[anguilla]

I recently decided to update my RIS image to include scripting apps & applying Office patches to those apps. This is all done via cmd file but had an issue in that CMDOW.exe is treated as Malware by SAV and as some of the installs create a system restore point I need to prevent this file going into System Restore.

Having looked on this board, I could not find anything that would actually turn System restore off and then turn it back off again so I ended up writing my own reg files to do this so initially I turn System Restore off - install everything and then just before final reboot - turn it back on again. This can be used to action remotely as oppossed to other scripts that just hide the system restore box

Disable System Restore:

 
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sr\Parameters]
"FirstRun"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr\Parameters]
"FirstRun"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr]
"Start"=dword:00000004 

Enable System Restore:

 
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\sr\Parameters]
"FirstRun"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr\Parameters]
"FirstRun"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr]
"Start"=dword:00000000 

I hope this helps someone having to avoid doing from scratch