Microsoft launches Windows 365 for Agents to run autonomous AI securely in the cloud

Microsoft has announced Windows 365 for Agents, a new service designed to let autonomous AI agents operate securely inside Cloud PCs rather than on local machines or unmanaged servers.

In a statement, Microsoft said Windows 365 was first introduced in 2021 to stream a full Windows desktop to any device. Four years on, the company described it as its flagship software-as-a-service offering for delivering secure, enterprise-grade computing at global scale. Windows 365 for Agents builds on that foundation by adapting the platform for AI systems that can act independently, rather than for human workers alone.

For a lay reader, Windows 365 works by running a Windows computer in Microsoft’s cloud and streaming it over the internet. Employees can log in from almost any device, while IT teams keep control over security, updates and data. The new agent-focused version applies the same idea to AI programs, giving them a controlled environment in which to work.

Microsoft said the service uses a “hosted on behalf of” architecture. In practice, this means each Cloud PC runs as a single virtual machine in Microsoft’s cloud, managed centrally through existing enterprise tools. Identity and access are handled through Microsoft Entra ID, devices and policies are managed with Microsoft Intune, and connections are made using a reverse-connect approach that avoids exposing machines directly to the internet.

According to the company, these core capabilities provide consistent identity controls, unified management, automated provisioning of Cloud PCs and global connectivity, all of which carry over to the agent version of the service.

Windows 365 for Agents adds features specifically designed for AI systems. These include pools of Cloud PCs that agents can check in and out of as needed, a consumption-based billing model tied to usage, and programmatic interfaces that allow developers to control agents through tooling servers. Each agent is assigned its own Microsoft Entra Agent ID, authenticated using cryptographic credentials rather than shared usernames and passwords.

The platform also supports “human in the loop” workflows, allowing people to step in when needed, alongside so-called computer-using agents. These agents can visually interpret what appears on the screen, plan actions and carry out commands within their own isolated Cloud PC, much like a human user would, but without accessing a physical device.

Microsoft positioned the launch as part of its broader push into agentic AI, where software systems are designed to carry out multi-step tasks with limited supervision. By placing those agents inside managed Windows environments, the company is aiming to address enterprise concerns about security, compliance and governance.

Related reading

• vLLM traces long-running memory leak to low-level system calls in disaggregated AI setup
• Nvidia’s Jensen Huang casts AI as the backbone of a once-in-a-generation infrastructure boom
• Google rolls Demand Gen features into general release, expanding shoppable TV ads

The company pointed customers and developers to earlier Ignite announcements and documentation across its Windows IT Pro Blog, Copilot Studio previews, Microsoft Agent 365 and the Agent 365 software development kit, which together outline how agents can be built, deployed and managed.

The move reflects a shift in how large organisations are thinking about AI. Rather than running agents as abstract services, Windows 365 for Agents treats them more like digital employees, each with a controlled workspace, an identity and clear limits on what they can see and do. Whether that model becomes standard will depend on how quickly businesses adopt autonomous agents and how well the approach balances flexibility with control.

The Recap

• Microsoft announced Windows 365 for Agents for Cloud PC agent workloads.
• Windows 365 was introduced in 2021 and matured over four years.
• Microsoft pointed to Ignite announcements and Agent 365 developer resources.