# Systemwiederherstellung aktivieren
Enable-ComputerRestore -Drive 'C:\', 'D:\'
# Systemwiederherstellung deaktivieren
Disable-ComputerRestore -drive "D:\"
# Systemwiederherstellungspunkt erstellen
Checkpoint-Computer "MYPOINT"
Checkpoint-Computer -description "MYPOINT" -restorepointtype "MODIFY_SETTINGS"
Checkpoint-Computer -description "MYPOINT" -restorepointtype "APPLICATION_INSTALL"
Checkpoint-Computer -description "MYPOINT" -restorepointtype "APPLICATION_UNINSTALL"
Checkpoint-Computer -description "MYPOINT" -restorepointtype "DEVICE_DRIVER_INSTALL"
Checkpoint-Computer -description "MYPOINT" -restorepointtype "CANCELLED_OPERATIONL"
# Per Verknüpfung eines Systemwiederherstellungspunkt setzen
powershell -Command "Start-Process powershell.exe -ArgumentList '-ExecutionPolicy Bypass -NoExit -Command \`"Checkpoint-Computer -Description \"MYPONIT\" -RestorePointType "MODIFY_SETTINGS"\`"' -Verb RunAs"
powershell.exe -NoExit -Command "& {Checkpoint-Computer -description "MYPOINT" -restorepointtype "Modify_Settings"}"
# Systemwiederherstellungspunkte auslesen
Get-ComputerRestorePoint
(Get-ComputerRestorePoint)[-1].sequencenumber
# Letzten Systemwiederherstellungsversuch anzeigen
Get-ComputerRestorePoint -LastStatus
# System auf Wiederherstellungspunkt zurücksetzen
Restore-Computer -RestorePoint 18
# Intervall einstellen - Value Hexadezimal
New-ItemProperty "hklm:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore" -Name "SystemRestorePointCreationFrequency" -Value 5 -PropertyType "DWord"
# Registry Intervall setzen
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"SystemRestorePointCreationFrequency"=dword:00000005
# Per WMI Class
$strDesc = "Automatic Restore Point"
$systemrestore = [wmiclass]'\\.\root\default:SystemRestore'
$systemrestore.CreateRestorePoint($strDesc, 12, 100)
# Per VSS die Systemwiederherstellungspunkte anzeigen lassen
vssadmin list shadows
# Per VSS einen Systemwiederherstellungspunkt löschen
vssadmin delete shadows /Shadow={0dde56d4-8dfd-4f80-8d4b-847a2b5b5f05}
# Per VSS alle Systemwiederherstellungspunkte löschen
vssadmin delete shadows /all
