Let Users Reset and Restore Their Own Cloud PCs: Windows App Settings Guide

  • Windows 365
  • Microsoft Intune
  • Windows App
  • Preview
A smiling IT professional at a desk in a modern open-plan office, working on a large monitor that shows a cloud management dashboard

We all know the ticket: “My Cloud PC is misbehaving — can you reset it?” The Windows App settings policy in Microsoft Intune lets you hand that self-service power to exactly the right people, group by group, without a help desk round-trip. Here is how to set it up, screen by screen.

What the Windows App settings policy does

Windows App settings is a policy type that lives under Cloud PC Settings in the Microsoft Intune admin center. IT admins use it to customize options for people who connect to their Cloud PCs through the Windows App, and you can target specific user groups or all users.

Right now (the feature is still in Preview) its job is user self-service actions: four switches that decide what users can do for themselves from the Windows App. They can reset their Cloud PC, start a restore, initiate Disaster Recovery Plus, or provision a new Cloud PC. Less waiting on the help desk for your users, and fewer routine tickets for you.

The settings you can control

The policy exposes four settings, all grouped under User self-service actions. Each one can be set to Enable, Disable or Not configured. (The Learn article calls one policy type “Flex Dedicated” while the portal says “Frontline Dedicated”; go by what your own portal shows.)

Setting What it does Applies to
Enable users to reset their Cloud PC Allows targeted users to reprovision their Cloud PC from within the Windows 365 app and web app. User groups assigned to Enterprise, Dedicated (Flex/Frontline) or Reserve provisioning policies.
Allow users to initiate a Restore Allows the user to initiate the restore service. User groups assigned to Enterprise or Dedicated (Flex/Frontline) provisioning policies. Per Learn, also Reserve policies that are licensed for Reserve.
Allow users to initiate Disaster Recovery Plus service Allows users to initiate the Disaster Recovery Plus service (the portal’s label). See the note below. The portal shows no applicability note for this setting.
Enable users to provision new Cloud PC instances Lets eligible users start provisioning a Reserve Cloud PC directly from the Windows App, without waiting for IT. Off by default and fully governed by IT. User groups assigned to Reserve provisioning policies and licensed for Reserve.

← Swipe the table sideways using the blue scroll bar to see every column. The screenshots below scroll sideways too, so their text stays readable. →

A closer look at the last two settings

Enable users to provision new Cloud PC instances is Windows 365 Reserve’s user-initiated provisioning. When it is on and a user’s Reserve Cloud PC is not provisioned yet, they see a Set up my Cloud PC card in the Windows App, confirm a consent prompt, and provisioning starts. Microsoft covers it in Managing Windows 365 Reserve.

Allow users to initiate Disaster Recovery Plus service relates to Windows 365 Disaster Recovery Plus, which is designed for large-scale events. Microsoft’s activation article describes it as an admin task in Intune that moves users to a temporary Cloud PC in an alternate region, and it does not spell out this user-facing setting. Confirm the exact user experience with a pilot group before you enable it.

Reserve provisioning has consequences

For Reserve, the 10-day access period starts when the Cloud PC is provisioned. Returning (deprovisioning) a Reserve Cloud PC deletes it and all non-backed-up data, with no snapshot or grace period, so remind users to back up anything important first.

Step-by-step: create the policy

The walkthrough below builds a policy called DevelopersAppSettings for a developer audience. You can follow along in the Microsoft Intune admin center.

1

Open Cloud PC Settings and start a new policy

Sign in to the Microsoft Intune admin center and go to Devices → Cloud PC Settings. Select Create and you will see four policy types: Cloud PC configurations, Windows App settings, Remote Connection Experience and User settings. Pick Windows App settings.

Intune admin center, Devices | Cloud PC Settings, with the Create dropdown open showing Cloud PC configurations, Windows App settings, Remote Connection Experience and User settings
The Create menu on Cloud PC Settings. An existing Cloud PC configurations policy is already listed.
2

Basics: name it for the audience

Give the policy a Name (required) and an optional Description. Here it is DevelopersAppSettings with the description “Developer App Settings.” Naming the policy after the group it targets makes the policy list much easier to read later.

