Note: You may also be interested in a CloneZilla-based Backup/Restore solution for Windows in Tutorial 89 which is much easier to implement.
If you have to install Windows for a friend who is not too computer literate and is likely to trash his copy of Windows, you may want a fast and easy 'Auto-Restore' or 'Reset' partition.
If anything happens to the OS partition, then the end user can simply pick the 'Restore' option from the boot menu to restore the original Operating System in just a few minutes and with no further user interaction (typical restore times are XP OS=2 minutes, Windows 7 OS=10 minutes).
The procedure below will work on any Windows OS from Windows 2000 or later.
You can also take a backup at any time and overwrite the existing backup.
You could adapt this method and modify the restore process to just delete the main Windows folder and a few other folder (e.g. program files, etc.) or just choose to not format the volume and apply the image over the top of the existing Windows installation - however this is often unsuccessful as the system may still not boot or the user may get strange problems. However, it may be useful to do this if you just want to be able to boot to Windows to retrieve valuable files before you do a full clean install. It is up to you to modify the restore.cmd script if you want to do this (e.g. do not run the diskpart script to format the C: drive first).
v1 2012-07-01 First version - menu.lst has a typo and your OS may not boot!
v2 2012-07-02 The menu.lst file in the first version may cause problems due to a typo! Please use version 2 (V.2) at the bottom of this page.
If you have already installed the original menu.lst and have a system which will now not boot to Windows, please proceed as follows:
v3 2012-07-02 Changed restore.cmd and backup.cmd to look for OS.tag to get the correct partition to backup or restore, so that it now works if you have a boot partition and a system partition.
v4 2012-11-13 Changed windows menu again so looks for ntldr or bootmgr and not OS.tag (some Win7 systems have a boot partition and a system partition). Thanks to James for this feedback!
It is assumed that there is only one large partition on the hard disk which is the OS partition. If you have installed Windows 7 or 8, you may have a small partition at the beginning of the disk followed by the larger OS partition.
It is obviously easier if you can pre-partition the target system's hard disk to leave room for a backup partition at the end, however the instructions below show you how to shrink the last partition in case you have not left any spare unallocated space at the end of the hard disk.
Each time the system boots, the end user will see a menu displayed for 5 seconds:
Boot to Windows
Restore the original Windows image
After 5 seconds (this timeout can be changed), the system will boot to Windows if no key is pressed by the user.
If the end user selects the 2nd option by using the cursor keys, and then enters the password RESTOREME, the system will boot to WinPE.
The user can then type D:RESTORE [or possibly E:RESTORE depending on your partition arrangement] (this can be automated so the user does not need to type anything) and it will automatically wipe the original Windows installation and then re-install Windows from the backup.
A typical basic Windows XP system can be fully restored in about 2 minutes, a basic Windows 7 system can be restored in under 10 minutes.
The system will then automatically reboot back to the restored version of Windows.
There are instructions at the end of this tutorial on how to automate the process so that the end user does not need to type D:RESTORE to start the image restore or even enter a password.
You can easily change the user experience by editing the script files and when you are happy that it is all working correctly, you can hide the whole backup partition from the end user.
WARNING: This is intended to be used on a test 'target' system and not on your main Windows PC. I strongly suggest you test it out on a system containing non-essential files first! Please do not hold me responsible for any data loss if things go wrong!
This next step is not necessary unless you have Windows XP on your target system. Windows Vista/7/8 Disk Management can be used instead to shrink the partition.
1. On your target system, download and install EaSeus partition master Home Edition
You need to make space for a partition that we can boot to at the end of your target system's hard disk. You need to make the size of the partition large enough to hold the backup image file.
1. On the target system, in Windows Explorer, select all the folders on the C: drive but do not select any of the files in the root of the C: drive and then right-click and select 'Properties'.
Windows Explorer should report the 'Size' (e.g. 6GB for a typical XP install + drivers, etc.).
We will be using ImageX to make the backup and this does compress the Windows files quite a lot (e.g. 6GB XP will produce a 2GB backup file), so if Windows Explorer says that the target systems disk is say 500GB and has 480GB free, then you should probably make room for a 10GB partition.
2. Run the EaSeus partition master application and select 'Resize/Move partition'- or use Vista/Win7/8 Disk Manager to shrink the last partition.
3. Slide the blue circle on the right-hand side of the EaSeus partition bar so that the 'Unallocated Space After' box reaches the desired partition size.
4. Click on the Apply (tick) icon at the top and follow the instructions to shrink the partition - a reboot may be required.
Note: although you could also partition and format the new space at the same time, I would recommend shrinking the partition first as this is probably safer! Shrinking partitions can sometimes go wrong!
Once the EaSeus partition master has successfully created some space at the end of the hard disk on the target system, use the same application to partition and format the empty space as a Primary NTFS partition. You can use 'Change label' to call the Volume 'Backup' if you like. If you like you can use Windows Disk Manager instead of EaSeus to create a 'Simple Volume'.
Now copy and paste all the files and folders from the C:\pe86\ISO folder prepared in Step 1 above, to the new NTFS (D:) partition which is now at the end of the hard disk (use a USB Flash drive to transfer the files).
