What Is VSS (Volume Shadow Copy Service) and How Do You Restore Previous Versions of Files?

Updated

VSS (Volume Shadow Copy Service) is the Windows component that periodically creates point-in-time copies of your files, called shadow copies, so you can retrieve older versions of files you deleted or modified by mistake. It is enabled by default on all Windows editions, but Microsoft only grants direct access to those copies in the Ultimate, Business, and Enterprise editions. If you run a Home edition, you need a third-party tool such as ShadowExplorer to browse the shadow storage and pull files back out.

How VSS works

From time to time, Windows takes a snapshot of your files at a given moment. Each snapshot is a shadow copy — a point-in-time copy you can go back to later.

  • The service is part of Windows and is enabled by default on all versions.
  • Windows creates the copies automatically; you don't schedule them yourself.
  • The copies cover files and folders, so you can recover an earlier state of either.
  • ShadowExplorer works with the shadow copies created by Windows 11, 10, 8, 7, and Vista.

Because the service already runs on every edition, the only missing piece on Home editions is a way to reach the shadow storage. That is exactly what a front end like ShadowExplorer provides.

Which editions expose shadow copies

Windows edition Shadow copies created? Built-in access?
Ultimate, Business, Enterprise Yes Yes
Home editions Yes No — needs a third-party tool

This is the practical reason Home users often reach for ShadowExplorer: the data is already there, but Windows doesn't hand them a way to open it.

Browsing and restoring previous versions

The general workflow with a shadow-copy browser is:

  1. Show available point-in-time copies — the tool lists the snapshots Windows has stored for a volume.
  2. Browse a shadow copy — you navigate the snapshot like a normal folder tree to find the file or folder you want.
  3. Retrieve the version you need — you pull the older file or folder out of the snapshot and put it back where you want it.

The expected result is that a file you deleted or overwrote earlier is recovered in its earlier state. The exact menus and buttons depend on the tool you use; the three steps above are what any shadow-copy browser has to do.

The limitation you must not ignore

Shadow copies are stored on the same disk as the original data. If that disk fails, everything on it is lost — including the shadow copies.

ShadowExplorer's own documentation is explicit about this: shadow copies and ShadowExplorer are in no way a replacement for regular backups. It is a good addition to regular backups, but not a substitute.

So the decision rule is simple:

  • Use VSS and a shadow-copy browser for quick recovery of accidentally deleted or modified files.
  • Keep a separate backup on different storage for disk failure, theft, or ransomware scenarios.

If you only have shadow copies and no independent backup, you have no protection against the failure of the disk they sit on.