device management Archives

Winsage

July 16, 2026

Microsoft makes Windows SSO prompts easier to manage

Microsoft is introducing a registry-based policy to improve the management of Single Sign-On (SSO) permissions for devices running Windows 11 versions 24H2 and 25H2, specifically for those managed through Microsoft Entra ID. This policy allows IT administrators to automatically accept SSO permissions, enhancing the user experience in corporate environments. Users with personal Microsoft accounts or unmanaged devices will still receive prompts for SSO permissions. The change aims to provide users, particularly in the European Economic Area (EEA), with more control over their account usage across Microsoft applications. Deployment options for IT administrators include Group Policy, Microsoft Intune, other mobile device management solutions, Microsoft Configuration Manager, and any management tool that supports registry policy deployment. Administrators are advised to validate SSO behavior after deployment.

Winsage

July 16, 2026

Windows 11 gets new registry policy to give IT admins more control

Microsoft will introduce a new registry policy in Windows 11 in July 2026 that allows IT administrators to enable automatic acceptance of single sign-on (SSO) prompts on managed devices. This policy will streamline user authentication by using Windows sign-in credentials automatically for Microsoft apps or services, reducing the need for manual authentication. The registry path for this policy is HKLMSOFTWAREPoliciesMicrosoftWindowsAAD, with the value AutoAcceptSsoPermission (DWORD) set to 1. It can be deployed using Group Policy Objects (GPO), Intune, Microsoft Configuration Manager, or mobile device management (MDM) tools. This setting is applicable only to Windows 11 versions 25H2 and 24H2 that have received the July 2026 Patch Tuesday updates (KB5101650 and KB5094126) and is designed for managed devices using Entra ID accounts, not personal Microsoft accounts or unmanaged devices.

Winsage

July 12, 2026

We explain why Cloud Rebuild is one of Windows 11’s most important new features, and how it lets you recover your PC without a USB drive or complicated steps

Microsoft has introduced a new recovery feature for Windows 11 called Cloud rebuild, currently in preview mode. This feature allows users to restore their systems by downloading the Windows 11 image and necessary device drivers directly from Windows Update, eliminating the need for USB installation media or custom recovery images. OneDrive remains unaffected during the recovery process, enabling users to restore their files after signing back in. For organizations, devices managed via Windows Autopilot and Microsoft Intune can automatically re-enroll and restore settings post-rebuild. However, Cloud rebuild requires compatible hardware, a healthy Windows Recovery Environment, and internet connectivity. Currently, it can only be initiated from the Windows Recovery Environment or an elevated Command Prompt, with remote deployment not yet supported. The feature aims to simplify recovery processes and reduce reliance on USB drives, although it is not intended to replace existing recovery tools.

Winsage

July 8, 2026

Microsoft flips Windows Backup to on by default unless you’re in the EU

Microsoft has enabled Windows Backup for Organizations by default in the 26H2 version of Windows 11, except in the European Union. This feature allows organizations to restore device settings and installed Microsoft Store applications easily during events like lost laptops or system resets. Devices running Windows 11 25H2 and earlier, as well as those with a backup policy that disables this setting, will not be included in the automatic backup initiative. Organizations can opt out of this feature if they have stringent privacy policies or data sovereignty concerns. Administrators must explicitly disable the policy if they do not wish to use the feature. Microsoft clarifies that this service is not a comprehensive backup solution but part of a broader Windows resiliency effort. Eligible devices with the backup policy in a Not Configured state will enable backup automatically when Windows 11, version 26H2 becomes generally available.

Winsage

July 7, 2026

Microsoft to enable Windows settings backup by default for orgs

Microsoft will enable the Windows settings backup and restore tool by default for enterprise systems joined to Microsoft Entra or operating in a hybrid environment with the upgrade to Windows 11 version 26H2. This tool, previously known as Windows Backup for Organizations, assists users in backing up and restoring Windows settings after events like device resets or upgrades. The tool debuted at the Microsoft Ignite conference in November 2024, became publicly available in August 2025, and requires the September 2025 Windows Monthly Cumulative Update for access. The default-on setting applies only to eligible devices where administrators have not set the policy otherwise, and IT administrators can manage this through mobile device management solutions. Restore functionality will not be enabled by default and requires administrative configuration. The default-on behavior will also be available in the Windows Insider Program Experimental channel starting July 2026.

