Restore Files from a wbadmin Backup

Use wbadmin get versions and wbadmin start recovery to pull deleted or damaged files back out of a Windows backup image.

WindowsbackupFileswbadminMedium risk

Run `wbadmin get versions -backupTarget:E:` to list backups, then `wbadmin start recovery -version:<time> -items:<path> -backupTarget:E: -recoveryTarget:D:\restore -recursive` to restore them.

01Command

Command

$ wbadmin get versions -backupTarget:E:
wbadmin start recovery -version:07/15/2026-18:00 -items:C:\Users\me\Documents -backupTarget:E: -recoveryTarget:D:\restore -recursive

02What it does

A wbadmin image is not only for full machine restores — you can pull individual folders out of it. First enumerate the backups stored on the target disk with wbadmin get versions, which prints the exact version identifiers such as 07/15/2026-18:00. Then wbadmin start recovery copies the -items path from that version into -recoveryTarget instead of over your live files, so you can review the recovered copies first. It works for accidental deletions, overwritten files and ransomware cleanup alike.

03Risk

RiskMedium risk

RequirementsRequires an administrator terminal, the backup disk connected, and an existing wbadmin backup; recovery writes restored files to -recoveryTarget.

!Warning: Do not set -recoveryTarget to the original location unless you want the restored files to overwrite the current ones.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

wbadmin get versions | Microsoft Learn
Microsoft · vendor-doc · 2026-09-17
Evidence: wbadmin get versions -backupTarget:<disk> lists the backups available on that target.
wbadmin start recovery | Microsoft Learn
Microsoft · vendor-doc · 2026-09-17
Evidence: wbadmin start recovery restores items from a -version using -items, -backupTarget and -recoveryTarget, with -recursive for folders.

Last verified: 2026-09-19 · Category: Files & Folders

06Related solutions

Check a drive for file system errors with chkdsk

WindowsFilessystemDiagnostics

Diagnose NTFS file system errors and bad sectors on any volume — including the system drive while Windows is running — before committing to a repair.

Low risk ✓ 2026-09-17

Mirror folders with robocopy for exact backups

WindowsFilessystemTerminal

Robocopy is Windows' built-in robust file copier: use /MIR to keep a destination folder as an exact one-way mirror of a source, resumable and restartable.

High risk ✓ 2026-09-17

Take ownership of a file or folder with takeown and icacls

WindowsFilessystemsecurity

Two-step command sequence that makes you the owner of a locked file tree and grants yourself full control — the standard fix for 'Access is denied' on old profiles and OS reinstall leftovers.

High risk ✓ 2026-09-17