{"id":3147,"date":"2026-03-10T07:39:46","date_gmt":"2026-03-10T07:39:46","guid":{"rendered":"https:\/\/modern-workplace.uk\/?p=3147"},"modified":"2026-03-10T07:39:47","modified_gmt":"2026-03-10T07:39:47","slug":"microsoft-intune-users-can-now-restore-their-windows-environment-at-first-login","status":"publish","type":"post","link":"https:\/\/modern-workplace.uk\/?p=3147","title":{"rendered":"Microsoft Intune: Users Can Now Restore Their Windows Environment at First Login"},"content":{"rendered":"\n<p><\/p>\n\n\n\n<p class=\"has-medium-font-size\">Microsoft announced the general availability of the First Sign-In Restore experience on 24 February 2026, an update to Windows Backup for Organisations ( <a href=\"https:\/\/techcommunity.microsoft.com\/blog\/windows-itpro-blog\/windows-first-sign-in-restore-experience-now-available\/4495551\">https:\/\/techcommunity.microsoft.com\/blog\/windows-itpro-blog\/windows-first-sign-in-restore-experience-now-available\/4495551<\/a> ) . Users starting with a new or rebuilt Windows 11 device can now restore their previous Windows environment at first login (even if they missed the option during initial device setup). <\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"has-medium-font-size\"><strong>What Windows Backup for Organisations Is<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size\">Windows Backup for Organisations is a cloud-based settings backup and restore feature managed through Intune or Group Policy. When enabled, it makes a backup of Windows settings, user preferences, and the list of installed Microsoft Store apps to the organisation&#8217;s tenant data store. <\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><a href=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2026\/03\/windows-backup-1.png\"><img loading=\"lazy\" decoding=\"async\" width=\"907\" height=\"876\" src=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2026\/03\/windows-backup-1.png\" alt=\"\" class=\"wp-image-3149\" style=\"aspect-ratio:1.0353992527252418;width:460px;height:auto\" srcset=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2026\/03\/windows-backup-1.png 907w, https:\/\/modern-workplace.uk\/wp-content\/uploads\/2026\/03\/windows-backup-1-300x290.png 300w, https:\/\/modern-workplace.uk\/wp-content\/uploads\/2026\/03\/windows-backup-1-768x742.png 768w\" sizes=\"auto, (max-width: 907px) 100vw, 907px\" \/><\/a><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">The backup runs automatically every eight days, and users can also trigger a manual backup at any time through the Windows Backup app in Settings.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li class=\"has-medium-font-size\">This is <span style=\"text-decoration: underline;\">not<\/span> a full backup solution. Files and documents are out of scope, that is covered by OneDrive with Known Folder Move.<\/li>\n\n\n\n<li class=\"has-medium-font-size\">Win32 and line-of-business applications are not included.<\/li>\n\n\n\n<li class=\"has-medium-font-size\"> The backup data is stored in the Exchange Online cloud within the organisation&#8217;s tenant region.<\/li>\n<\/ul>\n\n\n\n<p class=\"has-medium-font-size\">Backup for Organisations<strong> <\/strong> is used for Windows settings: accessibility preferences, language and regional configuration, personalization, Wi-Fi credentials (if policy allows), and the Microsoft Store app list.<br>If you are familiar with Enterprise State Roaming, this covers similar ground but with broader scope, Intune policy management, and an explicit restore experience during device setup.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p><strong>What Changed in February 2026<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size\">Until this update, users could only restore their environment during during the Out-of-Box Experience (OOBE), and only on Microsoft Entra joined devices. Hybrid joined devices were not supported, which limited the feature&#8217;s usefulness in environments that have not yet completed a full Entra Join migration.<br>The First Sign-In Restore changes both of those constraints.<br>The restore prompt now appears at the user&#8217;s first interactive login if it was not completed during OOBE (whether because the user skipped it, or because a technical issue prevented it from appearing). <\/p>\n\n\n\n<p class=\"has-medium-font-size\">This also closes a gap in Autopilot deployments where the OOBE window is brief and easy to miss. Instead of starting from scratch and manually reconfiguring their environment, users are presented with the option to restore their previous settings at the moment they first sign in.<br>More significantly, this first sign-in path now supports hybrid joined devices. <\/p>\n\n\n\n<figure class=\"wp-block-image size-large is-resized\"><a href=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2026\/03\/clipboard_image-1-1771894873940.png\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"576\" src=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2026\/03\/clipboard_image-1-1771894873940-1024x576.png\" alt=\"\" class=\"wp-image-3150\" style=\"width:630px;height:auto\" srcset=\"https:\/\/modern-workplace.uk\/wp-content\/uploads\/2026\/03\/clipboard_image-1-1771894873940-1024x576.png 1024w, https:\/\/modern-workplace.uk\/wp-content\/uploads\/2026\/03\/clipboard_image-1-1771894873940-300x169.png 300w, https:\/\/modern-workplace.uk\/wp-content\/uploads\/2026\/03\/clipboard_image-1-1771894873940-768x432.png 768w, https:\/\/modern-workplace.uk\/wp-content\/uploads\/2026\/03\/clipboard_image-1-1771894873940.png 1280w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/a><\/figure>\n\n\n\n<p class=\"has-medium-font-size\">Note: the OOBE restore experience <span style=\"text-decoration: underline;\">still requires a Microsoft Entra joined device<\/span>. The hybrid support is specifically tied to the first sign-in path. The update also extends support to multi-user device setups and Windows 365 Cloud PCs.