Windows Backup vs. File History vs. a Real Backup Strategy

Windows 11 contains several features with the word backup in their name, but they do not all protect the same things.

You may encounter:

• Windows Backup
• OneDrive folder backup
• File History
• Backup and Restore (Windows 7)
• System Restore
• Recovery Drive
• System Image Recovery

This creates an understandable question:

If Windows says my computer is backed up, am I genuinely protected?

The answer depends on what you expect the backup to recover.

Windows Backup can make moving to a replacement PC much easier. File History can recover earlier versions of personal documents. OneDrive can protect files from the loss of a physical computer and offers useful recovery features.

None of those tools, used alone, necessarily gives you a complete backup strategy covering hardware failure, accidental deletion, ransomware, account compromise and the loss of the entire premises.

A real backup strategy combines several forms of protection and regularly proves that the data can be restored.

What Windows Backup Actually Does

Open Start and search for:

Windows Backup

The Windows Backup application provides one place to manage the cloud protection of selected files, Windows settings, preferences and information about installed applications.

It can protect or remember:

• Desktop
• Documents
• Pictures
• Videos
• Music
• Accessibility settings
• Personalisation settings
• Language preferences
• Certain Windows settings
• Wi-Fi profiles and supported credentials
• The list and positions of installed applications

The selected personal folders are synchronised into OneDrive. Settings and preferences are associated with your Microsoft account so that Windows can offer to restore them when you configure a replacement computer or reinstall Windows. (Microsoft Support⁠)

Windows Backup Is Excellent for PC Migration

Suppose your laptop is lost or its storage drive fails.

When you configure another Windows 11 computer and sign in with the same personal Microsoft account, Windows can detect the stored backup and offer to restore it.

It can restore many settings and recreate application pins. Microsoft Store applications can then be downloaded from their restored pins, while software that came from elsewhere may direct you to the developer’s website for the installer. (Microsoft Support⁠)

This can save considerable time when replacing a personal computer.

Instead of starting with a completely empty desktop, you may regain:

• Your synchronised files
• Your familiar wallpaper and colours
• Accessibility preferences
• Wi-Fi information
• Start menu arrangements
• Links to applications you previously used

However, this is not the same as restoring an exact copy of the old computer.

Windows Backup Does Not Create a Complete Image of Your PC

Windows Backup does not normally preserve every program exactly as installed, including all its settings, plug-ins, licences, databases and locally stored data.

Restoring the list of applications is not the same as restoring the applications themselves.

You may still need to:

• Download desktop software again
• Sign back into applications
• Re-enter licence information
• Reconfigure printers and specialist hardware
• Restore locally stored databases
• Reinstall application add-ins
• Recreate VPN connections
• Restore data stored outside the selected OneDrive folders

Windows Backup is primarily designed to make personal Windows recovery and migration easier—not to create a complete bare-metal image of the device.

It Depends on a Personal Microsoft Account

Microsoft currently describes the Windows Backup application as being focused on consumer devices using personal Microsoft accounts, such as Outlook.com or Live.com accounts. Work and school accounts do not provide the same complete Windows Backup application experience. (Microsoft Support⁠)

Businesses should not assume that the Windows Backup app protects company computers merely because employees sign into Microsoft 365.

Organisational protection normally requires centrally managed systems covering endpoints, OneDrive, SharePoint, servers, cloud applications and line-of-business data.

It Depends on OneDrive Storage

Windows Backup uses OneDrive to protect the selected personal folders.

A free personal Microsoft account includes 5GB of OneDrive storage. That may be enough for a few documents but is unlikely to hold a large collection of photographs, videos or business files. If the OneDrive account runs out of space, folder protection and some personalisation backup may stop working correctly. (Microsoft Support⁠)

Open Windows Backup and the OneDrive client regularly to confirm that the status actually says the content is protected.

Do not assume that the presence of a OneDrive icon means every important folder has successfully synchronised.

Is OneDrive a Backup?

OneDrive is primarily a cloud storage and synchronisation platform, but it also includes several valuable backup-style recovery features.

