Microsoft announced general availability of Windows Backup for Organizations on August 26, 2025. Microsoft now documents the capability as Windows settings backup and restore, although the original name still appears in some policies and pages during the transition. It preserves supported Windows settings and a user’s Microsoft Store app list so those settings can follow the user to a replacement, reimaged, or newly enrolled PC. It is not a file backup, disk image, ransomware vault, or complete disaster-recovery service.
That distinction determines whether it solves your problem: use it for smoother PC refreshes and Windows migrations, but pair it with separate protection for files, Microsoft 365 data, arbitrary applications, and full-system recovery.
As an Amazon Associate I earn from qualifying purchases.
What Microsoft released
Microsoft introduced the organization-managed feature at Ignite in November 2024, reported public preview availability in 2025, and announced general availability on August 26, 2025. The current Windows documentation uses the name Windows settings backup and restore. See Microsoft’s release announcement at Microsoft Tech Community and the current Windows Backup documentation.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Repair Windows errors before they cause bigger problemsFix Now →This is the enterprise-managed counterpart to the consumer Windows Backup experience. Users authenticate with a work or school account backed by Microsoft Entra ID, while administrators control eligibility and restore behavior. Microsoft positions it for PC refreshes, Windows 10-to-Windows 11 transitions, reimaging, replacement devices, and newer or AI-capable PC deployments.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
In July 2026, Microsoft also moved Enterprise State Roaming management into the renamed Windows settings backup and restore capability. Windows 11 version 26H2 documentation says backup will be enabled by default on eligible devices, but administrators must still configure restore.
What it backs up—and what it does not
| Preserved for a supported user | Not provided by this feature |
|---|---|
| Supported Windows settings and preferences | File-and-folder backup |
| The list of installed Microsoft Store apps | Full disk or bare-metal images |
| Supported app and Start-menu state during setup | Automatic deployment of arbitrary Win32 applications |
| User continuity after a replacement or reimaged PC | Ransomware recovery or long-term backup retention |
| Settings restoration during OOBE or first sign-in, when enabled | Backup of Exchange, SharePoint, OneDrive, Teams, servers, databases, or other workloads |
A restored Store app entry is not the same as guaranteed software deployment in every environment. Licensing, availability, policy, and network conditions can still determine whether an app is installed and usable. Use Intune, Microsoft Store app deployment, Enterprise Application Management, or another software-distribution platform for application deployment.
Microsoft’s earlier launch material also refers to Start-menu pins. Because supported categories can change with the rename, verify the current list in the Microsoft FAQ before promising a specific setting to users.
How backup and restore work
Backup process
- An administrator enables the organization’s backup policy.
- The user signs in with a Microsoft Entra ID account on an eligible, joined device.
- Windows periodically backs up supported settings and the Microsoft Store app list.
- Microsoft documents an automatic scheduled task that runs every eight days.
- Where available, the user can open the Windows Backup app and select Back up to start a backup manually.
Restore during Windows setup
- The administrator enables restore.
- During Windows out-of-box experience (OOBE), the user signs in with the same work or school identity used for the backup.
- Windows displays available backup profiles.
- The user selects the previous device profile or chooses to set up the device as new.
- Windows restores supported settings and Microsoft Store app information.
Restore at first sign-in
Microsoft later added restoration at a user’s first sign-in after enrollment, rather than limiting the experience to OOBE. This is useful for modern provisioning and reimaging workflows. The expansion is described in Microsoft’s first-sign-in announcement and the FAQ.
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
The same Entra identity associated with the backup profile is required. Restore is not a general cross-tenant migration mechanism, and administrators should not assume that an old device being online will automatically block restoration; test the organization’s exact enrollment and profile workflow.
Eligibility and supported builds
Microsoft’s current Windows overview lists these minimum builds for backup:
| Platform | Minimum build listed by Microsoft |
|---|---|
| Windows 10 version 22H2 | 19045.6216 or later |
| Windows 11 version 22H2 | 22621.5768 or later |
| Windows 11 version 23H2 | 22631.5768 or later |
| Windows 11 version 24H2 | 26100.4946 or later |
The device must be Microsoft Entra joined or Microsoft Entra hybrid joined, and the user must sign in with Microsoft Entra ID. Windows 10 version 22H2 is technically listed, but Windows 10 reached end of support on October 14, 2025; eligibility does not make it a sound strategic platform for a new deployment.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallAdditional restore requirements
| Restore path | Microsoft’s listed requirements |
|---|---|
| OOBE on Windows 11 22H2 | Build 22621.3958 or later, at least one backup profile, Entra join; Autopilot must use user-driven mode. |
| OOBE on Windows 11 23H2 | Build 22631.3958 or later, at least one backup profile, Entra join; Autopilot must use user-driven mode. |
| OOBE on Windows 11 24H2 | Build 26100.4770 or later, at least one backup profile, Entra join; Autopilot must use user-driven mode. |
| First sign-in on Windows 11 24H2 | Build 26100.7922 or later, completed enrollment, at least one backup profile, Entra join or hybrid join. |
| First sign-in on Windows 11 25H2 | Build 26200.7922 or later, completed enrollment, at least one backup profile, Entra join or hybrid join. |
Microsoft’s overview and Intune pages do not show every threshold identically. Treat the current Windows overview as the primary matrix, then validate the live Intune guidance and your servicing baseline in a pilot.
Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Cloud and geography limits
Microsoft says the feature is unavailable in GCCH, other sovereign clouds, and China. It is supported on Cloud PCs, with restore at first sign-in after enrollment; organizations using pooled or non-persistent VDI should check the separate FAQ guidance rather than assume physical-PC behavior applies.
