Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Windows 365 has four different recovery operations, and choosing the wrong one can destroy data or leave users without a working device. Use point-in-time restore to roll one Cloud PC back to an earlier disk state, reprovisioning to wipe and rebuild it from current policy, cross-region disaster recovery to provide a temporary Cloud PC during a regional outage, and Disaster Recovery Plus when your Windows 365 Enterprise tenant needs reserved alternate-region capacity.

A restore is not a file-by-file backup. It replaces the Cloud PC’s local disk with the selected restore point, so files, applications, settings and downloads created afterward disappear. Cloud-stored data remains available, but credentials and applications that changed after the restore point may need repair. The procedures and limits below follow Microsoft’s current Windows 365 documentation.

Choose the Windows 365 recovery path first

Start with the failure you are trying to solve. The table below separates operations that are often confused because they all appear in the Windows 365 and Intune administration experience.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Need Use this Windows 365 path What happens to the current device
Undo a recent change or recover an earlier working state Point-in-time restore The entire local disk returns to a selected restore point. Every local change after that point is discarded.
Replace a damaged, obsolete or incorrectly configured device Reprovision The existing Cloud PC is wiped and a new one is deployed according to the current provisioning policy.
Keep a user working through an unplanned regional outage Cross-region disaster recovery A temporary Cloud PC is created in an alternate region from the latest available restore point. Capacity is not reserved by the standard service.
Improve the chance of rapid regional recovery Disaster Recovery Plus Windows 365 Enterprise keeps alternate-region OS disk copies and allocated recovery capacity under an optional service.
Permanently place a device in another region or Azure network connection Move Cloud PC The Cloud PC is relocated; restore points in the old region or old Azure network connection are deleted.

Microsoft’s restore overview, reprovisioning guidance and move guidance describe these as separate operations. A regional recovery activation is not a permanent move, and neither restore nor reprovisioning is a substitute for a user-data backup strategy.

#1 Best Overall
Sale
LAPGEAR Home Office Pro Lap Desk - Black Carbon, Fits 15.6” Laptops | Built-In Mouse Pad & Phone Slot, Wide Cushioned Wrist Rest, Dual-Bolster Microbead Cushion, Carry Handle
  • Spacious Design: Measuring 21.1" wide and 14.1" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
  • Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy ergonomic support with the integrated cushioned wrist rest.
  • Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
  • Durable Surface: Work with confidence on our lap desk's solid surface, featuring a sleek black carbon color, ensuring optimal air circulation to prevent your laptop from overheating.
  • On-the-Go Convenience: With an integrated handle and lightweight design (2.8 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.

What a Windows 365 restore point contains

Point-in-time restore is a full local-state rollback

Windows 365 Enterprise can create scheduled short-term and long-term restore points, and an administrator can create an on-demand manual restore point. Selecting one restores the Cloud PC’s operating-system disk to that moment. The result includes the local files, installed applications, Windows settings, downloads and other changes present on the disk at the selected time.

There can be one manual restore point for a Cloud PC. Creating another manual point replaces the existing manual point. If it is not overwritten, a manual point expires after approximately 28 days, according to Microsoft’s point-in-time restore documentation. The exact scheduled retention available to your tenant depends on its configured policy, so inspect the restore-point list in Intune instead of assuming a universal schedule.

Restore points can be unhealthy

The restore-point list identifies snapshots that Microsoft considers unhealthy. Do not select an unhealthy point for a production rollback unless you have another recovery plan and have confirmed why it is marked that way. A point that is recent is not automatically usable.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What the rollback removes

All local disk changes made after the selected point are lost. That includes a newly created document saved only on the Cloud PC, an application installed afterward, a Windows setting changed later, browser downloads and local application data. Make the user identify work that must be retained before the administrator starts the operation.