When files are synchronised, they become available through the OneDrive website and other connected devices. If the physical computer is stolen or its drive fails, the cloud copy remains available.

OneDrive also provides:

• A cloud Recycle Bin
• File version history
• Recovery of previous document versions
• Ransomware detection for supported subscriptions
• Whole-OneDrive restoration for eligible Microsoft 365 subscribers

Microsoft 365 subscribers can restore an entire personal OneDrive to an earlier point within the previous 30 days when files have been deleted, overwritten, corrupted or affected by malware. (Microsoft Support⁠)

Those features make OneDrive a powerful part of a backup strategy.

However, synchronisation and independent backup are not identical.

Changes Can Synchronise in Both Directions

When a synchronised file is edited, renamed or deleted, that action can be reflected in the cloud and on other connected devices.

OneDrive’s Recycle Bin, version history and restore features may allow you to reverse the action, but that protection depends on:

• The retention period
• The available file history
• The subscription
• Access to the Microsoft account
• Nobody permanently deleting the recovery data
• The problem being discovered in time

The UK National Cyber Security Centre advises organisations to protect previous file versions from accidental or malicious deletion when cloud synchronisation is used as part of backup protection. It also recommends keeping a separate offline backup or using a cloud service specifically designed to isolate backup data. (National Cyber Security Centre⁠)

The sensible conclusion is:

OneDrive can be an important backup layer, but it should not be the only copy of irreplaceable data.

Cloud-Only Files Need Attention

OneDrive Files On-Demand can display files in File Explorer even when the complete file is stored only in the cloud.

This saves local storage, but it means that copying the visible OneDrive folder to an external drive may not include every cloud-only file unless the files are first downloaded or the backup software is designed to access them.

Before relying on a local backup, confirm whether critical OneDrive content is:

• Available online only
• Downloaded to the computer
• Included directly by a cloud-to-cloud backup service
• Recoverable without the original PC

What File History Does

File History is a separate Windows feature accessed through the traditional Control Panel.

It automatically saves copies of personal files to:

• An external USB drive
• Another suitable local drive
• A configured network location

File History concentrates on user files and their previous versions. It can protect default libraries such as Documents, Pictures, Videos and Music, along with Desktop and folders added to libraries. (Microsoft Support⁠)

To configure it:

1. Connect an external drive.
2. Open Control Panel.
3. Select System and Security.
4. Select File History.
5. Choose the backup drive.
6. Select Turn on.

Once enabled, File History monitors the protected locations and creates regular copies.

Where File History Is Better Than Windows Backup

File History is particularly useful when you need to recover:

• A document deleted yesterday
• A photograph that was accidentally overwritten
• An earlier spreadsheet version
• A folder before a large unwanted change
• Local files without placing them in OneDrive
• Several generations of the same file

You can browse available previous versions and restore a file to its original location or another folder. (Microsoft Support⁠)

It is straightforward, included with Windows and does not require a personal Microsoft account.

Where File History Falls Short

File History is not a complete system backup.

It does not normally give you an immediate full restoration of:

• Windows itself
• All installed programs
• Every program setting
• The complete Registry
• Boot partitions
• Specialist databases
• Files stored outside its protected locations
• Data held only in online services
• Another device that was never configured

If the computer’s internal drive fails, you may need to reinstall Windows and your applications before restoring the personal files from File History.

An Always-Connected Drive Has Risks

File History commonly uses an external drive that remains connected to the computer.

That is convenient, but an always-connected backup can be vulnerable to:

• Ransomware
• Malware
• Accidental formatting
• Electrical damage
• Theft
• Fire or flooding
• A user deleting the backup
• Failure of the backup drive itself

The external disk is still a useful layer, but it should not be the only backup.

Consider rotating two encrypted backup drives, with one disconnected and stored securely when it is not being used.

What About Backup and Restore (Windows 7)?

Windows 11 still contains references to:

Backup and Restore (Windows 7)

The name is confusing because it can appear on a modern Windows 11 computer.

