Source
r/TronScript•
luciensadi

Local user account deleted and all System Restore Points wiped out

resolved

Bug report: After running TronScript in Safe Mode with Networking, my local user account was deleted, and all the restore points were wiped out. I still have the local administrator account, so I can rebuild my personal account from there.

OS: Windows 10 Pro, version 1607, build 14393.187

Switches used: None

EDIT: After further checking, I've found that the account wasn't deleted-- it just had all of its groups removed from it, making it unusable. I was able to restore the account's groups and recovered it successfully. I still have no local restore points though, and the maximum restore point utilization was set to 0% which also disabled future restore point creation.

Posted Sep 21, 2016, 7:11 PM UTC · edited

2219
Lolor-arros•

From the readme:

Create System Restore point...and on Windows 10 does not work if the system is in any form of Safe Mode. This is a known bug, and I spent hours trying to find a workaround but was not able to find a solution, so if you absolutely require a system restore point, recommend running in normal mode

Reduce system restore space: Restrict System Restore to only use 7% of available hard drive space

https://github.com/bmrf/tron/blob/master/README.md#full-tron-description

It shouldn't have set your restore utilization to 0%, but that could be part of the Windows 10 problems.

10
luciensadiOP•

I'd manually created a pre-run restore point based off of that instruction, but I don't think either of us expected that restore point to be nuked in the process. I interpreted it as "restore points will not be created in Windows 10 Safe Mode, so make one yourself before running this".

5
Lolor-arros•

so if you absolutely require a system restore point, recommend running in normal mode

meaning, not safe mode

1
luciensadiOP•

Yes, but that's listed under the 'Create System Restore point' heading, which implies that only restore point creation is impacted when run in Safe Mode. There's also a specific lack of verbiage about it deleting your extant manually-created restore points, which I would think is a pretty critical notation if this is known behavior.

6
Lolor-arros•

Agreed.

1
vocatusTron author•

Hi u/luciensadi, welcome to the sub and thanks for the post. I'm the author and primary maintainer of Tron.

Tron does not nuke all restore points, so I'm not sure what caused that on your system. It also does not touch user groups, outside of granting Full permissions to the Administrator and SYSTEM accounts during registry reset. You did do the correct thing by manually creating a restore point prior to running though.

If you can spare a minute or two, it'd be very helpful if you could zip up the entire logs directory (c:\logs\tron) and email it to me (or link to Dropbox or something). My email is in the instructions file.

2
luciensadiOP•

Do the logs append, or overwrite? It re-launched itself after I restarted (it finished the first time with a green terminal screen), and the logs appeared to only reflect the relaunched state. If those are useful to you anyways, I can send them.

1
vocatusTron author•

Yeah, they do wipe when re-run unfortunately. But if you could send the current logs, those would be possibly helpful anyway.

1
jamviking•

Vocatus, I am having the same issue and have sent my logs via GoogleDrive to you. My account is listed in Local Users and Groups and is a member of the HomeUsers group, but, still does not show up on the log in screen.

Can someone give me specific instructions on how to recover access to the account?

My laptop is a Win10Pro with the anniversary updates applied.

Thanks in advance for any assistance.

2
jamviking•

[EDIT] I added the account to the Users group and restarted the machine... the account is now back.

Thanks u/luciensadi.

3
luciensadiOP•

Open Computer Management, select Local Users and Groups, select Users, select your account, make sure it's a member of the Users group. This should enable your account.

2
vocatusTron author•

u/jamviking, did your account disappear after the Win10 anniversary update?

1
ThePowerUp•

You have to be careful relying on Windows system Restore for backup. I've had cases where my restore points were deleted, not by TronScript but other elements (AntiVirus, etc).

I've been using RollBack Rx with Tron. IMO it works better as a backup solution.

1
ItzJerome•

Did you perform the Windows 10 Anniversary update before running Tron? That's what removed my secondary account from the users group as you described in your problem.

However regarding the restore points, I also ran Tron in safe mode with networking and after Tron finished i noticed the restore point i had created before running it was gone. I doubt this is some strange coincidence.

1
vocatusTron author•

u/ItzJerome, did you run Tron before or after the Win10 Anniversary update?

1
ItzJerome•

I ran it after the Anniversary update

1
ItzJerome•

For clarity:

  1. W10 Anniversary Update
  2. Notice it deleted restore points/turned off system protection
  3. Turn on system protection/Manually create restore point
  4. Run tron in safe mode with networking
  5. After tron finished and I restarted computer, noticed restore point is gone
1
vocatusTron author•

OK, thanks for commenting. I'll have to go through and see what's doing that. None of the code regarding restore points has changed so I'm wondering what's causing it.

1