Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsThe quickest supported method is an Intune Windows 10 and later > Settings catalog policy. Add Enable Windows backup from Administrative Templates > Windows Components > Sync your settings, set it to Enabled, and assign the policy to a pilot group before production. This enables periodic backup of supported Windows settings and Microsoft Store app configurations—not a disk image, complete application backup, or protection for all user files.
What Windows Backup for Organizations actually protects
Windows Backup for Organizations is intended mainly for replacing, reimaging, or enrolling a Windows device. It preserves supported user settings and Microsoft Store app configuration so a user can receive a more familiar experience on another device. Microsoft describes the controls exposed to users under Settings > Accounts > Windows backup.
It is not:
- A full disk or operating-system image.
- A point-in-time rollback system.
- A general backup of arbitrary Win32 applications or application data.
- A substitute for OneDrive, SharePoint, or an enterprise file-backup service.
- A guarantee that every Windows setting or application state will be restored.
For the service overview and scope, see Microsoft’s Windows Backup documentation.
Prerequisites and eligibility
| Requirement | What to verify |
|---|---|
| Management | The device is enrolled in Microsoft Intune for the Intune configuration path. |
| Identity | Microsoft Entra joined devices are required for the documented Intune restore scenario. |
| Windows edition | Policy CSP documentation lists supported Pro, Enterprise, Education, and IoT Enterprise editions on supported Windows servicing baselines. |
| Windows build | For restore, Microsoft’s Intune guidance lists Windows 11 22H2 build 22621.3958 or later, 23H2 build 22631.3958 or later, and 24H2 build 26100.1301 or later, alongside newer cumulative-update requirements in its current eligibility text. Check the live requirements before testing. |
| User data | The user must already have a backup profile for restore to provide anything useful. |
| Autopilot | Use user-driven mode for the documented restore experience; self-deploying mode is not the stated scenario. |
| Updates | Microsoft recommends enabling Install Windows quality updates, particularly for devices below the referenced 2025 servicing baselines. |
| Licensing | Eligibility can depend on the tenant’s Microsoft 365, Windows, Microsoft Entra, and related enterprise licensing. Confirm the terms that apply to your region and agreement. |
See the current Intune Windows Backup and Restore guidance and SettingsSync Policy CSP documentation before rollout.
#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Enable Windows Backup with an Intune Settings Catalog policy
- Sign in to the Intune admin center with an appropriate Intune administrator role.
- Go to Devices > Managed devices > Configuration.
- Select Create > New policy.
- Choose Platform: Windows 10 and later and Profile type: Settings catalog.
- Select Add settings and search for Enable Windows backup. Searching is more reliable than depending on a category label that may change.
- Select the setting under Administrative Templates > Windows Components > Sync your settings.
- Set it to Enabled.
- Add any organization-approved Windows Backup synchronization settings, then assign the policy to a pilot user or device group.
- Create the policy, synchronize a pilot device, and review the device and user status before expanding the assignment.
This is the simplest supported configuration path documented by Microsoft: Intune Windows Backup and Restore.
Enable restore during Windows enrollment
Backup and restore are separate controls. To show the restore experience at the appropriate point in OOBE:
Rank #2
- Easily store and access 5TB of content on the go with the Seagate portable drive, a USB external hard Drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
- Open Devices > Enrollment in the Intune admin center.
- Select the Windows tab.
- Under Enrollment options, open Windows Backup and Restore.
- Set Show restore page to On and save.
This is a tenant-wide enrollment setting evaluated during enrollment. Changing it does not retroactively add the page to devices that have already enrolled, making it especially important to configure before an Autopilot replacement workflow. The enrollment-time behavior is described in Windows Backup and Intune’s enrollment documentation.
For an already enrolled device, Microsoft also documents a Settings Catalog setting named Enable Windows Restore under Windows Backup And Restore. It can arrive through a normal policy refresh, but it is not a substitute for the enrollment setting when the goal is to expose restore during OOBE.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #3
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Optional custom OMA-URI configuration
Settings Catalog is preferable for most tenants. Custom profiles, automation, or another MDM workflow can use these CSP values instead:
| Purpose | OMA-URI | Type | Value |
|---|---|---|---|
| Enable backup | ./Device/Vendor/MSFT/Policy/Config/SettingsSync/EnableWindowsBackup |
String | <enabled/> |
| Disable backup | ./Device/Vendor/MSFT/Policy/Config/SettingsSync/EnableWindowsBackup |
String | <disabled/> |
| Enable restore | ./Device/Vendor/MSFT/WindowsBackupAndRestore/EnableWindowsRestore |
Boolean | True |
The restore CSP defaults to false or not configured. See WindowsBackupAndRestore CSP for its current scope and requirements.