Cloud-hosted files are different. Data stored in services such as OneDrive is not removed by the local disk restore, provided it was synchronized to the service. Microsoft recommends treating cloud user data as a separate protection layer rather than assuming that a Cloud PC restore is a complete backup. Its cloud user-data guidance points to Microsoft 365 version history, recycle-bin and retention capabilities, while warning that synchronization varies by application.

How an administrator restores one Cloud PC to an earlier date

Use this procedure when the objective is to return one device to a known earlier state. The operation is destructive and cannot be undone.

Rank #2
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display | 85W Max PD, 1 Powered USB-C 5Gbps & 2 Powered USB-A 3.0 5Gbps Data Ports, for MacBook Pro, MacBook Air, Dell and More (Black)
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
  1. Protect current work. Ask the user to save needed files to the approved cloud storage service, allow synchronization to finish and record any application changes made since the candidate restore point.
  2. Check dependencies. Identify passwords, secrets, certificates, tokens and encryption keys that may have rotated since that point. A rollback can put an application back into a state that no longer matches the credential or certificate held by the service it connects to.
  3. Open the device in Intune. In the Intune admin center, open the target Windows 365 Cloud PC and choose Restore. Microsoft’s single-device restore instructions use this workflow.
  4. Review the available points. Check the timestamp, type and health indication for each listed point. Select the point that predates the unwanted change and is shown as usable.
  5. Confirm the warning with the user. Explain that later local disk changes will be discarded. Microsoft’s end-user instructions state, “You can’t undo this action.” Obtain whatever change approval your organization requires before continuing.
  6. Start the restore. Submit the restore command. The Cloud PC enters a restoring status while Windows 365 replaces its local state.
  7. Validate after completion. Confirm that the device is available, Windows signs in, required applications launch, network access works and cloud files resynchronize. Test services that use credentials, certificates, keys or other secrets changed after the restore point.

If the restore exposes a missing file, application or setting, do not immediately restore again. First determine whether the item was local-only, whether it is present in cloud storage or whether a separate application backup can recover it. Repeating the rollback to another point can discard additional work.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Restore, reprovision or reset: the destructive differences

Point-in-time restore

Restore preserves the selected historical disk state. It is the appropriate choice when the device worked at a known time and a later change caused the problem. Its cost is loss of every local change after that timestamp, including legitimate work.

Reprovisioning

Reprovisioning is a wipe-and-rebuild action, not a historical recovery. Windows 365 deletes the current Cloud PC and deploys a new one using the current provisioning policy, as documented in Microsoft’s reprovision guidance. Existing device data, installed applications and customizations are removed. Use it when the goal is a clean deployment or when policy has changed, not when you need files from the old disk.

Reset and related administrative actions

Windows 365 administration also exposes actions such as restart and reset. Read the confirmation text for the specific command and verify its data impact before approving it. Microsoft’s restore procedure and Cloud PC management instructions distinguish a restore from these other controls; do not choose a reset merely because a restore point is difficult to find.

Recovering users during a regional outage

What cross-region disaster recovery does

Microsoft describes cross-region disaster recovery as a temporary, emergency capability for keeping users productive during an unplanned regional outage. An eligible Cloud PC is copied to an alternate region from the latest restore point. An administrator manually activates the recovery, and the user connects to the temporary alternate-region Cloud PC while the primary region is unavailable.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

The standard service does not reserve capacity in the backup region. A restore point can remain replicated and resilient even when Windows 365 cannot immediately provision the temporary device because capacity is exhausted. Recovery therefore depends on both the configured protection and what capacity is available when the outage occurs.

