Recommended Posts

How to install System restore on server 2003

This thread describes how to install system restore on server 2003. It is not a thread for talking about WHY you might want to do this, that belongs to another thread :)

Below i will show how to do this after server 2003 is installed. I haven't tried slipstreaming this, but i imagine it could be done easily. If there's enough interest i might show how to slipstream system restore into server 2003.

Before we begin, you'll need an XP CD. Doesn't matter if it's home or pro. It shouldn't matter if it has a service pack on it, since all the files will be the same source. In testing i used a slipstreamed cd that already had sp1 on it.

In XP, system restore is installed in syssetup.inf under the inf.always section. If you have XP installed, you can open up %windir%\inf\syssetup.inf and search for [infs.Always], you'll see the section xp looks at for installing system components. You'll notice it has sr.inf, this is the inf for system restore. For server 2003, if you look at syssetup.inf you won't find sr.inf. This doesn't mean system restore won't work in server 2003, it just means they didn't install it.

So first what we're going to need to do is right click on sr.inf and select 'install', to install it on server 2003. If you have xp installed on another computer/partition you can just right click on it. If you don't, then extract \i386\sr.in_ from the XP cd to your desktop, then right click on it and select 'install'. It'll prompt you were the files are, point it to the XP CD. Once done, it'll prompt to restart, say yes.

That was easy, the next part is the tricky part. After restarting you'll get an error saying the service couldn't start. Specifically the error is error 1068. I searched google and found this link - http://www.aerdyne.com/Kbase/article_000005.htm. The error basically means it cannot run under the service it's on. In system restore's case, it runs under the network service. I know this because in services.msc, for path to executable, it says this: C:\WINDOWS\system32\svchost.exe -k netsvcs. This got me thinking so i opened up sr.inf, and found this line:

[sRSvc_delreg]

HKLM,"Software\Microsoft\Windows NT\CurrentVersion\SvcHost","SRGroup"

I opened up regedit, and this registry key didn't exist. So it seems the sr.inf doesn't register system restore to run under the network services group. Using the above registry key as an example, i opened regedit and went to:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost

On the right hand side i saw netsvcs. I double clicked on it, but saw SRService no where (SRService is the name for system restore). On a hunch, at the bottom i added SRService, rebooted, and this time got no error on startup. I opened up rstrui.exe, and system restore opened fine. I also had a System restore tab in system properties now too. I was able to make a restore point fine, then restore the computer to it without any problems. So in the above key, you want to double click on netsvcs, and at the bottom of the list, you want to type in SRService (probably case sensitive).

If you're not good with the registry you can save the following as a whatever.reg file and import it, but because it's binary i can't say if it'll work. I recommend manually adding SRService to the netsvcs key.

---copy below to whatever.reg then double click on it -----

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost]

