Symantec advises with the recent Welchia.b virus to disable system restore before applying the MS updates. Can anyone tell me why? Also, is it really that big of a deal in a corporate environment to have this turned on anyway? Would it make sense if company policy is not to add software or hardware to the PC's to just leave this diabled?

Adding software is not the only time the system can mess up and System Restore could be required. If you were using the PC and you had a power failure, if you ejected a CD while the PC was reading it and Windows crashed....a virus could mess up Windows.....the list could be endless. Viruses can hide in System restore and turning it off clears out the stored files (including the virus). I would leave it enabled and only disable it to clear out a bug, re-enabling it afterwards. I've used System restore after a mess up, and I was so releaved to get things back as they were - PHEW {:-)

Hello Jim, I also had a "suspicious script", that McAfee flagged, and it too was hiding inside system restore. I ended up temporarily shutting down system restore, and cleansed out the bad script. Of course, I lost all prior restore points, but now I have finally gotten rid of the script, at least. I don't know anything about the need to disable system restore in order to get the MS updates......first time I've ever heard of that; I never do, I just install the necessary critical updates. Take care! ~Tommyo