Rank #3
Sale
Yilador Webcam Cover 3 Pack, 0.03 inch Ultra Thin Laptop Camera Cover Slide | Camera Blocker Slider for iPhone iPad MacBook Pro Computer iMac Cell Phone PC Laptop Accessories, Great for Privacy, Black
  • Note: Not suitable for MacBooks released after 2023 or devices with a protruding front camera; Not applicable to full-screen or notch-style tempered glass screen protectors; Do not use on the rear camera of the phone.
  • 💻 Why Do You Need a Webcam Cover Slide? — Safeguard your privacy by covering your webcam with our reliable webcam cover when not in use. Don't let anyone secretly watch you. Stay protected!
  • ✅ Thin & Stylish — Enhance your laptop's functionality and aesthetics with our 0.027" ultra-thin webcam covers. Seamlessly close your laptop while adding a touch of sophistication.
  • ✅ Fits Most Devices — Compatible with laptops, phones, tablets, desktops! Keep your privacy intact on Ap/ple, Mac/Book, iPh/one, iP/ad, H/P, L/novo, De/ll, Ac/er, As/us, Sa/msung devices.
  • ✅ 365 Days Protection — Our upgraded 3.0 adhesive ensures a strong hold that won't damage your equipment. Experience reliable, long-term privacy protection day in and day out.

Eligibility and preparation

Cross-region disaster recovery requires the relevant add-on license and the user setting to be enabled. Before an incident, administrators must configure the backup geography or region and complete the initial copy. Microsoft says that initial backup can take several days. Once it is complete, the ongoing recovery point objective follows point-in-time restore plus a few minutes for replication.

Select the alternate region with three constraints in mind: data-sovereignty requirements, the distance and network latency experienced by users, and the ability of the alternate network configuration to support the restored Cloud PCs. Microsoft’s setup guidance covers the configuration; do not wait until an outage to discover that the selected region or network is unsuitable.

Recovery objectives and their limits

Service or tenant condition Stated recovery point objective Stated recovery time objective Important qualification
Cross-region disaster recovery with fewer than 50,000 enabled Cloud PCs licensed for the service Less than four hours Target below four hours Microsoft says the objectives depend on available capacity in the backup region.
Disaster Recovery Plus for Windows 365 Enterprise Less than 61 minutes Less than 31 minutes These are Microsoft service targets, not a guarantee; initial setup and network readiness still matter.

The cross-region figures above are Microsoft’s targets in documentation accessed in October 2026, not an independent benchmark. The four-hour RTO qualification applies to tenants with fewer than 50,000 Cloud PCs enabled for cross-region disaster recovery; larger tenants should not infer the same target.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Activating and ending a temporary recovery

  1. Confirm the incident. Use cross-region recovery for an actual regional outage or another approved emergency scenario, not as a routine way to move a user.
  2. Activate it manually. An administrator activates cross-region disaster recovery for the protected Cloud PC using the Windows 365 administration controls configured during setup. Microsoft does not treat activation as automatic failover.
  3. Give the user the temporary device. The alternate-region Cloud PC is based on the latest available restore point, so its local state may not contain work completed after that point. Direct the user to cloud storage for new enduring files.
  4. Operate under the emergency plan. Track which users are on temporary devices, what applications they need and which changes are being made while the primary region is unavailable.
  5. Deactivate when the primary service is ready. Deactivation deletes the temporary Cloud PC. Local disk changes made on that temporary device are not preserved, so copy required files to approved cloud storage before ending the recovery.

Because the recovery device is temporary, cross-region disaster recovery is not a migration method. If the business needs a permanent regional relocation, use the documented Move Cloud PC operation and plan for the deletion of restore points in the old region or Azure network connection.

When Disaster Recovery Plus is justified

Disaster Recovery Plus is an optional Windows 365 Enterprise service for organizations that need more predictable alternate-region capacity. It keeps alternate-region operating-system disk copies and allocates capacity for recovery instead of relying only on what happens to be available during an outage. Microsoft’s service description is at Windows 365 Disaster Recovery Plus.

The service still requires design work. Microsoft says the first backup can take up to three days and subsequent incremental copies take minutes. The alternate network configuration must be able to support the restored Cloud PCs, and Microsoft recommends configuring and testing the complete cross-region flow as part of recurring business-continuity planning. See the Disaster Recovery Plus setup guidance before treating the stated targets as achievable for your tenant.