"netsvcs"=hex(7):41,00,70,00,70,00,4d,00,67,00,6d,00,74,00,00,00,41,00,75,00,\

64,00,69,00,6f,00,53,00,72,00,76,00,00,00,42,00,72,00,6f,00,77,00,73,00,65,\

00,72,00,00,00,43,00,72,00,79,00,70,00,74,00,53,00,76,00,63,00,00,00,44,00,\

4d,00,53,00,65,00,72,00,76,00,65,00,72,00,00,00,45,00,76,00,65,00,6e,00,74,\

00,53,00,79,00,73,00,74,00,65,00,6d,00,00,00,48,00,69,00,64,00,53,00,65,00,\

72,00,76,00,00,00,49,00,61,00,73,00,00,00,49,00,70,00,72,00,69,00,70,00,00,\

00,49,00,72,00,6d,00,6f,00,6e,00,00,00,4c,00,61,00,6e,00,6d,00,61,00,6e,00,\

53,00,65,00,72,00,76,00,65,00,72,00,00,00,4c,00,61,00,6e,00,6d,00,61,00,6e,\

00,57,00,6f,00,72,00,6b,00,73,00,74,00,61,00,74,00,69,00,6f,00,6e,00,00,00,\

4d,00,65,00,73,00,73,00,65,00,6e,00,67,00,65,00,72,00,00,00,4e,00,65,00,74,\

00,6d,00,61,00,6e,00,00,00,4e,00,6c,00,61,00,00,00,4e,00,74,00,6d,00,73,00,\

73,00,76,00,63,00,00,00,4e,00,57,00,43,00,57,00,6f,00,72,00,6b,00,73,00,74,\

00,61,00,74,00,69,00,6f,00,6e,00,00,00,4e,00,77,00,73,00,61,00,70,00,61,00,\

67,00,65,00,6e,00,74,00,00,00,52,00,61,00,73,00,61,00,75,00,74,00,6f,00,00,\

00,52,00,61,00,73,00,6d,00,61,00,6e,00,00,00,52,00,65,00,6d,00,6f,00,74,00,\

65,00,61,00,63,00,63,00,65,00,73,00,73,00,00,00,53,00,61,00,63,00,73,00,76,\

00,72,00,00,00,53,00,63,00,68,00,65,00,64,00,75,00,6c,00,65,00,00,00,53,00,\

65,00,63,00,6c,00,6f,00,67,00,6f,00,6e,00,00,00,53,00,45,00,4e,00,53,00,00,\

00,53,00,68,00,61,00,72,00,65,00,64,00,61,00,63,00,63,00,65,00,73,00,73,00,\

00,00,54,00,68,00,65,00,6d,00,65,00,73,00,00,00,54,00,72,00,6b,00,57,00,6b,\

00,73,00,00,00,54,00,72,00,6b,00,53,00,76,00,72,00,00,00,57,00,33,00,32,00,\

54,00,69,00,6d,00,65,00,00,00,57,00,5a,00,43,00,53,00,56,00,43,00,00,00,57,\

00,6d,00,69,00,00,00,57,00,6d,00,64,00,6d,00,50,00,6d,00,53,00,70,00,00,00,\

77,00,69,00,6e,00,6d,00,67,00,6d,00,74,00,00,00,77,00,75,00,61,00,75,00,73,\

00,65,00,72,00,76,00,00,00,42,00,49,00,54,00,53,00,00,00,53,00,68,00,65,00,\

6c,00,6c,00,48,00,57,00,44,00,65,00,74,00,65,00,63,00,74,00,69,00,6f,00,6e,\

00,00,00,68,00,65,00,6c,00,70,00,73,00,76,00,63,00,00,00,75,00,70,00,6c,00,\

6f,00,61,00,64,00,6d,00,67,00,72,00,00,00,57,00,6d,00,64,00,6d,00,50,00,6d,\

00,53,00,4e,00,00,00,53,00,52,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,\

00,00,00,00

--- copy above --------------------------------------------------------

That's it! Remember to restart both times.

Enjoy,

-gosh

post-77-1057441727.jpg

post-77-1057441727.jpg

Ok i just did a bit of editing. You know the system restore icon, looks a bit naff dont it? Kinda looks like Microsoft didnt have time to finnish it.... anyway i personally think the icon from Windows Me looks a lot nicer (i requested this icon it in another thread but its ok i found it now).

Anyway i extracted the icon group from the file, then used resource hacker to integrate the new icons into the original file. I thought id share just incase you want to use it :) just pop it in the \system32\restore\ folder.

rstrui.2k3.zip

rstrui.2k3.zip

Ok i just did a bit of editing. You know the system restore icon, looks a bit naff dont it? Kinda looks like Microsoft didnt have time to finnish it.... anyway i personally think the icon from Windows Me looks a lot nicer (i requested this icon it in another thread but its ok i found it now).

Anyway i extracted the icon group from the file, and i thought id share just incase you want to use it :).

rstrui.2k3.zip

rstrui.2k3.zip

To slipstream you would just need to add the registry key for netsvcs then copy the files for system restore into the i386 folder.

