Posted in

Windows news you can use: January 2026

by ailona•

January 2026 Windows IT Pro covers Backup first-sign-in restores, Secure Boot certificate management via Intune, NTLM phase-out toward Kerberos, Windows 365 Brazil South expansion, Cloud PC AI agents, Start menu rollout, DPAPI key rotation, and new deployment controls for admins.

Windows 11 and related services received several targeted updates in January 2026. Key changes affect backup restore, Secure Boot, Intune defaults, Windows 365 regions, and security hardening.

Main feature/change and impact

Windows Backup for Organizations now restores settings and Store app lists at first sign-in. This works on Microsoft Entra hybrid join and multi-user devices. Secure Boot certificate updates can be deployed and monitored via Microsoft Intune. Intune will no longer enable OOBE quality update installation by default. Windows 365 expanded to Brazil South, reducing latency and aiding regional data residency compliance.

Practical implications

IT teams must update deployment and recovery scripts to use first-sign-in restore behavior. Review Intune policies to manage out-of-box update behavior starting January 2026. Plan Secure Boot certificate rollover using the updated playbook and Intune reporting. For Windows 365, adjust provisioning locations and network routes for Brazilian users to optimize latency and compliance.
Welcome to the January 2026 Windows news you can use, including new capabilities in Windows Backup for Organizations and Windows 365.
Windows security changes require immediate assessment. NTLM phase-out demands Kerberos readiness and testing across legacy systems. Update DPAPI domain backup key rotation policies to strengthen cryptographic posture. Monitor Secure Boot high-confidence targeting signals before automatic certificate pushes. Ensure WDS hands-free deployment settings are configured before April 2026 to avoid unexpected disablement. Windows management and productivity updates affect device lifecycle and user experience. The redesigned Start menu and Cross-Device Resume features continue rolling out. Copilot+ PC and Windows App Development CLI public preview provide new management and developer paths. Enforce MFA for Microsoft 365 admin center access starting February 9, 2026. Closing: Audit your estate for NTLM dependencies, Secure Boot readiness, and Intune policy changes. Schedule configuration updates, testing, and rollout windows to align with January and April 2026 enforcement dates.

Key points from the article:

  • Windows Backup restores settings and Store apps at first sign-in.
  • Secure Boot certificates can be deployed and monitored via Intune.
  • NTLM is being phased out in favor of Kerberos authentication.
  • Windows 365 is now available in the Brazil South region.
  • Windows 365 for Agents supports autonomous AI on Cloud PCs.

    • Related Coverage:

    From the Windows IT Pro Blog articles