Microsoft has made a significant update to its Windows settings backup and restore functionality, now automatically enabled for all enterprise systems joined to Microsoft Entra or operating in a hybrid environment, following their upgrade to Windows 11 version 26H2.
Enhanced Backup Tool for Enterprises
This Windows settings backup tool, previously known as Windows Backup for Organizations, is designed to streamline the process of backing up and restoring essential Windows settings for enterprise users. This feature proves invaluable when devices undergo resets, replacements, upgrades, or reimaging.
Originally introduced at the Ignite conference in November 2024 as an opt-in feature, the tool transitioned to public preview in May 2025 and reached general availability by August 2025. With the recent announcement in July, Microsoft confirmed that the backup policy would be activated by default for eligible devices following the release of Windows 11, version 26H2 on September 29.
In a recent update, Microsoft emphasized the benefits of this new default setting: “If user devices ever enter recovery, you don’t have to guess whether their Windows settings have a backup. With this feature on by default, users are more likely to have their settings and Microsoft Store app list available to restore after a device reset, replacement, or upgrade.”
It is important to note that this new default setting will only apply if administrators have not previously configured the policy. Microsoft assures that any existing explicit enable or disable settings will be honored, maintaining the integrity of the restore behavior, which remains under the control of administrators.
The automatic backup feature is specifically applicable to devices running Windows 11 26H2 in regions not governed by the EU Digital Markets Act (DMA), as well as those not operating within sovereign or restricted cloud environments. Additionally, the restore functionality will not be enabled by default; explicit admin configuration will still be required for restoring Windows devices.
For devices where the backup tool is enabled, IT administrators will maintain comprehensive control through mobile device management (MDM) solutions. They can easily disable the backup policy using Microsoft Intune or Group Policy, which will take precedence over the default settings.
