PS Restore Points – Systemwiederherstellung

# Systemwiederherstellung aktivieren
Enable-ComputerRestore -Drive 'C:\', 'D:\'

# Systemwiederherstellung deaktivieren
Disable-ComputerRestore -drive "D:\"

# Systemwiederherstellungspunkt erstellen
Checkpoint-Computer "MYPOINT"
Checkpoint-Computer -description "MYPOINT" -restorepointtype "MODIFY_SETTINGS"
Checkpoint-Computer -description "MYPOINT" -restorepointtype "APPLICATION_INSTALL"
Checkpoint-Computer -description "MYPOINT" -restorepointtype "APPLICATION_UNINSTALL"
Checkpoint-Computer -description "MYPOINT" -restorepointtype "DEVICE_DRIVER_INSTALL"
Checkpoint-Computer -description "MYPOINT" -restorepointtype "CANCELLED_OPERATIONL"

# Per Verknüpfung eines Systemwiederherstellungspunkt setzen
powershell -Command "Start-Process powershell.exe -ArgumentList '-ExecutionPolicy Bypass -NoExit -Command \`"Checkpoint-Computer -Description \"MYPONIT\" -RestorePointType "MODIFY_SETTINGS"\`"' -Verb RunAs"

powershell.exe -NoExit -Command "& {Checkpoint-Computer -description "MYPOINT" -restorepointtype "Modify_Settings"}"

# Systemwiederherstellungspunkte auslesen
Get-ComputerRestorePoint
(Get-ComputerRestorePoint)[-1].sequencenumber

# Letzten Systemwiederherstellungsversuch anzeigen
Get-ComputerRestorePoint -LastStatus

# System auf Wiederherstellungspunkt zurücksetzen
Restore-Computer -RestorePoint 18

# Intervall einstellen - Value Hexadezimal
New-ItemProperty "hklm:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore" -Name "SystemRestorePointCreationFrequency" -Value 5 -PropertyType "DWord"

# Registry Intervall setzen
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"SystemRestorePointCreationFrequency"=dword:00000005

# Per WMI Class
$strDesc = "Automatic Restore Point"
$systemrestore = [wmiclass]'\\.\root\default:SystemRestore'
$systemrestore.CreateRestorePoint($strDesc, 12, 100)

# Per VSS die Systemwiederherstellungspunkte anzeigen lassen
vssadmin list shadows

# Per VSS einen Systemwiederherstellungspunkt löschen
vssadmin delete shadows /Shadow={0dde56d4-8dfd-4f80-8d4b-847a2b5b5f05}

# Per VSS alle Systemwiederherstellungspunkte löschen
vssadmin delete shadows /all