Microsoft has quietly enabled a critical security feature by default on certain enterprise systems running Windows 11, ensuring that users’ settings are backed up in case of a device reset, replacement, or upgrade. This move marks a significant shift from the previous opt-in model, where administrators had to explicitly enable the Windows settings backup tool.
The new default setting applies to all Microsoft Entra-joined or hybrid-joined enterprise systems upgraded to Windows 11 version 26H2. This means that on these devices, users’ Windows settings will be automatically backed up as part of the standard configuration. The feature, previously known as Windows Backup for Organizations, was first unveiled at the Ignite conference in November 2024 and has since undergone several preview releases before reaching general availability in August 2025.
The decision to enable this feature by default is likely driven by Microsoft’s efforts to improve user experience and reduce downtime caused by device resets or replacements. By having a backup of Windows settings, users can quickly restore their configuration after a device issue, minimizing the impact on productivity. According to Microsoft, this change will ensure that users’ settings are more likely to be available for restoration after a device reset, replacement, or upgrade.
While the feature is now enabled by default, administrators still retain full control over the backup and restore process through mobile device management (MDM) solutions. They can also disable the backup policy using Microsoft Intune or Group Policy, which takes precedence over the default setting. This level of flexibility allows IT teams to manage their devices according to specific organizational needs.
It’s worth noting that this change only applies to certain countries and regions not regulated by the EU Digital Markets Act (DMA), as well as to devices running Windows 11 version 26H2 in sovereign or restricted cloud environments with a configured backup policy. Additionally, the restore behavior remains unchanged and requires explicit admin configuration for users to restore their Windows devices.
As IT administrators continue to grapple with the complexities of device management, this move by Microsoft is a welcome step towards simplifying the process. By having critical settings backed up by default, organizations can better prepare themselves for potential device issues and minimize downtime.
Source: Bleeping Computer — 2026-10-01