Rank #4
- Easily store and access 4TB of content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Choose which settings can synchronize
Microsoft provides policy settings corresponding to options shown in Settings > Accounts > Windows backup. Start with only the categories your organization permits, pilot them, and document the decision for language preferences, personalization, credentials, and other available settings. Consider privacy, regulatory obligations, and what happens when a user or device leaves the tenant. Consumer-visible options are not necessarily identical to enterprise-managed behavior. The available controls are listed in Windows Backup policy settings.
Validate the deployment
- Confirm the policy assignment includes the intended user or device and has no filter or exclusion removing the pilot.
- Trigger an Intune sync and check the configuration profile’s per-device status.
- Verify the signed-in identity is the expected organizational account.
- Confirm the Windows edition, build, and cumulative update meet current requirements.
- Check that the user has a backup profile.
- Allow for policy delivery and the periodic backup cycle. Microsoft describes operation at approximately eight-day intervals after policy application, not as an immediate manual snapshot.
- Test a replacement or reimage with a non-production pilot device before relying on the workflow.
Troubleshoot missing backup or restore
| Symptom | Likely causes and corrective action |
|---|---|
| “Enable Windows backup” cannot be found | Check that the profile is Windows 10 and later > Settings catalog, search the exact setting name, and confirm the device is in supported scope. Use the Policy CSP if a custom profile is required. |
| Policy succeeds but no backup is visible | Check online status, Intune sync, identity, supported updates, assignment filters, and the approximately eight-day schedule. Confirm the user has a backup profile. |
| Restore page is absent in OOBE | Verify Show restore page was enabled before enrollment; the tenant setting is not retroactive. Also check Entra join, user-driven Autopilot, supported builds, current updates, an existing backup profile, and the backup policy. |
| Files do not return | This is normally a scope issue: Windows Backup settings synchronization is not OneDrive Known Folder Move or a file-backup service. Check the separate file-protection configuration. |
| Intune and Windows disagree | Look for conflicts in Settings Catalog, Administrative Templates, custom OMA-URI profiles, security baselines, Group Policy, co-management workloads, filters, and exclusions. |
Microsoft identifies these settings as components that must not be disabled because they can prevent Windows Backup from operating: EnableActivityFeed, PublishUserActivities, UploadUserActivities, EnableCDP, and AllowConnectedDevices. Check their effective values across MDM and Group Policy. See Microsoft’s troubleshooting and policy guidance.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Best Value
- [Upgraded Version] - This external hard drive features a mirrored logo stripe combined with a striped anti-slip design, and the rounded corners of the casing make it easier to grip. The stripes also have a heat dissipation function, ensuring stable and fast data transfer.
- 【Ultra-thin and quiet】 - The motherboard adopts JMicron 578 noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
- 【Ultra-Fast Data Transfers】 - Pairing this external hard drive with JMicron 578 solution USB 3.0 and USB 2.0 interfaces enables blazing-fast data transfer. It boasts theoretical read speeds of up to 125MB/s and write speeds of up to 103MB/s.
- 【Plug and Play】 - With no software to install, just plug it in and the drive is ready to use.The hard disk chip is wrapped with an aluminum anti-interference layer to increase heat dissipation and protect data.
- 【What You Get】 - 1 x Portable Hard Drive, 1 x USB 3.0 Cable, 1 x User Manual, Gift-type shell packaging ,Three-year manufacturer's warranty and free technical support services.
Windows Backup, OneDrive, roaming, and full recovery
| Requirement | Best-fit capability |
|---|---|
| Supported Windows preferences and settings | Windows Backup for Organizations |
| Desktop, Documents, and Pictures files | OneDrive Known Folder Move |
| Some supported settings roaming between Microsoft Entra devices | Enterprise State Roaming; see Microsoft’s ESR context |
| Provisioning and policy reapplication | Intune, Windows Autopilot, and configuration policies |
| Historical versions, bare-metal recovery, ransomware resilience, or non-user-folder data | A dedicated enterprise backup and recovery platform |
A resilient design normally combines these roles rather than treating one feature as a replacement for the others.
Disable Windows Backup
Set Enable Windows backup to Disabled in the assigned policy to stop scheduled backup activity. Disabling the setting does not by itself establish that existing backup data has been removed; viewing, exporting, or deleting retained data requires Microsoft’s documented administrative or API procedures. Consult the current Windows Backup documentation before changing retention or tenant data.
The Bottom Line
Use the Intune Settings Catalog to enable Windows Backup for Organizations, configure the enrollment-level restore page separately when OOBE restore is required, and pair the feature with OneDrive for user files and a dedicated backup service for full recovery.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