<br>Note: if a user <em>deliberately <\/em>chose to skip the restore during OOBE, the first sign-in restore will not appear. The feature respects explicit user intent and only activates for users who missed the option rather than declined it.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p><strong>Licensing and Cost<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size\">There is no additional licensing cost for Windows Backup for Organisations. The feature is included as part of any standard Intune licence, which in turn is included in Microsoft 365 Business Premium, E3, and E5.<br>As said before, the backup data is stored in the Exchange Online cloud within the organisation&#8217;s tenant region. There is no separate storage allocation or quota to manage.<br>The only permission requirement worth flagging is for the restore configuration. Enabling the restore setting in Intune requires the Intune Service Administrator or Global Administrator role. The standard Intune administrator role is not sufficient for that specific tenant-wide toggle.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"has-medium-font-size\"><strong>Prerequisites Summary<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size\"><br><span style=\"text-decoration: underline;\">For Windows Backup for Organisations<\/span> to work:<\/p>\n\n\n\n<p class=\"has-medium-font-size\">Microsoft Entra joined or Hybrid joined devices<br>Windows 10 (22H2, build 19044.6216 or later) or Windows 11<br>Intune policy with Enable Windows Backup enabled via Settings Catalog<\/p>\n\n\n\n<p class=\"has-medium-font-size\"><span style=\"text-decoration: underline;\">For the OOBE restore<\/span> to work:<\/p>\n\n\n\n<p class=\"has-medium-font-size\">Microsoft Entra joined devices only<br>Windows 11 (22H2 or later) with the August 2025 cumulative update or later<\/p>\n\n\n\n<p class=\"has-medium-font-size\"><span style=\"text-decoration: underline;\">For the First Sign-In Restore<\/span><strong><em> <\/em><\/strong>(new in February 2026):<\/p>\n\n\n\n<p class=\"has-medium-font-size\">Microsoft Entra joined or Hybrid joined devices<br>Windows 11 with the February 24, 2026 Windows update or later<br>The same Microsoft Entra account used on the original device<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"has-medium-font-size\"><strong>Conclusion<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size\"><br>The First Sign-In Restore reaching GA removes a gaps in the backups. The OOBE window during Autopilot provisioning is not always the best moment to present a restore prompt, and users who missed it previously had no fallback. That is no longer the case.<br>For organisations that have already configured the backup side but were waiting for broader restore support before committing to the feature, February 2026 is a reasonable point to revisit it. The configuration has not changed the same Intune policies that controlled backup and OOBE restore also govern the first sign-in experience.<\/p>\n\n\n\n<p class=\"has-medium-font-size\">I hope this is useful for anyone planning to enable the feature before rolling it out to end users.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft has announced the general availability of the First Sign-In Restore experience, an update to Windows Backup for Organisations. Users who miss the restore prompt during device setup can now recover their Windows environment at first login, including on hybrid joined devices. Here is what changed, what it requires, and what it does not cover.<\/p>\n","protected":false},"author":1,"featured_media":3150,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sitemap_exclude":false,"_sitemap_priority":"","_sitemap_frequency":"","twitterCardType":"","cardImageID":0,"cardImage":"","cardTitle":"","cardDesc":"","cardImageAlt":"","cardPlayer":"","cardPlayerWidth":0,"cardPlayerHeight":0,"cardPlayerStream":"","cardPlayerCodec":"","footnotes":""},"categories":[850,868,869],"tags":[],"class_list":["post-3147","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-850","category-intune","category-microsoft-intune"],"_links":{"self":[{"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/posts\/3147","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3147"}],"version-history":[{"count":1,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/posts\/3147\/revisions"}],"predecessor-version":[{"id":3151,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/posts\/3147\/revisions\/3151"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=\/wp\/v2\/media\/3150"}],"wp:attachment":[{"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3147"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3147"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/modern-workplace.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3147"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}