For instance in the hivesft.inf for xp youll see this:

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost",netsvcs,0x00010000,\

"6to4",\

"AppMgmt",\

"AudioSrv",\

"Browser",\

"CryptSvc",\

"DMServer",\

"DHCP",\

"ERSvc",\

"EventSystem",\

"HidServ",\

"Ias",\

"Iprip",\

"Irmon",\

"LanmanServer",\

"LanmanWorkstation",\

"Messenger", \

"Netman",\

"Nla",\

"Ntmssvc",\

"NWCWorkstation",\

"Nwsapagent",\

"Rasauto",\

"Rasman",\

"Remoteaccess",\

"Schedule",\

"Seclogon",\

"SENS",\

"Sharedaccess",\

"SRService",\

"Tapisrv",\

"TrkWks",\

"W32Time",\

"WZCSVC",\

"Wmi",\

"WmdmPmSp",\

"winmgmt"

In hivesft.inf for server 2003 youll see this:

HKLM,"SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost",netsvcs,0x00010000,\

"AppMgmt",\

"AudioSrv",\

"Browser",\

"CryptSvc",\

"DMServer",\

"EventSystem",\

"HidServ",\

"Ias",\

"Iprip",\

"Irmon",\

"LanmanServer",\

"LanmanWorkstation",\

"Messenger", \

"Netman",\

"Nla",\

"Ntmssvc",\

"NWCWorkstation",\

"Nwsapagent",\

"Rasauto",\

"Rasman",\

"Remoteaccess",\

"Sacsvr",\

"Schedule",\

"Seclogon",\

"SENS",\

"Sharedaccess",\

"TrkWks",\

"TrkSvr",\

"W32Time",\

"WZCSVC",\

"Wmi",\

"WmdmPmSp",\

"winmgmt"

So just edit the server 2003 hivesft.inf file, and add SRService in that list. Then copy the files listed in sr.inf to the 2003 i386 folder. Finally, find some way to run the install. One way you could do this is with an unattend file, and have it run this command:

rundll32.exe setupapi,InstallHinfSection DefaultInstall 132 sr.inf

Just change the path to sr.inf. That's the basic idea! That should work but untested.

-gosh

Well not quite, someone has to still get the welcome screen back up and the little user photo in the start menu. Once we have that, we will all trully have something unique. ;) Even better still if someone could pool all the hacks here (at least this kind) on this forum into an installable .exe conversion pack.

Q

Syntax Error - Microsoft didn't put System Restore on a Server OS because if the end user were to use it ( e.g. due to installing a faulty program .... ), it would cause data replication on the system - which is not good for a server in a production enviroment ....

Radish.

How are we so sure, that doing this, will make System Restore Work as its indented too?

Does it actually create "System Volume Information" in which it really does save the restore points?

or is this just some registry hack to make the application appear to work.

i'm too busy now, but tomorrow i'm planning on doing all this and doing some tests with system restore. then i'll post the results. from just installing the inf file, the tab appears in system properties, and it puts an icon in the start menu, in accessories\system tools. it seems pretty real to me.

Even without system restore you have a system volume information folder. In my original post i put that i was able to make restore points, then restore my computer to that restore point. Your just mad because you said it was "impossible" to do this, and i did it in 5 mins ;p

-gosh

make a list of questions you want me to answer about it tomorrow, i'll try to answer as many of them as possible. dunno about that automatic restore points though, cause that's every 24 hours windows is running, and i'm not using that install of windows nearly as much as xp. :/

Ok, number 1 can you lay out your guide a little more clearly minus superflous points, just action/outcome action/outcome sort of thing. (eg. Go to this directory do this, go to that directory do that, all in list format). Not that I'm sying its hard to follow, just that it could use a little cleaning up. BTW is that reg key all we need? Or is anything else required? If that's so can you post it in .reg format (I know its easy to do with notepad and change the extension, but its nice to just collect all these keys - and as I said, hopefully some day someone will get round to making an installer that will reisntate all these keys and hacks).

Q

Edited by raid517

Gosh.

All i can say is great work, You have been able to do something that has not been able to be done and that has been known as 'impossible' from the likes of myself and others.