Rank #4
AboveTEK Portable Laptop Lap Desk w/Retractable Left/Right Mouse Pad Tray, Non-Slip Heat Shield Tablet Notebook Computer Stand Table w/Sturdy Stable Work Surface for Bed Sofa Couch or Travel
  • Anti-Slip Surface - Transform your laptop into a mobile workstation with the AboveTEK portable laptop lap desk. The anti-slip surface provides a strong grip for laptops up to 15.6 inches(Diagonal), while the double rubber strip on the bottom ensures a stable display or typing experience on your lap, couch, or bed.
  • Retractable Mouse Pad - Retractable laptop mouse pad extends on both directions for the left/right handed with elevation along the edges for stopping mouse from falling off. The size of laptop tray is 14" X 9.7" and the size of mouse pad is 7.4" X 6.1".
  • Effective Heat Shield - The effective heat shield made of sturdy and thick material protects your laptop from overheating. Prioritizes your comfort and safety, an ideal lap pad or board for working anywhere.
  • EASY to Carry and Store - With an ergonomic and simplistic design, the lap desk is portable to store in a backpack. Only 15" in size, 2.2 lb of weight and with slim 0.6 inch thickness, it is ready to be easily carried around.
  • Widely Applicable - The smooth platform accommodates laptops and tablets up to 15.6 inches(Diagonal), making it a versatile accessory and one of the best gifts for mom, dad, students and professionals. Perfect for use as a laptop bed tray or tablet holder anywhere at home, library, or park.
Characteristic Standard cross-region disaster recovery Disaster Recovery Plus
Service scope Cross-region emergency recovery for eligible Cloud PCs Optional Windows 365 Enterprise service
Alternate-region capacity Uses available capacity; it is not reserved Allocated capacity is reserved for the service
Copy and recovery source Temporary device created from the latest restore point Alternate-region OS disk copies with incremental updates
Published targets RPO under four hours and, for tenants below 50,000 licensed Cloud PCs, RTO target under four hours RPO under 61 minutes and RTO under 31 minutes
Operational caveat Manual activation and deactivation; temporary device is deleted afterward Initial copy may take up to three days, and network readiness and testing remain required

Design a backup strategy beyond Cloud PC restore points

Separate device recovery from user-data protection

A Cloud PC restore protects a device state at selected times. It does not provide the same controls as file-level backup, versioning or retention. Put user documents and other business files in an approved cloud service with version history, recycle-bin recovery and retention policies where appropriate. Confirm coverage for every application because some programs store data locally, use their own cloud service or synchronize only selected folders.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Document which service protects each category of data: user documents, shared team files, application profiles, browser data, configuration files and locally cached information. A policy that says “the files are in the cloud” is incomplete unless it identifies the service, synchronization status, retention period and recovery owner.

Account for identity and secrets

Before a rollback or regional activation, record applications that depend on rotating passwords, secrets, certificates, keys or tokens. Restoring an older operating-system disk can return a client to stale credentials while the server has already rotated them. Build credential re-registration and certificate validation into the recovery checklist instead of treating a successful Windows sign-in as proof that every workload is healthy.

Choose a backup region deliberately

  • Data residency: Verify that the alternate geography meets contractual, regulatory and organizational sovereignty requirements.
  • User latency: Estimate the network distance and expected interactive performance for users working from the alternate region.
  • Network compatibility: Confirm that routing, DNS, identity, security controls and Azure network connections can serve the recovered Cloud PCs.
  • Capacity model: Decide whether available capacity is acceptable or whether reserved capacity is required for the business’s continuity objectives.
  • Initial-copy time: Schedule protection early; Microsoft says the first cross-region copy can take several days, and Disaster Recovery Plus documentation allows up to three days.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Test the recovery plan instead of trusting the settings

Recovery objectives are useful only when the tenant can execute the workflow. Run a controlled exercise that measures the actions your administrators and users must perform.