The easiest way to install grub4dos onto the target hard disk is to use RMPrepUSB. You can either download the portable version and run it from a USB stick or copy the RMPrepUSB folder from your office PC onto the USB stick or just install RMPrepUSB onto the target system.
1. Run RMPrepUSB on the target system and type CTRL+F5 once to toggle to the ALLDRIVES mode. Select the target system's hard disk and click on the Install grub4dos button. Follow the prompts and press ENTER to allow RMPrepUSB to copy over the grldr file.
2. Copy the menu.lst file from the new partition (e.g. D:) to the C: partition. Grub4dos will use the menu.lst on C: unless it is accidentally deleted by the user. Keeping a copy of menu.lst on the D: drive acts as a backup.
3. Do not delete or move the file recovery.tag from the backup partition. Ensure the file recovery.tag stays on the new backup partition (e.g. D:\)
4. IMPORTANT: Move the file OS.tag to the root of C:\ (i.e. C:\OS.tag) - ensure that the file OS.tag is NOT on the D: volume or any other volume except the Windows C: system volume. Delete it from any other volume.
The Windows Vista/7/8 Boot partition should be before the added WinPE partition on the disk (the menu assumes that it will always before the WinPE partition on the disk. You can tell where the Windows Boot partition is by looking at the hard disk partitions using the Windows Disk Management tool (RMPrepUSB Crtl-K will launch this). The screenshot below shows that the System and Boot volumes are on the same volume - as long as the Boot volume is before the new WinPE volume then the current menu will work correctly:
If however, you have a Boot partition which is AFTER the added WinPE partition (e.g. for some reason you have placed the WinPE files before the Boot partition), you will need to specify the partition number of the Boot partition in the menu.lst file by changing the Windows menu from:
where (hd0,1) is the partition that is the Windows Boot partition - where (hd0,0) is the first partition, (hd0,1) is the 2nd partition, etc. - for instance, if the Windows 'Boot' partition is actually the 2nd partition and you have placed the WinPE files on the first partition (which is unusual!), then change the menu entry to root (hd0,1).
5. Copy the C:\grldr file that was put there by RMPrepUSB over to D:\grldr. This is a backup copy that can be used in case the C: partition is destroyed.
Target Hard Disk contents:
C:\OS.tag - this marks which volume will be backed up or restored to
C:\menu.lst - this is the main user boot menu file
C:\grldr - this is the main grub4dos program
D:\recovery.tag - this marks the volume which contains the WinPE boot files and where the backup image will be stored
D:\menu.lst - this is not normally used unless there is a problem booting - it should always be an exact copy of the C:\menu.lst file
D:\imagex.exe - used to make backups and restores
D:\backup.cmd - script to take a backup of the volume containing the OS.tag file
D:\reboot.cmd - script to reboot the system
D:\restore.cmd - script to restore the volume that currently contains the OS.tag file
D:\auto\startnet.cmd - not actually used and can be deleted
D:\auto\Autorestore.cmd - not actually used and can be deleted
D:\bootmgr - the main boot loader file for WinPE
D:\grldr - the main grub4dos program - only used if the C:\grldr file is missing
D:\Sources folder - these contain the boot files for WinPE
1. First make sure that on the target system's C:\ (root) folder you have
2. Now use EaSeus partition master to hide the new restore partition using the 'Hide Partition' menu item. (You can do this later if you prefer, once you have tested that everything is working - it does not have to be done now and will not affect the backup image). Hiding the partition prevents the user from deleting the WinPE OS or the backup image!
An alternative is to use the Windows Disk Management MMC to remove the drive letter from the backup partition, however the end use could easily assign a new drive letter in the same way.
Another alternative is, if you have Vista or Windows 7/8 (or if you boot to the WinPE partition), you can use diskpart to hide the backup partition at any time, as follows:
Note: To unhide the partition, set the ID as type 07 for NTFS. You can find the partition that you want to unhide by using the DISKPART commands SEL DIS 0, LIS PAR and then SEL PAR N (where N is the partition number that you want to unhide) and then type SET ID=07 and EXIT.
3. Right-click on the C:\menu.lst file and choose 'Properties' and
click on the 'Hidden' and 'Read-only' tick boxes and then click on 'OK'
4. Right-click on the C:\OS.tag file and choose 'Properties' and click on the 'Hidden' and 'Read-only' tick boxes and then click on 'OK'
Right-click on the C:\grldr file
and choose 'Properties' and click on the 'Hidden' and 'Read-only' tick boxes and then click on 'OK'.
Now prepare the system for imaging by uninstalling EaSeus partition master and RMPrepUSB and any other applications or files that you do not wish the user to see when he/she restores Windows.
Run the disk cleanup tool and delete all IE browser history, cookies, etc. alternatively run CCleaner or a similar cleanup application.
1. Now reboot the target system. You should see the grub4dos menu appear for 5 seconds as the system boots:
2. Select the 2nd menu entry (as shown above) and then hit the Enter key to select the 'Restore' option - enter the password RESTOREME (in uppercase letters) when prompted.
