What and why
With the release of Windows 11, version 26H2, the Windows settings backup policy is now enabled by default for eligible devices (see the Impact section). The new default applies only if admins haven’t explicitly configured the policy. We honor any existing explicit enable or disable setting.
This update makes settings backup a baseline resiliency capability. If user devices ever enter recovery, you don't have to guess whether their Windows settings have a backup. With this feature on by default, users are more likely to have their settings and Microsoft Store app list available to restore after a device reset, replacement, or upgrade. Admins can continue to manage Windows settings backup through Microsoft Intune, Group Policy, or other mobile device management (MDM) solutions.
Rollout schedule
- Windows settings backup default-on is generally available as of September 29, 2026, with the release of Windows 11, version 26H2.
- Devices originally running Windows 11, version 26H1 will receive the same default-on treatment when they update to a later supported feature release. Learn more in What to know about Windows 11, version 26H1 - Windows IT Pro Blog.
Impact on your organization
Default-on applies only to devices that meet all of the following criteria:
- Running Windows 11, version 26H2 or later
- Not in privacy sensitive countries or regions
- Not hosted in a sovereign or restricted cloud environment
- Have the Windows settings backup policy set to Not Configured
Devices with an explicitly configured backup policy, whether enabled or disabled, are unaffected. Restore behavior remains admin-controlled and isn’t enabled by default. Users can still turn off backup through the Windows Backup app or the Windows settings page.
Action required
Review the current backup policy state for eligible devices running Windows 11, version 26H2 or later, and adjust the configuration if needed.
- To use default-on backup (recommended): No action is required. The default-on behavior applies automatically to eligible devices when the backup policy is set to Not Configured.
- To opt out: Explicitly disable the backup policy through Microsoft Intune, Group Policy, or your MDM provider. Explicit policy settings take precedence over the default.
- To enable restore: Configure the restore policy separately. Default-on backup doesn’t enable restore behavior.
No action is required if your organization is in a privacy sensitive country or region, in a sovereign or restricted cloud environment, or if you have already explicitly configured the backup policy.
Additional information
- Windows settings backup becoming a new resilience baseline
- Windows settings backup and restore overview
- How to configure settings backup and restore policies in Microsoft Intune
Compliance considerations:
No compliance considerations are identified. Review as appropriate for your organization.