I think restore can’t roll back the Secure‑Boot db/dbx in NVRAM, so crossing it breaks the trust‑chain… if u need a clean fix, just open WinRE → Uninstall updates and remove only the SB patch.
Restore Point After Update?
Can you use a restore point made before a windows update and have it not mess up the operating system?
Tried this one time and had to undo it in System Recovery to avoid an unusable operating system.
The particular update is a Secure Boot Allowed Signature Database (DB) Update.
Windows for home | Windows 11 | Recovery and backup
Answer accepted by question author
3 additional answers
Sort by: Most helpful
-
CrazyKats 15,500 Reputation points Volunteer Moderator2026-05-05T22:11:27.26+00:00 Hi,
If you're worried about any unsafe browsing
just run a Malwarebytes Free scan.
-
Lucus-V 6,660 Reputation points Microsoft External Staff Moderator
2026-05-05T21:36:46.9066667+00:00 Hi LMan17-3728,
Can you enter Windows now?
If you can enter Windows, you can perform an In-place upgrade.
Disclaimer: Let’s try performing an in-place install or in-place upgrade which will refresh your Windows files and operating system without removing files or applications. That being said, we always recommend that if you have important data, you should back it up before making large system changes. If you want to back up your data first, please do so. Once you are done backing up, you can follow the steps in the following guides: How to run In-place upgrade in Windows 11 - Microsoft Community
After doing so, your system will get 25H2 without recent updates.
If you cannot enter Windows or have further information, please feel free to let me know.
-
Q&A Assist2026-05-04T02:16:21.26+00:00 AI generated content. This question contains an answer created with AI from Q&A Assist. Learn moreYes. A restore point created before a Windows update (including Secure Boot DB updates) can be used to roll the system back without “messing up” the operating system, provided System Restore completes successfully and the restore point itself is healthy.
Key points based on how System Restore works:
- What System Restore changes
- Reverts system files, registry settings, drivers, and installed programs to the state they were in when the restore point was created.
- Does not affect personal files (documents, pictures, etc.).
- Restore points are designed specifically to undo problematic changes such as software installs, driver updates, or Windows updates.
- Using a restore point safely
- On a working system, open System Restore via:
- Control Panel → Recovery → Open System Restore, or
- Win+R →
rstrui.exe→ Enter.
- Choose a restore point dated before the update, optionally use Scan for affected programs, then proceed.
- Windows will restart and apply the restore; if it succeeds, the system should be stable in the previous state.
- On a working system, open System Restore via:
- If a restore causes boot or stability issues
- Windows provides a way to undo a restore or choose a different restore point from the Windows Recovery Environment (WinRE).
- To access WinRE from a working Windows 10/11 installation:
- Start → Settings → Update & Security → Recovery.
- Under Advanced startup, select Restart now.
- In WinRE: Troubleshoot → Advanced options → System Restore.
- Follow the wizard to either:
- Apply a different restore point, or
- Undo the last restore if that option is presented.
- Known issue after some Windows 10 updates
- There is a documented issue where restoring to a point created before a Windows 10 update can fail when started from within Windows. The recommended workaround is to run System Restore from WinRE instead of from Settings.
- Steps (summarized above) use Troubleshoot → Advanced options → System Restore in WinRE.
- Secure Boot DB updates specifically
- System Restore treats these like other system changes. If the restore point was created before the Secure Boot DB update, restoring to it should revert the system configuration to that earlier state.
- If a restore leads to boot problems, use WinRE to either:
- Try a different restore point, or
- Undo the restore.
In practice, using a restore point made before a Windows update is a supported and intended way to undo that update. To minimize risk of an unusable system, run System Restore from WinRE (especially if a previous in-Windows restore caused issues) and ensure there is at least one additional restore point or recovery option available.
References:
- What System Restore changes