locked
Does Windows System Restore clear the audit logs after restoring to certain point? RRS feed

  • Question

  • Hello,

    i wonder if any one can help me for below :

    if i do windows system restore then my current audit logs still remain after restoring or they will be lose ?

    during restoring the windows does "audit log cleared" event will it be generated by the system?

    Regards

    Miran.

    Sunday, April 19, 2020 11:29 AM

All replies

  • Hi Miran,

    Do you mean the security log in Event Viewer? 

    System restore will not revert any logs to previous point, also it would cause risk for security if it is possible to revert to previous point. 

    I tested on my side after system restore on virtual device, it move on as before without revert back. The system restore action will be recorded in Event Viewer\Windows logs\Application.

    If my information is useful for you, please mark it as answer. 

    Bests, 


    " Please note that new questions regarding ‘Windows 10 Installation, Setup, and Deployment’ could NOT be posted in this forum anymore. This thread could be followed up until Mar-30th. We will be moving your thread to Microsoft Q&A if the deadline is missed. Register our new platform Microsoft Q&A (Preview)! for new questions or discussion. Check more details on sticky post.

    • Proposed as answer by Joy-Qiao Friday, April 24, 2020 6:19 AM
    Monday, April 20, 2020 7:48 AM
  • Hi Miran, 

    Any update?

    If my information is useful for you, please mark it as answer.

    Bests,


    " Please note that new questions regarding ‘Windows 10 Installation, Setup, and Deployment’ could NOT be posted in this forum anymore. This thread could be followed up until Mar-30th. We will be moving your thread to Microsoft Q&A if the deadline is missed. Register our new platform Microsoft Q&A (Preview)! for new questions or discussion. Check more details on sticky post.

    Friday, April 24, 2020 6:20 AM