple way to restore the registry from automatically created backup. In this guide we will show you how to Restore Windows 10 Registry from a backup or system restore point (VSS snapshots) that were created earlier.

Regback: How to Restore Registry from Backup in Windows 10

The system automatically saves a Windows 10 backup copy of registry to this location %windir%\System32\config\RegBack\.

windows 10 registry backup location

Each branch of the registry hive is stored in a separate file. There are 5 files total in this location (in parentheses indicate the registry branch that is stored in a file):

  • DEFAULT (HKEY_USERS\.DEFAULT)
  • SAM (HKEY_LOCAL_MACHINE\SAM)
  • SOFTWARE (HKEY_LOCAL_MACHINE\Software)
  • SECURITY (KEY_LOCAL_MACHINE\Security)
  • SYSTEM (HKEY_LOCAL_MACHINE\SYSTEM)

Accordingly, to restore registry in Windows 10 simply copy the files from RegBack folder (where they are usually updated after updates that affect the registry) to the folder %windir%\System32\Config.

regback

If Windows 10 is turned on, you can’t replace the original registry files in the %windir%\System32\Config since they are locked by the system. However, as a rule, you have to proceed to the registry restore process when your Windows is not booting in normal mode. In this case, you can replace the damaged registry files from the WinPE command prompt by booting to the Windows 10 recovery environment or from Windows 10 distribution disk.

READ ALSO  How to Fix Windows 10 Flashing Screen

Restore Windows 10 Registry from Command Prompt

To open command prompt, boot your PC in the recovery mode (you need to interrupt normal boot of your computer 3 times in a row using Power button) and select Troubleshoot -> Advanced Options -> Command prompt.

Also to open Command prompt you can boot your PC from Windows 10 distribution DVD disk or flash drive and on the first installation screen press Shift + F10 (on some laptops Shift + Fn + F10).

Letter of your system drive may be different from C:\ in the recovery environment. To find out what drive letter is assigned to the system partition, enter one by one the following commands:

diskpart
list volume
exit

cmd diskpart

You can easily determine that the system partition is assigned the drive letter D:\ (volume 2) by the size of disks.

Now use Command prompt to restore the registry from backup:

Xcopy d:\Windows\System32\config\regback d:\Windows\System32\config

Confirm the replacement of files using key A.

restore windows 10 registry from command prompt

After the command execution is finished, all the registry files will be replaced with their backups. You can close the Command prompt and reboot computer to see whether the operability of Windows 10 has been restored.

If the registry files in backup are corrupted, you can try manually restore older version of the registry files from a System Restore point.

Boot into WinPE environment as described earlier and go to the system32 directory:

d:
cd d:\windows\system32

Display a list of all available restore points using command:

vssadmin.exe list shadows

restore windows 10 registry command prompt

In this example, the last shadow copy taken 10/20/2016 4:02:40 AM and has Shadow Copy Volume path \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy6\.

Mount the snapshot on reading to the folder d:\ShadowCopy using the mklink tool:

mklink /D d:\ShadowCopy \\?\GLOBALROOT\Device\HarddiskVolumeShadowCopy6\

restore registry windows 10 command prompt

Now you can access files stored in the shadow volume. Simply copy and replace registry files using the following commands:

xcopy d:\shadowCopy\ Windows\System32\config\DEFAULT d:\Windows\System32\config
xcopy d:\shadowCopy\ Windows\System32\config\SAM d:\Windows\System32\config
xcopy d:\shadowCopy\ Windows\System32\config\SOFTWARE d:\Windows\System32\config
xcopy d:\shadowCopy\ Windows\System32\config\SECURITY d:\Windows\System32\config
xcopy d:\shadowCopy\ Windows\System32\config\SYSTEM d:\Windows\System32\config

Reboot your computer and you’ve successfully Restore Windows 10 Registry. Hope this was useful!

READ ALSO  How to backup WSUS database

You may also like:

How to Convert ESD to WIM File on Windows 10 In this tutorial we will show you how to convert ESD to WIM file using Command Prompt. ESD file is a new thing within Windows 10 OS, that Microsoft is...
Sysprep Windows 10 Machine: Step by Step Guide In this article we will show you how to use PowerShell and Windows System Preparation Tool to prepare a highly customized, personal Windows 10 install...
Capture Windows 10 Image using MDT 2013 In this article we are going to show you how to capture Windows 10 image using Microsoft Deployment Toolkit 2013 (MDT 2013). Later you can use such im...
Integrate WSUS Offline Updater with MDT 2013 to De... In this article we will show you how to install updates offline gained using WSUS Offline Updater, inside MDT 2013 task sequences to deploy fully patc...
System Restore Point in Windows 10: How to Enable,... Today we will show you how to enable, create and perform a system restore point in Windows 10. Let’s get started here by clicking on Start menu. Go to...
  • Sergio Garcia

    won-der-ful. Thanks!!!