This older control-panel area is associated with legacy backup, system-image and repair-disc functions. Windows Recovery Environment can still use System Image Recovery to restore a compatible system image, while Windows also retains options for creating repair media. (Microsoft Support⁠)

A system image can be useful before:

• Replacing a drive
• Performing a risky upgrade
• Making extensive system changes
• Preparing a standardised specialist computer
• Recovering a device with complicated legacy software

However, a system image should not be confused with a complete ongoing backup strategy.

System Images Are Point-in-Time Copies

A system image captures the selected system at a particular moment.

If the image is six months old, restoring it may also restore:

• Six-month-old applications
• Six-month-old settings
• Old security updates
• Old local data
• Problems already present when the image was created

You still need frequent file-level backups for work created after the image.

Recovery Media Is Not a Backup of Your Files

A Windows Recovery Drive or repair disc can help start recovery tools when Windows will not boot.

It does not necessarily contain your current documents, photographs, email archives or business databases. Microsoft describes a Recovery Drive as media containing essential system files that can help restore the device, rather than a complete copy of your changing personal data. (Microsoft Support⁠)

Recovery media helps you reach the tools.

The backup contains the data you need those tools to restore.

System Restore Is Not a File Backup

System Restore uses restore points to reverse certain system-level changes.

It can help after:

• A problematic driver installation
• A failed application installation
• A damaging Registry change
• Certain Windows configuration problems

System Restore is designed around system files, installed applications, drivers and Registry settings. It is not intended as the main protection for personal documents. (Microsoft Support⁠)

Do not assume that a restore point will recover:

• A deleted photograph
• An overwritten spreadsheet
• A missing customer folder
• A ransomware-encrypted document
• A lost Outlook data file

Use restore points alongside proper file and system backups—not instead of them.

What a Real Backup Strategy Looks Like

A real backup strategy starts with recovery requirements rather than the name of a particular product.

Ask:

• Which files are genuinely irreplaceable?
• Which systems must be restored first?
• How much recent work could we afford to lose?
• How quickly must operations resume?
• What happens if the computer is stolen?
• What happens if the office is inaccessible?
• What happens if an administrator account is compromised?
• What happens if ransomware reaches the network?
• Who knows how to restore the data?
• When was the last successful recovery test?

A backup has little value when nobody knows whether it is complete or how long restoration will take.

Follow the 3-2-1 Principle

The NCSC recommends the widely used 3-2-1 approach:

• Keep at least three copies of important data.
• Store them across at least two devices or storage types.
• Keep at least one copy offsite.

The NCSC also recommends maintaining a logically separated or offline backup, retaining backups for long enough to discover delayed problems and testing restoration regularly. (National Cyber Security Centre⁠)

For a home user, this might mean:

1. The working copy on the computer.
2. An automatic backup to an external drive.
3. A protected cloud copy.

For a business, it might mean:

1. The production data.
2. A versioned backup stored on secured backup infrastructure.
3. An immutable or offline copy held separately.

The exact technology can vary. The important part is ensuring that one incident cannot destroy every copy.

A Practical Home Backup Setup

A strong home setup could use several layers.

Layer One: OneDrive and Windows Backup

Use Windows Backup to protect common folders and Windows preferences.

This helps when:

• The laptop is lost
• The internal drive fails
• You buy a replacement PC
• You reinstall Windows
• You need access to files from another device

Check the OneDrive storage allowance and sync status regularly.

Layer Two: File History

Connect an external drive and enable File History for local versioned copies.

This helps when:

• You delete a file accidentally
• You overwrite a document
• You need an older folder version
• OneDrive is unavailable
• You lose access to the Microsoft account

Choose a drive large enough to store several versions—not merely one copy of the current files.

Layer Three: A Disconnected Copy

Periodically create a second backup to another drive.

After confirming that the backup has completed:

1. Eject the drive safely.
2. Disconnect it.
3. Store it securely.
4. Rotate it with another drive where possible.

A disconnected backup is harder for ransomware or accidental deletion to reach.

