The Turn off Configuration machine setting should be configured correctly. Allows you to disable System Restore configuration through System Protection. System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal data files. The behavior of this setting depends on the "Turn off System Restore" setting. If you enable this setting, the option to configure System Restore through System Protection is disabled. If you do not configure this setting, users can change the System Restore settings through System Protection. Disabling this setting also results in the same behavior as not configuring this setting. Fix: (1) GPO: Computer Configuration\Administrative Templates\System\System Restore\Turn off Configuration (2) KEY: HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore\DisableConfig