Xianthe's Studio: Windows 10 Pro Storage Spaces Issues

I recently had a corrupted Win10Pro virtual disk image. After some research I wasn't aware of the fact that just turning it on isn't enough. The default options can cause data loss. There are ways to secure it but after a bit of reading this is a deep rabbit hole.

Ultimately I want backup recovery and restore options for Win10. First I am turning on System Restore points under the recovery option and File History. I am not sure why these are not on by default, or at least asked about during install.

Summary of Items used:
File History
Windows System Restore (Turn on System Restore for each drive)
Windows Defender AV (Enabled - this allows for daily snapshots, once you update your group policies)
Back up and Restore (backup is enabled)
Disk Management
Local Group Policy Editor (for editing things, run > gpedit.msc)

Links:
https://www.windowscentral.com/how-create-automatic-system-restore-points-daily-windows-10

Enabling Windows Defender:
My Windows defender install was disabled by group policy (this is a home PC). So I am walking through the recommended steps for fixing this issue.

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning/windows-defender-this-app-is-turned-off-by-group/dfa59c2a-b358-4f62-80b6-6b8e4994dc32

https://answers.microsoft.com/en-us/protect/forum/protect_other-protect_updating-windows_10/windows-defender/dd9e4c78-efc5-4e30-8e6f-3030ae9713ff

https://www.askvg.com/windows-10-fix-your-organization-used-windows-defender-application-control-to-block-this-app-error-message/

https://windowsreport.com/windows-defender-error-577-windows-10/

https://www.lepide.com/blog/top-10-most-important-group-policy-settings-for-preventing-security-breaches/

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-security-center/wdsc-virus-threat-protection

https://www.tenforums.com/tutorials/1977-windows-10-tutorial-index.html

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning/windows-defender-this-app-is-turned-off-by-group/dfa59c2a-b358-4f62-80b6-6b8e4994dc32

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning/windows-defender/e994f94f-92d5-4d44-9721-79c2a686ce24

https://www.windowscentral.com/how-create-automatic-system-restore-points-daily-windows-10

Follow the steps provided in this thread:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning/windows-defender-is-stopped-by-group-policy/9152a503-2e55-46ba-9a39-1ae6ef919769

And illustrated in this thread:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning/windows-defender-this-app-is-turned-off-by-group/dfa59c2a-b358-4f62-80b6-6b8e4994dc32

If you have a more general problem with downloading or running these malware-removal apps; or if they aren’t able to remove the malware – then run a scan with Windows Defender Offline or download a rescue disk on another PC. All of these apps run outside of the Windows environment just like WDO:

http://support.kaspersky.com/viruses/rescuedisk?level=2

http://www.bitdefender.com/support/How-to-create-a-BitDefender-Rescue-CD-627.html

http://www.avira.com/en/support-download-avira-antivir-rescue-system

http://www.avg.com/us-en/avg-rescue-cd-download

http://www.freedrweb.com/livecd/

http://www.eset.com/int/support/sysrescue/

Windows Defender isn’t supposed to be turned off via Group Policy when a third-party AV app is installed, as I’ve explained in this thread:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_start/windows-defender-is-off-i-cant-turn-it-on/c1ef0d9b-7940-4108-9578-de2c996b75ea

So on a home PC; we would normally assume that the Group Policy switch was thrown by malware that’s somehow managed to escalate its privilege-level to the rank of “administrator”. It’s also quite likely that the malware succeeded because Defender didn’t have a signature/behavioral detection for it – so I would recommend scanning with this set of malware-removal tools:

Kaspersky Virus Removal Tool:

http://support.kaspersky.com/viruses/kvrt2015

Emsisoft Emergency Kit:

http://www.emsisoft.com/en/software/eek/

Malwarebytes Anti-Malware (free version only):

https://www.malwarebytes.org/antimalware/

Eset Online Scanner:

http://www.eset.com/us/online-scanner/

Some other trusted third-party malware-removal tools are listed here:

https://answers.microsoft.com/en-us/protect/wiki/protect_other-protect_scanning/list-of-malware-removal-tools/d824b9af-ebd8-4c47-94e2-8ee6c544c100

Then turn Defender back on with this REG command: Right-click on the Start button, select Command Prompt (Admin), and then copy, paste, and run (enter) this command line:

REG DELETE "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware

As I’ve illustrated here:

https://answers.microsoft.com/en-us/protect/forum/protect_defender-protect_scanning/windows-defender-this-app-is-turned-off-by-group/dfa59c2a-b358-4f62-80b6-6b8e4994dc32

Or, if you suffer from command-line phobia, then use the REG file provided here:

https://www.tenforums.com/tutorials/5918-windows-defender-turn-off-windows-10-a.html

Turn_On_Windows_Defender.reg is a trusted file, and this is all there is to it:

Windows Registry Editor Version 5.00

; Created by: Shawn Brink

; http://www.tenforums.com

; Tutorial: http://www.tenforums.com/tutorials/5918-windows-defender-turn-off-windows-10-a.html

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender]

"DisableAntiSpyware"=-