Windows Backup for Organisations: A Practical Walkthrough

In this post we dive into a new Microsoft feature for enterprise IT: Windows Backup for Organisations.

If you're managing Windows 10 or 11 devices, planning a Windows 10 → 11 migration, tackling refreshes, or just want a smoother user experience, this is one you probably want to be aware of and actually use. It can make migrations quicker and easier for end users, reduce helpdesk tickets for personalisation issues, and is configured and deployed using Microsoft Intune (or Group Policy in hybrid environments). It's an opt-in option, so it needs to be configured before users benefit.

To be clear — this is not the traditional Windows Backup feature accessed on personal Windows devices. The official Microsoft settings catalogue is documented at Backup for Organisations.

What is Windows Backup for Organisations?

It's a cloud-first, enterprise-grade backup solution built into Windows 11 and supported versions of Windows 10. It backs up:

• User settings
• Microsoft Store app configurations
• Personalisation preferences

It does not back up files or Win32 third-party apps. It's about streamlining device transitions to Windows 11 and reducing downtime during resets, migrations or upgrades.

Microsoft's positioning: "It's especially useful for organisations moving from Windows 10 to Windows 11 or deploying AI-powered PCs. Think of it as a way to give users a familiar experience, even on a brand new device."

Why "enterprise grade"?

• Entra ID integration — backups are tied to the user's Entra identity, allowing seamless restoration across devices during OOBE.
• Policy-based management via Intune — IT centrally configures backup and restore policies. Settings Catalog, CSPs and Group Policy are all supported.
• Automatic, scheduled backups — devices back up every 8 days by default; users can also trigger a backup manually via the Windows Backup app.
• Restore during OOBE — users signing into a new or reset device can restore settings and apps during setup.
• App and preference continuity — Microsoft Store apps, personalisation and system preferences come back consistently.
• Cloud-native and scalable — no on-prem backup servers or third-party agents.
• Security and compliance — data is stored in the Microsoft cloud and admins retain control over what is backed up and restored.

Windows Backup for Organisations vs Enterprise State Roaming

Many IT pros are asking "hasn't this been done already?" Windows Backup for Organisations feels like a rebranded Enterprise State Roaming (ESR), but there are key differences:

• ESR doesn't back up apps; Windows Backup for Organisations restores Microsoft Store apps.
• Windows Backup adds a restore UI during OOBE.
• Backups can be scheduled or manual.
• Intune integration is first-class.
• Broader settings coverage than ESR.

Think of it as ESR 2.0 with a UI, app support and admin control.

Prerequisites

Backup requirements — Windows 10 22H2 (19045.6216+) or Windows 11 22H2 / 23H2 (22621.5768+ / 22631.5768+) / 24H2 (26100.4946+). Users must be Entra-joined or Entra hybrid-joined.

Restore requirements — Windows 11 22H2 / 23H2 (22621.3958+ / 22631.3958+) / 24H2 (26100.1301+). User must have at least one backup profile. If using Autopilot, the profile must use user-driven mode, not self-deploying.

Setting it up in Intune

There are two parts to the configuration.

1. Enable backup policy

• Go to Devices > Configuration > Create Policy
• Platform: Windows 10 and later, Profile type: Settings Catalog
• Search for Sync your settings and add Enable Windows Backup
• Toggle it on and assign to a user group (so users with multiple Windows devices get the policy)
• Review and create

2. Enable the restore policy (tenant-wide)

• Go to Devices > Enrollment > Windows Backup and Restore
• Set Show restore page to On

This ensures users see the restore option during OOBE when signing in on a new or reimaged device.

For third-party MDM solutions, the CSPs are:

• Backup: ./Device/Vendor/MSFT/Policy/Config/SettingsSync/EnableWindowsBackup (String, <enabled/>)
• Restore: ./Device/Vendor/MSFT/WindowsBackupAndRestore/EnableWindowsRestore (Boolean, True)

Policies typically apply within minutes — around 7 minutes in our testing.

User experience

On an Entra-joined PC, users can access backup controls at Settings > Accounts > Windows Backup. They'll see toggles for Remember my preferences and Remember my apps, with subcategory toggles for granular control. Admins can lock these down via policy.

During OOBE, users signing in with their Entra ID will see a restore page where they can pick a previous device and restore settings and apps seamlessly.

Some considerations

• Tenant data ownership. Backup data exists in your tenant and remains until explicitly deleted. IT admins can manage this via Microsoft Graph endpoints.
• Conditional Access. Some organisations have seen authentication failures during restore operations — review your CA policies for Windows OOBE/sign-in.
• PRMFA and virtualised scenarios. Phishing-resistant MFA may interfere with restore on Hyper-V and similar VM scenarios — test before rolling out broadly.

Bottom line

If you're looking for user experience continuity during refreshes or a Windows 10 → 11 migration, Windows Backup for Organisations is a strong addition to the toolkit. If you need file-level recovery, stick with OneDrive Known Folder Move or a proper endpoint backup product — this is about settings, apps and personalisation, not files.

If you'd like help planning a Windows 11 migration that combines this with Autopilot, refresh policies and adoption support, our Modern Endpoint Management practice can help — get in touch.