Windows 11 26H2 turns Windows settings backup on by default: review the policy if you have left it “Not Configured”

Windows 11 26H2 turns Windows settings backup on by default: review the policy if you have left it “Not Configured”

1 October 2026: Microsoft has changed a default that affects every organisation running Windows 11 version 26H2. In a Message Center post published on 30 September 2026 (MC1483538, tagged "Admin impact"), it says that with the release of 26H2 the Windows settings backup policy is enabled by default on eligible devices. The change is generally available from 29 September 2026.

Not yet independently verified. This rests only on Microsoft’s own Message Center post, read through a public archive because the admin centre requires sign-in. The post does not list the “privacy sensitive countries or regions” that are excluded. No independent report was found. We will update this when it can be confirmed, and remove this note.

What changes

Windows settings backup saves a user's Windows settings and Microsoft Store app list to the cloud, so they can be restored after a reset, replacement or upgrade. Microsoft calls it "a baseline resiliency capability".

The new default applies only to devices that meet all of these conditions:

• running Windows 11, version 26H2 or later;
• not in "privacy sensitive countries or regions";
• not hosted in a sovereign or restricted cloud environment;
• with the Windows settings backup policy set to Not Configured.

Devices where the policy is explicitly enabled or disabled are unaffected. Restore stays admin-controlled and off by default. Users can still turn backup off themselves in the Windows Backup app or in Settings. Devices that started on 26H1 get the same default when they move to a later feature release.

Why it matters

"Not Configured" is the state most organisations leave a policy in. For them, an upgrade to 26H2 now starts sending users' settings to Microsoft's cloud without any decision by IT. That is usually harmless, but organisations with data-residency rules, regulated workstations, kiosks or shared devices may not want it, and some will want to document it either way.

What to do

• Check the policy state for Windows settings backup in Intune, Group Policy or your MDM before 26H2 rolls out across your fleet.
• Decide explicitly: leave it on (Microsoft's recommendation; no action needed), or set the policy to disabled to opt out.
• Treat shared, kiosk and regulated devices separately, and disable backup there if it is not wanted.
• Update your records of processing if your privacy programme lists what device data leaves the organisation.
• Remember restore is off by default: if you want users to benefit at device replacement, enable restore deliberately.

Related on TrustList:

• Exchange Online PowerShell: upgrade the ExchangeOnlineManagement module to 3.10.1 before strict logon enforcement on 31 March 2027
• GMO confirms Onamae Desktop Cloud data theft, sets 30 October notice

Sources

• Microsoft 365 Message Center MC1483538: Windows settings backup is now enabled by default for eligible devices (public archive copy) - 30 September 2026