Give AI agents the same managed, compliant environment your employees already use. Effective June 1, 2026, Microsoft makes Windows 365 for Agents generally available, providing a purpose-built Cloud PC solution for running AI agents securely at enterprise scale.
Summary
- Windows 365 for Agents is now generally available, following public preview starting May 2026
- Provides a dedicated, Microsoft Intune-managed Cloud PC for each AI agent workload
- Works alongside Microsoft Agent 365 – the control plane for agent identity, permissions, and governance
- Extends the same identity, security, and compliance model used for employees directly to AI agents
- New: Conditional Access for agent users via Microsoft Entra – non-compliant agent Cloud PCs are blocked automatically
- Requires an Agent 365 license, Intune license, and an active Azure subscription for billing
What is Changing?
Windows 365 for Agents was introduced in public preview in May 2026, initially limited to the United States. Effective the week of June 1, 2026, Microsoft makes the service generally available, opening it to organizations beyond the preview program.
Alongside general availability, Microsoft introduces Conditional Access for agent users. Windows 365 now integrates with Microsoft Entra Conditional Access, enabling administrators to enforce device compliance before agents are allowed access. Agents connecting from non-compliant Cloud PCs are automatically blocked from accessing resources or executing tasks. This ensures agent operations occur only in verified, policy-compliant environments.
What is Windows 365 for Agents?
Windows 365 for Agents is a purpose-built Cloud PC service that provides AI agents with a dedicated, fully managed Windows environment for executing workloads. It extends the same infrastructure and management model as Windows 365 Enterprise – the Cloud PC service already used for human employees – to AI agent workloads.
The service works alongside Microsoft Agent 365, which serves as the control plane for AI agents. Agent 365 is where organizations define agent behavior, manage permissions, and maintain visibility into agent activity across the enterprise. Together, they give IT teams a complete model: governing what agents can do and where that work runs.
Licensing requirements at a glance:
Customer Benefits at a Glance
- No custom infrastructure needed – agent workloads run in a fully IT-managed environment
- Audit trails and policy enforcement for every agent action, matching employee-level accountability
- First- and third-party agent support – compatible with agents from Microsoft and other vendors
- Human-in-the-loop workflows supported – agents can request approval for sensitive actions
- Global scalability with geo-level data residency options for compliance requirements
- Consistent governance – the same IT controls used for employees now apply to AI agents
Key Capabilities
- Dedicated Intune-managed Cloud PC per agent workload with full lifecycle management
- Microsoft Entra Conditional Access enforcement – blocks non-compliant agent devices automatically
- Agent 365 integration as control plane for behavior definition, permissions, and visibility
- Cloud PC pools configurable for different agent workload types and scale requirements
- Azure-based billing via existing Azure subscription – no separate billing infrastructure required
- Support for UI-based and legacy applications that do not expose application programming interfaces (APIs)
Why Windows 365 for Agents is Relevant Now
AI agents are rapidly expanding beyond simple question-answering into executing real business workflows. Many enterprise applications – from legacy line-of-business systems to browser-based tools – do not have APIs. Agents that interact with these applications must do so through user interfaces, just like human users. Running such agents on unmanaged or ad hoc infrastructure creates significant gaps in identity governance, auditability, and policy enforcement.
Windows 365 for Agents addresses this directly. It provides a trusted, IT-managed execution layer so organizations can move AI agent workloads from experimental pilots to production-ready deployments – without building custom infrastructure or compromising on security and compliance.
What Organizations Should Do Now
- Identify any current AI agent workloads running on unmanaged or ad hoc infrastructure
- Review Agent 365 and Microsoft Intune license eligibility within your current Microsoft agreement
- Validate your Azure subscription is active and set up for Windows 365 for Agents billing
- Create Cloud PC pools in Agent 365 aligned to specific agent workload requirements
- Define agent blueprints for scenarios that require UI-based or legacy application interaction
- Enable Conditional Access policies for agent users to enforce device compliance from day one
Ready to Extend Managed Infrastructure to Your AI Agents?
Assess your Microsoft licensing position to support Windows 365 for Agents, Agent 365, and Intune. Our experts help organizations align licensing to their AI strategy and agent deployment plans. Contact us to review your setup today.
Sources
For the announcement of Microsoft Windows 365 for Agents general availability, please visit: https://learn.microsoft.com/en-us/windows-365/agents/whats-new.
Additional background: https://techcommunity.microsoft.com/blog/windows-itpro-blog/windows-365-for-agents-now-in-public-preview-run-ai-agents-securely-at-scale/4513479.
For useful software licensing information on Microsoft products, please visit: https://www.schneider.im/software/microsoft/.