Create setting wizard on the Basics tab with Name set to DevelopersAppSettings and Description set to Developer App Settings
The wizard has five tabs: Basics, Configuration settings, Scope tags, Assignments and Review + create.
3

Configuration settings: choose the self-service actions

Under User self-service actions, pick the state for each setting. In this example, Enable users to reset their Cloud PC and Allow users to initiate a Restore are both set to Enable, while Allow users to initiate Disaster Recovery Plus service and Enable users to provision new Cloud PC instances are left at Not configured (Default).

That last state matters: when a setting is Not configured, this policy does not define a value, and system defaults apply unless another applicable policy provides one. Leave anything you do not need untouched.

Configuration settings tab showing the User self-service actions section with reset and restore set to Enable, and Disaster Recovery Plus and provision new Cloud PC instances set to Not configured
All four self-service settings in one section. The portal notes which provisioning policy types the reset and restore settings apply to, and that the settings apply across all of a user’s Cloud PCs and Cloud apps, on both managed and unmanaged devices.
4

Scope tags (optional)

The Default scope tag is applied automatically. If you use scoped administration in Intune, select + Select scope tags to add others; otherwise move straight on with Next.

Scope tags tab showing the Default scope tag with a Remove link and a Select scope tags link
Scope tags tab with the built-in Default tag.
5

Assignments: decide who gets it

Use Add groups to target specific user groups, or Add all users to cover everyone. The portal also shows an Add all devices button. Microsoft announced all-users and all-devices targeting for Cloud PC Settings in public preview in early October 2026, applied “depending on the settings object.” For these user self-service settings the Learn article documents groups and all users, so stick with those. This walkthrough assigned All users; in production you will usually want to start with a small pilot group instead.

Assignments tab with Add groups, Add all users and Add all devices buttons and All users listed under Groups
Assignments tab with All users added.
6

Review + create

The last tab summarizes everything: basics, each configured setting, and scope tags. Check that the right settings are Enable and that unused ones show Not configured, then select Create.

Review + create tab summarizing the policy name, description, configuration settings and the Default scope tag
The review page lists the Basics, Configuration settings and Scope tags before you commit.
7

Confirm it in the policy list

Back on Cloud PC Settings, the new policy appears with Assigned: Yes and the type Windows App settings. The list also shows a Rank for each policy, and a Rerank policies button sits in the toolbar. In this example, DevelopersAppSettings sits at rank 2 beneath an existing Cloud PC configurations policy at rank 1.

Cloud PC Settings list showing DevelopersAppSettings of type Windows App settings assigned with rank 2, and DevCloudPCSettings of type Cloud PC configurations with rank 1
The finished policy sits alongside the existing Cloud PC configurations policy.

Editing and deleting a policy

To edit, go to Devices → Cloud PC Settings and open the Windows App settings policy. Select Edit next to Settings to rename it or change a setting state, then Update on the review page. To change who it targets, select Edit next to Assignments, add groups, or use the ellipsis (…) → Remove to drop one, and finish with Update.

To delete, select the ellipsis (…) in the policy’s row, choose Delete, and confirm with Yes. Deletion is permanent.

Before you roll it out

Windows App settings wins conflicts

If a Windows App settings policy and a User settings policy conflict, the Windows App settings policy overrides User settings.

Check the provisioning policy type

Each setting only applies to certain provisioning policy types, as the table above shows. In particular, provisioning new Cloud PC instances is for Reserve groups licensed for Reserve. Settings for unsupported policy types have no effect.

It covers every Cloud PC a user has

Per the portal text, these settings apply across all of a user’s Cloud PCs and Cloud apps, on managed and unmanaged devices alike.

It is still Preview

Microsoft labels the Windows App settings page Preview, and the details for individual settings are spread across several articles. Expect options and wording to keep moving.

A suggestion: pilot first

Resetting, restoring, activating Disaster Recovery Plus and provisioning Cloud PCs are all significant actions. Assign the policy to a pilot group, confirm the behavior you expect (especially for the last two settings), and only then widen the assignment.

Wrapping up

The Windows App settings policy is a small object with an outsized payoff: a five-tab wizard, four switches, and your users can handle common Cloud PC recovery and provisioning tasks on their own schedule. Start with one audience, keep unused settings at Not configured, and watch how it lands.

References: Windows App settings (Preview), Managing Windows 365 Reserve and Activate or deactivate Windows 365 disaster recovery plus on Microsoft Learn. Screenshots are from the Microsoft Intune admin center.

0.00 avg. rating (0% score) - 0 votes

Add a Comment

Your email address will not be published. Required fields are marked *