Layer Four: Recovery Preparation

Also keep:

• The BitLocker recovery key
• Microsoft account recovery information
• Application licence details
• A list of important software
• Windows recovery media where appropriate
• Instructions explaining how to restore the backup

Do not store the only copy of the BitLocker recovery key on the encrypted computer it unlocks.

A Practical Business Backup Setup

A business requires more than enabling OneDrive on each employee’s laptop.

The strategy should identify and protect:

• OneDrive
• SharePoint
• Microsoft Teams files
• Exchange Online mailboxes
• Servers
• Virtual machines
• Line-of-business applications
• Databases
• Network equipment configurations
• Cloud platforms
• Employee endpoints
• Encryption and recovery keys
• SaaS applications
• Website and DNS configuration

The NCSC specifically recommends backing up both business data and the configuration information required to operate systems. (National Cyber Security Centre⁠)

Microsoft 365 Still Needs a Recovery Plan

Microsoft 365 provides resilient infrastructure, versioning, recycle bins and useful restore tools.

A business must still consider:

• Malicious deletion
• Compromised administrator accounts
• Retention periods
• Departing employees
• Legal and compliance requirements
• Mass file corruption
• Ransomware synchronising into cloud libraries
• Recovery of complete Teams and SharePoint structures
• Recovery outside Microsoft’s normal retention windows

An independent Microsoft 365 backup service can provide longer retention, separate administrator controls and broader recovery options.

Backups Should Use Separate Credentials

Do not manage the backup platform with the same everyday account used for email and general administration.

Use:

• Separate backup administrator accounts
• Multi-factor authentication
• Least-privilege permissions
• Restricted access to backup storage
• Alerts for deletion or policy changes
• Immutable storage where supported
• Offline copies for critical systems

Attackers often target backups deliberately because destroying recovery data increases the pressure to pay a ransom. The NCSC advises restricting access to backup credentials and infrastructure for this reason. (National Cyber Security Centre⁠)

Retention Matters

Keeping only the newest copy may not be enough.

Suppose a database becomes corrupted gradually and the problem is not noticed for three weeks. If every backup is overwritten after seven days, all available copies may contain the corruption.

A sensible retention policy might include:

• Several recent daily backups
• Weekly backups
• Monthly backups
• Longer-term archives where required
• Protected versions that cannot be altered immediately

The NCSC advises retaining backups long enough to cover problems that are not discovered immediately and suggests at least a month as a practical consideration. (National Cyber Security Centre⁠)

The correct period depends on:

• Business requirements
• Data-change frequency
• Legal obligations
• Storage costs
• The likely delay before an incident is detected

Test the Restore, Not Just the Backup

A green tick beside a backup job does not prove that the organisation can recover.

Regular restore tests should confirm:

• The expected files are included.
• The backup is readable.
• Encryption keys are available.
• Previous versions can be selected.
• Databases open correctly.
• Applications can reconnect to the restored data.
• Recovery accounts still work.
• The documented procedure is accurate.
• Staff know who is responsible.
• Recovery can be completed within an acceptable time.

The NCSC explicitly recommends testing backups and ensuring that recovery remains possible after a complete system failure. (National Cyber Security Centre⁠)

For critical systems, test a complete recovery into an isolated environment rather than restoring one convenient sample file.

Decide How Much Data You Can Lose

Two useful backup concepts are:

Recovery Point Objective

The recovery point objective determines how much recent work you can afford to lose.

If the last backup was taken at midnight and the system fails at 4pm, you could lose 16 hours of work.

A company that can tolerate only one hour of lost data needs much more frequent backups than one that can recreate a full working day.

Recovery Time Objective

The recovery time objective determines how quickly the service must be restored.

A family computer might tolerate several days of recovery.

A company’s ordering, payroll or booking system may need to return within hours.

Your backup method must be capable of meeting both requirements. A backup that takes three days to download may not be suitable for a system that must be operational by lunchtime.

What Should Be Backed Up?