3. The target system should now reboot to WinPE and you should see a black WinPE console window with a command prompt.
4. (optional) Check that the system will still boot to Windows by typing D:reboot (or possibly E:reboot) at the command line and letting the menu timeout so that the system reboots to Windows.
Note: See below if the system does not now boot correctly!
Note: If you have enabled the automated restore feature (as detailed in the section below), then when you are prompted to perform a restore (Y/N) ? type the uppercase letter B to run backup.cmd.
1. We now need to make a backup, so reboot to WinPE (select the Restore option in the grub4dos menu) and type D:backup (or maybe E:backup) and hit the Enter key to start the backup of the OS volume (which may be called D: when booted to WinPE). The Windows volume that contains the file OS.tag will be backed up to a file backup.wim on the backup volume.
2. Once it completes successfully, type D:reboot and hit the Enter key to return to boot to Windows again.
If you don't want to hide the restore partition so that the user can make use of the unused free space, then I suggest you set the Hidden attributes on all the files, so that the user is unable to see them easily and thus prevent him/her deleting them accidentally.
If you want to maximise the amount of available space on the OS drive and reduce the size of the backup partition to the minimum, you will need to resize the backup partition. This can be done as follows:
If you rebooted the system at Step 9 and it did not show the menu with the two items in it, but you have a prompt like this:
grub>then you probably do not have a menu.lst file present. You can try booting back to Windows by typing in the grub4dos console:
or if you have Windows Vista or later:
find --set-root /bootmgr
The target system should then boot to Windows correctly and you can fix the problem.
You can also get to the grub4dos command prompt by typing P and then entering the password rmprepusb when prompted. Then type C for the command prompt.
You can examine the hard disk contents by typing
and then list the directory contents of each partition by typing
If the system always boots to the WinPE shell, check that the Windows Boot partition is before the added new WinPE partition. If not see Step 4 above.
If all else fails, boot WinPE from a USB stick or a Windows installation DVD and check the files.
Note: When testing the target hard disk boot menu and backup and restore, always remove your USB drive from the target system as it may contain OS.tag and Restore.tag files which will confuse the menu system!
If you want to remove the grub4dos boot loader and just go back to booting the hard disk straight to Windows, you can do this using RMPrepUSB as follows: hit CTRL+F5 to show all drives - select the hard disk in the disk list box - CTRL+B to install the standard Windows MBR boot code. To run RMPrepUSB, you can boot from a WinPE USB stick, Windows install DVD or if possible, from the WinPE installed on your hard disk via the grub4dos menu, and then run RMPrepUSB directly from a USB flash drive.
You can make a bootable WinPE USB Flash drive simply by formatting the USB Flash drive using RMPrepUSB with the WinPE v2/v3 [bootmgr] radio button ticked and then copy all the files from C:\pe86\ISO over to the USB Flash drive. This should get you out of any problems if you cannot boot your hard disk at all!
Note: If you have previously made the backup.wim file Read-Only then the operation will fail.
If you want to make it really simple for the user so that he/she does not have to type d:restore when they get to the command prompt, then you can modify the boot.wim file as follows:
1. On the 'office' system, launch the WAIK command shell (right-click - run as administrator) window using the Start Menu. Close all other cmd and Explorer windows.
2. Type mkdir c:\pe86\mount to create an empty folder
3. Type dism /Mount-Wim /wimfile:C:\pe86\iso\sources\boot.wim /index:1 /Mountdir:C:\pe86\mount
4. You can now use Windows Explorer to edit the image which you will find at C:\pe86\Mount. Note: If using Windows XP, you are advised to hold down the SHIFT key if deleting files or folders in the image.
5. Copy the two files startnet.cmd and autorestore.cmd, which can be found in the downloaded AUTO folder, onto the C:\pe86\mount\windows\system32 folder (this overwrites the existing startnet.cmd file).
6. Commit the changes to boot.wim using the command: dism /Unmount-Wim /MountDir:C:\mount /commit
When WinPE boots, it will now find and run \restore.cmd on the backup partition automatically.
write (md)0x220+1 !BAT\necho -n -P:0000 $ --- BOOT MENU --- \0
color normal=0x0c highlight=0x1e helptext=0x0D standard=0x02 border=0x0c
title Boot to Windows\n
find --set-root /ntldr || find --set-root /bootmgr
chainloader /ntldr || chainloader /bootmgr
title Restore the original Windows image\nTip: The password is RESTOREME\nThen type D:RESTORE to restore the original Windows image
find --set-root /recovery.tag
If you want the grub4dos menu to work with hotkeys, then look at Tutorial 57. Simply download the hotkey file from Tutorial 57 and add it the same folder as the menu.lst file. Then add the line /hotkey to the top of the menu and add the text ^F4 to the restore menu: e.g.
write (md)0x220+1 !BAT\necho -n -P:0000 $ --- BOOT MENU --- \0
color normal=0x0c highlight=0x1e helptext=0x0D standard=0x02 border=0x0c
title ^F4 F4 Restore the original Windows image\nTip: The password is RESTOREME\nThen type D:RESTORE to restore the original Windows image
find --set-root /recovery.tag