  1. Choose representative Cloud PCs, including devices with specialized applications and sensitive data.
  2. Verify that scheduled and manual restore points appear, are recent enough for the business requirement and are marked healthy.
  3. Restore a test device and record how long the Intune operation, user sign-in, application validation and cloud-file resynchronization take.
  4. Check an application whose certificate, secret or password rotates regularly; confirm the documented repair procedure works after rollback.
  5. For cross-region protection, test manual activation in the configured alternate region and measure user connection, network access, application availability and administrative workload.
  6. Copy a test file created on the temporary device to approved cloud storage, deactivate recovery and verify that the file remains after the temporary Cloud PC is deleted.
  7. Review the results against the organization’s RPO and RTO requirements, then update contacts, permissions, runbooks and user communications.

Repeat the exercise after changes to provisioning policies, Azure network connections, identity controls, application packaging or regional assignments. A successful configuration screen does not prove that an end-to-end recovery will meet the business target.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Troubleshooting common recovery problems

The needed restore point is missing

Check the Cloud PC’s configured restore policy, the point’s age and whether a later manual point overwrote it. Retention is policy-dependent, and manual points last approximately 28 days only when they are not replaced. If the device was moved, restore points from the old region or Azure network connection may have been deleted.

Best Value
Sale
LAPGEAR Home Office Lap Desk – Pink, Fits 15.6” Laptops | Built-In Mouse Pad & Phone Slot, Integrated Device Ledge, Dual-Bolster Microbead Cushion, Carry Handle
  • Spacious Design: Measuring 21.1" wide and 12" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
  • Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy laptop support with the integrated device ledge.
  • Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
  • Durable Surface: Work with confidence on our lap desk's solid surface, featuring a blush pink color, ensuring optimal air circulation to prevent your laptop from overheating.
  • On-the-Go Convenience: With an integrated handle and lightweight design (2.14 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.

The point is marked unhealthy

Do not assume that an unhealthy snapshot can be used safely. Select another healthy point if one meets the recovery need, or escalate through your normal Microsoft support process while preserving current cloud-stored data.

The user lost a local file after restore

Determine whether the file was synchronized to the organization’s cloud storage. If it was cloud-resident, use that service’s version history, recycle bin or retention capability. If it existed only on the local disk and no separate backup covers it, a later restore point cannot recover a file that was never present at that time.

An application fails after rollback

Compare the restored client with the current service-side credentials, certificates, keys and application versions. Re-register or rotate the dependency according to the application owner’s procedure. Reprovisioning may be appropriate for a clean rebuild, but it will not recover the discarded local state.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Cross-region activation cannot create the temporary Cloud PC

Check that the add-on license and user setting were enabled before the incident, the backup copy completed, the alternate network is usable and capacity is available in the backup region. Standard cross-region disaster recovery does not reserve capacity, so an unavailable temporary device does not necessarily mean that the protected restore point is gone.

Users made important changes on the temporary device

Before deactivation, copy those changes to approved cloud storage or another durable system. Deactivation deletes the temporary Cloud PC and its local disk changes.

Administrator checklist

  • Classify the incident as rollback, rebuild, temporary regional recovery or permanent relocation.
  • Confirm the selected restore point is healthy and record its timestamp.
  • Protect user files in cloud storage before any destructive operation.
  • Warn that local changes after the restore point will be lost and obtain approval.
  • Check application credentials, secrets, certificates and keys that may have rotated.
  • Use reprovisioning only when a clean deployment from current policy is intended.
  • For regional protection, verify licensing, user enablement, alternate-region data residency, network readiness and capacity assumptions.
  • After recovery, validate sign-in, network access, applications, synchronization and business-critical services.
  • Document temporary-device changes before deactivation.
  • Test the full workflow regularly and update the runbook when policies or networks change.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.