Many people protect their Documents folder but overlook everything required to make the data useful.

Depending on the computer, also check:

• Desktop
• Downloads containing irreplaceable files
• Pictures and Videos
• Email archives
• Browser favourites
• Password-manager recovery details
• Accounting databases
• Application templates
• Digital certificates
• Encryption keys
• Custom fonts
• Macros
• Scanning profiles
• Website files
• Virtual machines
• Source code
• Configuration exports
• Locally stored contact databases
• Specialist project folders
• Files stored outside the normal user profile

Do not back up sensitive credentials in plain text. Protect recovery information using appropriate encryption and access controls.

Common Backup Mistakes

“My files are on another partition”

A second partition on the same physical drive is not a separate hardware backup.

When the drive fails, both partitions may be lost.

“I copied everything to a USB drive last year”

A manual copy is better than nothing, but it may be incomplete and badly out of date.

A real strategy runs automatically and reports failures.

“OneDrive says everything is synced”

That protects against some device failures, but it does not provide unlimited independent versions or permanent recovery from every deletion.

Keep another copy.

“We have RAID, so we have a backup”

RAID can help a system continue operating after certain disk failures.

It does not normally protect against:

• Accidental deletion
• Ransomware
• Data corruption
• Theft
• Fire
• Administrator mistakes
• Failure of the complete device

RAID supports availability. Backup supports recovery.

“The backup drive is always connected”

An always-connected drive is convenient but may be reachable by ransomware or an attacker.

Include an offline or isolated copy.

“The backup job says successful”

Restore something.

A successful status is not a substitute for a tested recovery.

Which Windows Option Should You Use?

Use Windows Backup when:

• You use a personal Microsoft account.
• You want an easier move to another Windows PC.
• You want selected folders protected through OneDrive.
• You want Windows preferences and app pins remembered.
• You understand that it is not a complete disk image.

Use File History when:

• You want automatic local versions of personal files.
• You have an external drive or network location.
• You want to recover deleted or overwritten documents.
• You do not want every file stored only through cloud synchronisation.
• You understand that it does not restore the complete computer.

Use a system image when:

• You need a point-in-time image before major system work.
• You have specialist software that is difficult to rebuild.
• You understand the recovery process.
• You also maintain frequent file backups.

Use a proper managed backup platform when:

• The data is business-critical.
• Multiple computers, servers or cloud services are involved.
• Retention and compliance matter.
• You require alerts, reporting and central management.
• You need immutable or isolated backups.
• Recovery time must be predictable.
• Someone must be accountable for testing restores.

A Sensible Backup Checklist

1. Identify every location containing important data.
2. Turn on Windows Backup where it is appropriate.
3. Confirm the selected OneDrive folders have fully synchronised.
4. Check the available OneDrive storage.
5. Enable File History to an external drive where useful.
6. Add folders outside the default libraries when required.
7. Keep at least one backup disconnected or isolated.
8. Maintain an offsite copy.
9. Protect the backup platform with separate credentials and MFA.
10. Retain several generations rather than only the latest copy.
11. Back up application and system configuration as well as documents.
12. Store BitLocker and other recovery keys securely.
13. Monitor backup failures.
14. Test file restores regularly.
15. Test complete system or application recovery periodically.
16. Update the backup strategy whenever systems or data locations change.

Get Help Building a Real Backup Strategy

Windows Backup and File History are useful tools, but they solve different problems.

Windows Backup helps restore selected files, preferences and application links to another personal Windows computer. File History keeps previous versions of personal files on an external drive or network location.

A real backup strategy goes further. It protects several copies, separates them across different systems, keeps one copy offsite or offline and proves through regular testing that the data can be restored.

Hamilton Group can review your current backup arrangements, protect Windows devices, configure Microsoft 365 backups and design recovery plans for servers, OneDrive, SharePoint, Teams and business-critical applications.

Call 0330 043 0069, book a meeting with one of our experts or visit hgmssp.com to make sure your backups will work when you genuinely need them.