What is a reimage?
A reimage replaces everything on a computer's system drive with a prepared copy of the operating system, usually the organization's standard image with its approved apps, settings, drivers and security agents. Whatever was wrong with the old installation, whether corrupted system files, broken updates, a damaged registry or malware, is erased along with it. In a business, reimaging is often faster and more certain than continued troubleshooting: a technician can return a PC to a known-good state in a predictable amount of time, while chasing an unknown fault can take hours and still leave doubts.
When to reimage
- Persistent or deep malware: rootkits, boot sector infections or reinfection after cleaning. After a serious compromise, a clean image is the only way to trust the operating system again.
- Corruption that repair tools cannot fix: after
sfc /scannow, DISM, System Restore and a repair installation have failed. - Time limits on troubleshooting: some help desks set a maximum troubleshooting time, after which the standard fix is to reimage.
- Redeploying a device: handing a PC to a new employee or returning it to inventory.
- Standardizing: bringing a PC that has drifted from the standard configuration back in line.
Steps in a typical reimage
- Back up user data that is not already on a server or in OneDrive, and confirm the backup is complete. After a malware incident, scan the backed-up data before restoring it.
- Record what the image will not restore: special software and its licenses, printer and drive mappings, browser bookmarks and local-only settings. Deactivate licenses tied to the device if the vendor requires it.
- Deploy the image by network boot (PXE) from a deployment server, from bootable USB media, or through a management platform.
- Rejoin and update: join the domain or Microsoft Entra ID if the process did not, install Windows and driver updates, and confirm security software is running.
- Restore data and verify with the user that apps, files and printers work, then document the work in the ticket.
Cloud-managed and consumer equivalents
Organizations that manage PCs with Microsoft Intune can use remote actions such as Wipe or Autopilot Reset, which return a device to a business-ready state without a technician applying an image by hand. Home users have no corporate image, so their closest equivalent is Reset this PC with Remove everything, or a clean install from Microsoft's installation media.
Reimage vs related fixes
| Option | User data | Apps | Result |
|---|---|---|---|
| Repair installation | Kept | Kept | Fresh Windows system files |
| Reset this PC, Keep my files | Kept | Removed | Fresh Windows, apps reinstalled by hand |
| Reimage | Removed; restore from backup | Only those in the standard image | The organization's standard build |
| Clean install | Removed | Removed | Plain Windows from setup media |
Reimage on the CompTIA A+ exam
Reimaging appears in Core 2 (220-1202) objective 3.1, which covers fixing Windows problems such as crashes, boot failures and slowdowns, and objective 1.2, which covers installation and deployment methods. In troubleshooting scenarios it is the last resort, chosen after less destructive steps fail or when malware means the operating system can no longer be trusted. The step that must come first is backing up the user's data; an answer that reimages before backing up is wrong. If a question describes a PC that keeps getting reinfected or keeps failing after every repair, think reimage.