Windows 11 26H2 Enables Windows Settings Backup by Default for Eligible Enterprise Devices

Microsoft has enabled Windows Settings Backup by default on enterprise devices enrolled as Microsoft Entra Participant or Microsoft Entra Hybrid Participant systems after upgrading to Windows 11 version 26H2.

Previously known as Windows Backup for Organizations, Windows Settings Backup helps back up and restore enterprise users’ Windows settings after a device is reset, replaced, upgraded, or reimaged.

Windows Settings Backup is now enabled by default

Microsoft first announced the feature at its Ignite conference in November 2024 as an opt-in capability that was disabled by default. It later entered public preview and became generally available in 2025.

As announced in July, Microsoft began enabling the Windows Settings Backup policy by default for eligible devices following the release of Windows 11 version 26H2 on September 29.

“When a user’s device goes into recovery, they don’t have to guess whether their Windows settings have a backup. When this feature is turned on by default, users are more likely to have a list of settings and Microsoft Store apps that they can restore after resetting, replacing, or upgrading their device,” Microsoft said in a Wednesday Message Center update.

Microsoft added that the new default applies only when an administrator has not explicitly configured the policy:

“The new defaults will only be applied if the administrator has not explicitly configured the policy. Any existing explicit enable or disable settings will be respected. Restore behavior will not change and will continue to be controlled by the administrator.”

Who is affected by the new Windows backup default?

The change applies only to devices that meet all of the following conditions:

• They run Windows 11 version 26H2.
• They are in countries or regions that are not regulated by the European Union’s Digital Markets Act (DMA).
• They are not operating in a sovereign or restricted cloud environment.
• The organization has not already configured a backup policy.

Existing administrator settings take precedence. Explicitly enabled or disabled policies will continue to be respected.

Restore remains controlled by administrators

Although backup is now enabled by default for eligible devices, restore behavior is not. Administrators must explicitly configure the required settings before Windows devices can restore backed-up settings.

IT administrators can continue to manage the feature through a mobile device management (MDM) solution. They can also disable Windows Settings Backup through Microsoft Intune or Group Policy, both of which take precedence over the new defaults.

Join Mikko Hypponen and security leaders from the NFL, Chanel, and Atlassian for a 2-hour digital summit about what will change with AI speed attacks, what defenders should stop doing, and how to verify, decide, correct, and revalidate at machine speed.

Please reserve your seat