How can I exclude folders, files, or certain extensions from being backed up in System Protection's Restore Points and deleted or reverted by System Restore?

I know that My Documents folder wasn't included by default in Windows XP, and I'd like to add other folders to the exclude list as well (e.g. c:\workshop). Now in Windows 8 anything and everything in the root of c:\ gets backed up, and restored. It was really inconvenient when I had to restore last time and I lost all my recent work in the c:\workshop folder. And since I did the restore from safe mode it didn't create a roll-back restore point either. So I'd like to add certain folders if possible, rather than move my stuff elsewhere altogether.

I faintly remember reading about such thing being possible through command line in windows 7, along with changing the default backup location and other things, but can't find anything now or specifically for Windows 8.

1 Answer 1


In Windows Vista, 7, 8 and 8.1, My Documents is included (update: in Windows 10, System Protection is turned off by default for C:). In theory, System Restore does not affect documents, but unfortunately Microsoft's definition of 'document' is only those files whose extension is not included in their list of Monitored File Name Extensions. This list includes things like JavaScript .js, ActionScript .as, C# .cs, .INF, .INI, .1ST, .HLP - in total 574, including many that are used by various applications to save users' work.

If the files you want System Restore to leave alone are in this list, there is no way to prevent it from deleting such files added since the chosen restore point. Adding them to the FilesNotToBackup key will stop them being backed up by common backup programs, which is probably not what you want; it has no effect on System Restore. Adding them to FilesNotToSnapshot will stop them reverting to an earlier version, but will not stop them being deleted if they did not exist at the chosen restore point. Worse, with FilesNotToSnapshot the deleted files will not be recoverable by Undo Restore or Shadow Explorer, since the automatic restore point created before restoring will not contain them. Even worse, with FilesNotToSnapshot, making a restore point and immediately returning to it will delete those files, again with no Undo Restore possibility (without FilesNotToSnapshot it makes no changes).

Using FilesNotToSnapshot is thus more dangerous than the original problem with monitored extensions: rather than being reverted on Restore, your files will be deleted, and you won't be able to undo the deletion with Undo Restore or Shadow Explorer. Here's a table showing the possible changes to a monitored file since the Restore Point was made, what the user would like to happen on Restore, what happens by default, and what happens if the file is in FilesNotToSnapshot:

FilesNotToSnapshot causes files to be deleted on Restore

I have tested all this on Windows 7, 8 and 8.1 Update; it would be interesting to hear if those suggesting these registry keys have actually tried using them with System Restore in all cases: adding, modifying, deleting, and leaving unchanged a file with a monitored extension.

Personally, I think Microsoft have got it wrong with this functionality, and should trim the list of extensions. The best solution for now is to have your work files on a disk where System Protection is not enabled (e.g. either disabling it on C:, or storing your files on D:). Failing that, providing you haven't added files to FilesNotToSnapshot, after performing System Restore you can resurrect reverted or deleted work with Shadow Explorer, either as individual files or as a whole directory tree like C:\workshop.

  • If I well understand you post I cannot avoid the file deletion of a monitored extension added in disk after the restore point, it will be irredeemably deleted in case of system restore. Am I right?
    – Tobia
    Oct 17, 2017 at 13:50
  • With default registry settings, it will be deleted but you can recover it with Undo Restore or Shadow Explorer. Only if you have manually added the extension to the registry's FilesNotToSnapshot is it irrevocably deleted.
    – stevek_mcc
    Oct 18, 2017 at 12:17
  • no way to change monitored extensions for so above Win Vista?
    – Tobia
    Oct 18, 2017 at 12:32
  • No. The list of monitored extensions is hard-coded.
    – stevek_mcc
    Oct 19, 2017 at 14:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.