Microsoft has announced that the Windows settings backup and restore tool will be enabled by default on Microsoft Entra-joined or hybrid-joined enterprise systems after upgrading to Windows 11 version 26H2. This change aims to simplify the process of backing up and restoring enterprise users’ Windows settings, which can be critical for device management and security purposes.
The tool, formerly known as Windows Backup for Organizations, was first introduced at the Microsoft Ignite conference in November 2024 as an opt-in feature. It has since reached public preview in May 2025 and general availability in August 2025. However, IT administrators had to manually enable it by configuring backup and restore policy settings.
Starting with Windows 11 version 26H2, the default behavior of the Windows settings backup policy will shift from disabled to enabled. This change only applies to eligible devices running Windows 11 26H2 from countries or regions not regulated by the EU Digital Markets Act (DMA), that aren’t in sovereign or restricted cloud environments, and that have the backup policy not configured.
IT administrators can still retain full control over the tool via mobile device management (MDM) solutions. They can explicitly disable the backup policy through Microsoft Intune or Group Policy, which will take precedence over the default setting. Additionally, the restore behavior is not enabled by default and requires explicit admin configuration to restore Windows devices.
Microsoft product manager Miranda Leschke mentioned that IT teams can validate the experience early in the Windows Insider Program Experimental channel starting July 2026. The default-on behavior will take broad effect for eligible devices at Windows 11 version 26H2 general availability later this year. Devices originally running Windows 11 version 26H1 will receive the same treatment with the following feature update.
This change aims to simplify device management and security processes, but it is essential for IT administrators to understand the implications of this new default setting.
### Implications for IT Administrators
The shift from disabled to enabled backup policy may require IT teams to review their current configuration and adjust as necessary. They should also be aware that the restore behavior is not enabled by default, which means users will still need explicit admin configuration to restore Windows devices.
### Benefits of the New Default Setting
Enabling the Windows settings backup and restore tool by default can provide several benefits for enterprise organizations, including:
* Simplified device management: The tool automates the process of backing up and restoring enterprise users’ Windows settings, reducing the administrative burden on IT teams.
* Improved security: By enabling regular backups, organizations can ensure that critical data is protected in case of device loss or compromise.
* Enhanced user experience: Users will have a seamless experience when their devices are reset, replaced, upgraded, or reimaged.
### Conclusion
Microsoft’s decision to enable the Windows settings backup and restore tool by default on Microsoft Entra-joined devices represents a significant change in device management and security processes. IT administrators should be aware of this new setting and adjust their configuration accordingly to ensure seamless device management and security.
Source: Original article