How administrators enable it
Microsoft Intune
- Use the Settings catalog to configure Windows backup settings.
- Use Devices > Enrollment to configure the restore experience.
- Confirm the tenant-wide restore setting, authorize the required changes, and test with a pilot user and replacement device.
The restore control is described as tenant-wide, so it may not support the same per-device targeting pattern as an ordinary configuration profile. Menu labels and policy locations can change; validate them in your tenant using Microsoft’s current instructions and Intune enrollment documentation.
Group Policy
Microsoft lists this path:
Computer Configuration > Administrative Templates > Windows Components > Sync your settings
The setting is Enable Windows Backup. Microsoft’s table displays the policy value as Disabled; that is the documented policy state, not a recommendation to disable the service. Confirm the resulting behavior on a test device before broad deployment.
Rank #4
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Data administration
Microsoft documents APIs for organizational backup data. Reading or exporting uses UserWindowsSettings.Read.All; deletion uses UserWindowsSettings.ReadWrite.All. Delegated authorization and an access token are required. These controls matter when removing a former employee’s profile or meeting internal data-governance requirements.
Security, identity, and governance questions
- Tenant control: the backup profile is associated with the organization’s tenant controls rather than a user’s personal consumer backup.
- Identity: restoration depends on the same qualifying work or school identity that created the profile.
- Retention: do not treat the feature as a legal-hold system or assume it supplies the retention controls required for regulated records.
- User Account Control: Microsoft’s FAQ notes that a UAC prompt can appear after restore when certain non-default UAC behaviors are configured.
- Departure and deletion: establish an offboarding process that determines when a user’s backup profile should be exported or deleted using the documented permissions.
Troubleshooting common failures
No restore option appears
- Verify that the device is Entra joined or hybrid joined, not merely Entra registered.
- Confirm that the user already has at least one backup profile.
- Check that restore is enabled and that the Windows build meets the applicable OOBE or first-sign-in threshold.
- For Autopilot, confirm user-driven mode rather than self-deploying mode.
- For first-sign-in restore, confirm enrollment completed before the first sign-in.
- Check that quality-update policy permits the required Windows updates.
The Backup app is present but unusable
Microsoft says the app becomes available when the organization’s EnableWindowsBackup policy is enabled. An icon appearing on a device therefore does not prove that tenant policy, join state, build, and eligibility are correct.
Settings restore but applications are missing
Separate the restored Store-app list or Start-menu representation from actual software deployment. Deploy required applications through Intune, Enterprise Application Management, Microsoft Store app controls, or your existing distribution system. Windows settings backup and restore does not replace application packaging, licensing, or configuration management.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsPolicy pages disagree
Build thresholds and labels can lag between the Windows overview and Intune documentation. Record the exact Windows release, build, join state, enrollment mode, and policy assignments in your pilot results, then recheck Microsoft’s live pages before production rollout.
Is it enough for business backup?
| Requirement | Suitability |
|---|---|
| Preserve user settings during laptop replacement | Yes, when eligibility and policy requirements are met. |
| Support Windows migration or reimaging | Yes, as a settings-continuity layer. |
| Recover deleted files | No; use file backup and Microsoft 365 protection. |
| Restore a complete PC after disk failure | No; use endpoint imaging or backup. |
| Recover from ransomware | No; use an isolated, retention-capable backup service. |
| Protect Exchange, SharePoint, OneDrive, or Teams | No; use Microsoft 365 backup. |
| Deploy and manage applications | No; use Intune or another software-management platform. |
Complementary products and costs
These products solve different problems; prices below are dated signals, not quotes. U.S. pricing observed on August 18, 2026 can vary by region, agreement, reseller, user count, and billing term.
| Product | What it adds | Published price signal |
|---|---|---|
| Microsoft Intune | Enrollment, policy, Autopilot, and application management; it configures this feature but is not endpoint backup. | Plan 1: $8 per user/month standalone, paid yearly; Plan 2: $4 add-on; Intune Suite: $10 add-on. Plan 1 is included in several Microsoft 365 and EMS suites. |
| Microsoft 365 Backup | Protection for Exchange, SharePoint, and OneDrive workloads. | $0.15 per GB per month of protected content, according to Microsoft’s listed price. |
| Veeam Data Cloud for Microsoft 365 | Independent Microsoft 365, identity, and related workload recovery, depending on plan. | U.S. signals: Foundation $2.63/user/month; Advanced displayed at $3.33 with a $3.71 comparison price; Premium $7/user/month, billed annually. Foundation reflects a 251-plus-user volume signal. |
| Datto Endpoint Backup for Windows | File and folder recovery, bare-metal restore, schedules, 90-day-to-seven-year retention, and management integrations. | No public list price on the cited page; Datto directs buyers to demo or sales engagement and describes usage-based pricing. |
Practical deployment decision
- Define the recovery objective: settings continuity, files, Microsoft 365 content, or full endpoint recovery.
- Confirm Entra join, Windows build, cloud geography, enrollment mode, and licensing.
- Enable backup for a pilot ring and wait for a profile to exist.
- Test both OOBE and first-sign-in restore on the Windows releases you operate.
- Verify which Store apps are merely represented and which applications are actually deployed.
- Pair the feature with separate file, Microsoft 365, or endpoint backup where the business requires recoverable data.
The Bottom Line
Windows settings backup and restore is a useful device-transition service: it reduces friction when users receive a replacement, reimaged, or upgraded Windows PC. It is not the organization’s complete backup strategy. Keep separate, tested protection for files, Microsoft 365 workloads, non-Store applications, ransomware recovery, and full-system restoration.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