Winsage

July 7, 2026

Point-in-Time Restore Now Generally Available for Windows 11 — Campus Technology

Microsoft has rolled out a point-in-time restore feature for Windows 11, available to all client PCs running version 24H2 and later, including Enterprise, Pro, and Home editions. This feature automatically creates local restore points every 24 hours, stored for up to 72 hours and limited to 2% of disk space. It is enabled by default on Windows Home and unmanaged Windows Pro devices with at least 200 GB OS volume, while it is disabled by default on Windows Enterprise, Education, and organization-managed Windows Pro systems. Users can initiate restores locally via the Windows Recovery Environment, but any changes made after the selected restore point will be lost. Microsoft plans to introduce remote initiation capabilities through Intune recovery. The upcoming Windows 11 version 26H2 will maintain a low-disruption update experience, allowing devices on versions 24H2 or 25H2 to transition via a small enablement package. Devices running version 26H1 cannot upgrade directly to 26H2.

Winsage

June 27, 2026

How to get free Windows 10 security patches until October 2027 – and avoid the $30 fee

Microsoft has officially ended support for Windows 10, but users can receive critical security updates until October 12, 2027, through the Extended Security Updates (ESU) program at no cost. To qualify, users must have a Windows 10 PC running version 22H2 or later and sign in with a Microsoft account, excluding Enterprise and Education editions. In the European Economic Area, customers automatically qualify for free ESU subscriptions without needing a Microsoft account. Enrollment can be done through Settings > Windows Update, and users may need to back up their settings or redeem Microsoft Rewards points. Business customers must purchase ESU subscriptions at a higher cost. Users should be cautious of potential issues, such as cloud storage consumption during backup.

Winsage

June 26, 2026

Microsoft extends free Windows 10 security updates for consumers

Microsoft has extended its free Windows 10 Extended Security Updates (ESU) program for consumers to provide essential security updates until October 12, 2027. This extension allows users more time to transition to Windows 11, as Windows 10 will no longer receive support after October 14, 2025. The initial expiration date for the free ESU program was October 12, 2026. Consumers can access these updates by backing up their Windows settings, redeeming 1,000 Microsoft reward points, and for users in the European Economic Area, logging into Windows 10 with a Microsoft account. An ESU license can be used on up to 10 devices linked to the same Microsoft account, but the program is not available for systems managed through Active Directory or Mobile Device Management, though devices registered with Microsoft Entra are eligible.

Winsage

June 25, 2026

Microsoft quietly extends free Windows 10 ESU support to October 2027

Microsoft has extended the free coverage of its Windows 10 Extended Security Updates (ESU) program for consumers by an additional year, now lasting until October 12, 2027. This change was noted in updates to Microsoft's ESU documentation and a blog post. Previously, Windows 10 was set to reach its end of support on October 14, 2025, with initial ESU coverage expiring on October 12, 2026. Consumers can access the extended security updates through various methods, including payment, backing up settings to a Microsoft account, redeeming Microsoft reward points, or for users in the European Economic Area, by logging in with a Microsoft account. Each ESU license can be used on up to 10 devices linked to the same account, and the program is only for personal devices, not those managed through Active Directory or MDM.

Winsage

June 22, 2026

Windows 11 version 26H2: Microsoft details rollout strategy

Microsoft is enhancing its enterprise offerings with Microsoft Intune, a cloud-based service for managing mobile devices and applications. Intune allows IT administrators to control device usage, ensuring compliance with corporate policies, securing sensitive data through application management, and providing employees with flexible access to corporate resources from personal devices. Additionally, Microsoft promotes Microsoft Learn, an educational platform to help users understand Intune and other services.