Great guide you made there also, nice and thorough and easy to understand.

I appreciate your time in creating that guide.

Thank you so much for this.

Cheers

:D

Sorry I didn't make myself very clear, I've modified my post a little.

Anyway, great work all in all. I don't understand why people are saying its a bad thing though. Data replication in a server may be bad (why though?) but if your using it as a work station, is it still a bad idea?

Q

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • This seems backwards. You should have to explicitly authorize files for outside use. It shouldn't be the default.
    • Wow you are right, I never even noticed this until you said it! (870E Aorus Master) Before testing this card I had a TP-Link tx401 10GbE PCIe card in that slot (now using XikeStor 310 Thunderbolt to Ethernet adapter).
    • Lack of 5.1 makes this a no sale. What I really wish creative would make would be a USB version that supports 5.1 analog audio for speakers, can switch to headphone mode, and matches the specs of their top tier cards. The current X870E AMD motherboards dont have a great option for adding a PCIE x1 card without cutting down pcie lanes to the graphics card.
    • The Microsoft Office feature that time forgot by Usama Jawad I have been actively using Microsoft Word for the past couple of decades in academic, professional, and personal capacities. Although I used it through the perpetual version of Office apps at the start, I have been an active subscriber of Microsoft 365 Family subscription for over five years now. This means that my Word installation is regularly updated with new features, some of which I don't really like, but that's beside the point. As new features get continuously added, old ones that used to be a staple of Word have started to take a backseat. While I was reminiscing over my Windows experiences from my childhood today, I suddenly remember one such capability that I heavily used in my younger years but have not really touched in over a decade, and haven't seen in documents created by others either. That feature is WordArt. Just to clarify, WordArt is not a Microsoft product specific to Word, and is included in other Office apps like PowerPoint and Excel too. However, Microsoft Word is the app that I used Word Art in heavily, while making assignments or other deliverables for school. If you're unaware, WordArt offers a collection of styling techniques for text, introducing 3D effects like shadows and reflections in the text. It used to be one of the coolest things ever when I was at school and me and my classmates would often compete to ensure that our assignment's title in WordArt was truly the best and stood out above the rest. See some examples of WordArt, still present in the latest versions of Word below: Although WordArt is undeniably cool, it has taken a bit of a backseat, and has been relegated from the Home tab to the Insert toolbar, along with a bunch of other utilities, making it very easy to miss. This isn't exactly surprising because WordArt doesn't really have a place in academic and professional documents anymore, and while I have seen some creatives using it while developing promo material, even that sector has gravitated more towards dedicated graphic designing tools in the past years. For the vast majority of us, WordArt doesn't really exist, and that's alright. At least, it's still an option that can allow us to reminisce our childhood or even make some quick text stylization, if we really need it. Perhaps its usage has waned over time or the novelty has worn off, but I haven't even seen children use it in their academic assignments anymore. In fact, many don't even know that it exists. Maybe that's the fate of every beloved feature. What once felt cutting edge eventually becomes a relic, quietly tucked away as tastes, trends, and technology move on. WordArt may no longer dominate school assignments or decorate the covers of classroom projects, but for those of us who grew up with it, it remains a colorful reminder of a time when making text glow, bend, and cast giant shadows felt like the height of creativity. Hidden behind a few clicks in modern Word, it still survives not as a productivity tool, but as a small piece of computing nostalgia that refuses to disappear.
  • Recent Achievements

    • First Post
      DrWankel earned a badge
      First Post
    • Reacting Well
      DrWankel earned a badge
      Reacting Well
    • Week One Done
      Supreme Spray LV earned a badge
      Week One Done
    • One Month Later
      Genuinetonerink- Dubai earned a badge
      One Month Later
    • Week One Done
      Genuinetonerink- Dubai earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      495
    2. 2
      +Edouard
      158
    3. 3
      PsYcHoKiLLa
      88
    4. 4
      Steven P.
      74
    5. 5
      Michael Scrip
      70
  • Tell a friend

    Love Neowin? Tell a friend!