Microsoft makes Windows settings backup the default in 26H2

Microsoft has enabled Windows settings backup by default in the Windows 11 26H2 update, a move that could require administrators to opt out where they previously needed to opt in. The latest release, which has the same code base as 25H2, introduces the same set of known issues, but all have been mitigated in one way or another. One significant change is the resetting of the end-of-support clock and the activation of the Windows backup and restore service, which was previously off by default.

The backup service saves a device's settings and a list of installed Microsoft Store apps, intended for use when a user moves to a new device for a restore during setup. Additionally, Microsoft aims to facilitate the transition to a cloud-first approach for managing devices and user settings. However, many organizations are restricted from sending this data to the cloud, rendering the default-on setting ineffective in privacy-sensitive regions like those covered by the EU Digital Markets Act or sovereign and restricted environments.

As a result, the default-on setting will only apply in eligible devices running Windows 11 26H2, such as those joined to Entra or Entra Hybrid. Unless an administrator explicitly disables the functionality, the update will activate the backup service, and backups will begin automatically. While the addition of a convenient backup feature might seem beneficial at first glance, the shift from opt-in to opt-out raises concerns for administrators, especially in terms of data privacy and security.

The release of Windows 11 26H2 itself is not groundbreaking, but the change in the backup setting may create more than a few nerves among IT professionals.