Let Users Reset and Restore Their Own Cloud PCs: Windows App Settings Guide
We all know the ticket: “My Cloud PC is misbehaving — can you reset it?” The Windows App settings policy in Microsoft Intune lets you hand that self-service power to exactly the right people, group by group, without a help desk round-trip. Here is how to set it up, screen by screen.
What the Windows App settings policy does
Windows App settings is a policy type that lives under Cloud PC Settings in the Microsoft Intune admin center. IT admins use it to customize options for people who connect to their Cloud PCs through the Windows App, and you can target specific user groups or all users.
Right now (the feature is still in Preview) its job is user self-service actions: four switches that decide what users can do for themselves from the Windows App. They can reset their Cloud PC, start a restore, initiate Disaster Recovery Plus, or provision a new Cloud PC. Less waiting on the help desk for your users, and fewer routine tickets for you.
The settings you can control
The policy exposes four settings, all grouped under User self-service actions. Each one can be set to Enable, Disable or Not configured. (The Learn article calls one policy type “Flex Dedicated” while the portal says “Frontline Dedicated”; go by what your own portal shows.)
← Swipe the table sideways using the blue scroll bar to see every column. The screenshots below scroll sideways too, so their text stays readable. →
Enable users to provision new Cloud PC instances is Windows 365 Reserve’s user-initiated provisioning. When it is on and a user’s Reserve Cloud PC is not provisioned yet, they see a Set up my Cloud PC card in the Windows App, confirm a consent prompt, and provisioning starts. Microsoft covers it in Managing Windows 365 Reserve.
Allow users to initiate Disaster Recovery Plus service relates to Windows 365 Disaster Recovery Plus, which is designed for large-scale events. Microsoft’s activation article describes it as an admin task in Intune that moves users to a temporary Cloud PC in an alternate region, and it does not spell out this user-facing setting. Confirm the exact user experience with a pilot group before you enable it.
For Reserve, the 10-day access period starts when the Cloud PC is provisioned. Returning (deprovisioning) a Reserve Cloud PC deletes it and all non-backed-up data, with no snapshot or grace period, so remind users to back up anything important first.
Step-by-step: create the policy
The walkthrough below builds a policy called DevelopersAppSettings for a developer audience. You can follow along in the Microsoft Intune admin center.
Open Cloud PC Settings and start a new policy
Sign in to the Microsoft Intune admin center and go to Devices → Cloud PC Settings. Select Create and you will see four policy types: Cloud PC configurations, Windows App settings, Remote Connection Experience and User settings. Pick Windows App settings.
Basics: name it for the audience
Give the policy a Name (required) and an optional Description. Here it is DevelopersAppSettings with the description “Developer App Settings.” Naming the policy after the group it targets makes the policy list much easier to read later.
Configuration settings: choose the self-service actions
Under User self-service actions, pick the state for each setting. In this example, Enable users to reset their Cloud PC and Allow users to initiate a Restore are both set to Enable, while Allow users to initiate Disaster Recovery Plus service and Enable users to provision new Cloud PC instances are left at Not configured (Default).
That last state matters: when a setting is Not configured, this policy does not define a value, and system defaults apply unless another applicable policy provides one. Leave anything you do not need untouched.
Scope tags (optional)
The Default scope tag is applied automatically. If you use scoped administration in Intune, select + Select scope tags to add others; otherwise move straight on with Next.
Assignments: decide who gets it
Use Add groups to target specific user groups, or Add all users to cover everyone. The portal also shows an Add all devices button. Microsoft announced all-users and all-devices targeting for Cloud PC Settings in public preview in early October 2026, applied “depending on the settings object.” For these user self-service settings the Learn article documents groups and all users, so stick with those. This walkthrough assigned All users; in production you will usually want to start with a small pilot group instead.
Review + create
The last tab summarizes everything: basics, each configured setting, and scope tags. Check that the right settings are Enable and that unused ones show Not configured, then select Create.
Confirm it in the policy list
Back on Cloud PC Settings, the new policy appears with Assigned: Yes and the type Windows App settings. The list also shows a Rank for each policy, and a Rerank policies button sits in the toolbar. In this example, DevelopersAppSettings sits at rank 2 beneath an existing Cloud PC configurations policy at rank 1.
Editing and deleting a policy
To edit, go to Devices → Cloud PC Settings and open the Windows App settings policy. Select Edit next to Settings to rename it or change a setting state, then Update on the review page. To change who it targets, select Edit next to Assignments, add groups, or use the ellipsis (…) → Remove to drop one, and finish with Update.
To delete, select the ellipsis (…) in the policy’s row, choose Delete, and confirm with Yes. Deletion is permanent.
Before you roll it out
Windows App settings wins conflicts
If a Windows App settings policy and a User settings policy conflict, the Windows App settings policy overrides User settings.
Check the provisioning policy type
Each setting only applies to certain provisioning policy types, as the table above shows. In particular, provisioning new Cloud PC instances is for Reserve groups licensed for Reserve. Settings for unsupported policy types have no effect.
It covers every Cloud PC a user has
Per the portal text, these settings apply across all of a user’s Cloud PCs and Cloud apps, on managed and unmanaged devices alike.
It is still Preview
Microsoft labels the Windows App settings page Preview, and the details for individual settings are spread across several articles. Expect options and wording to keep moving.
A suggestion: pilot first
Resetting, restoring, activating Disaster Recovery Plus and provisioning Cloud PCs are all significant actions. Assign the policy to a pilot group, confirm the behavior you expect (especially for the last two settings), and only then widen the assignment.
Wrapping up
The Windows App settings policy is a small object with an outsized payoff: a five-tab wizard, four switches, and your users can handle common Cloud PC recovery and provisioning tasks on their own schedule. Start with one audience, keep unused settings at Not configured, and watch how it lands.
References: Windows App settings (Preview), Managing Windows 365 Reserve and Activate or deactivate Windows 365 disaster recovery plus on Microsoft Learn. Screenshots are from the Microsoft Intune admin center.