Windows 365
Windows 365 is a SaaS service that creates a personal Windows virtual machine, a Cloud PC, for each licensed user, at a fixed price per user per month. It is managed in Microsoft Intune. Editions cover small businesses, enterprises, US government, shared or part-time use (Flex, formerly Frontline) and AI agents.1
Also known as Cloud PC, Windows 365 Business, Windows 365 Enterprise, Windows 365 Government, Windows 365 Flex (formerly Windows 365 Frontline), Windows 365 for Agents, Windows 365 Reserve, Windows 365 Link
- Intended for
- Endpoint and Intune administrators, IT leaders planning hybrid work or contractor access, Small and midsize businesses (Business edition), Teams building computer-using AI agents (Windows 365 for Agents)
- Runs on
- Microsoft cloud (SaaS) in many Azure regions, Windows 365 Government (GCC and GCC High regions), Windows 365 Link device for desk-based users in select markets
At a glance
- What is it?
- Windows 365 is Microsoft's Cloud PC service. When an administrator assigns a Windows 365 license to a user in the right Microsoft Entra group, the service automatically provisions a Windows 11 or Windows 10 virtual machine for that user, hosted by Microsoft and reachable from Windows, Mac, iOS, Android, a browser or the Windows 365 Link device. Admins do not build or size host infrastructure. Editions: Business (up to 300 seats, simple management), Enterprise (unlimited seats, custom images, full Intune integration), Government, Flex (formerly Frontline, renamed in May 2026) and Windows 365 for Agents.12
- What does it do?
- Windows 365 provisions Cloud PCs from gallery or custom images through provisioning policies, joins them to Microsoft Entra ID or to Active Directory with hybrid join, enrolls them in Intune for apps, configuration, updates and security baselines, and connects them either to a Microsoft-hosted network or to your own Azure virtual network through an Azure network connection. Windows 365 Flex lets one license cover up to three non-concurrent Cloud PCs or one shared Cloud PC. Windows 365 for Agents supplies Intune-managed Cloud PCs that AI agents check out and check in to perform tasks, used by Copilot Studio computer use, Researcher computer use and Microsoft Agent 365.34
- Who needs it?
- Organizations that want to give employees, contractors, part-time or seasonal staff a full, managed Windows desktop without buying and shipping hardware or running VDI infrastructure; Intune-centric IT teams that want Cloud PCs managed like physical PCs; and teams building agents that need to operate Windows apps or web pages in a governed sandbox. Windows 365 Business targets companies of up to 300 seats.5
- What does it need?6
- Windows 365 licenses (Business, Enterprise, Flex or Government)
- For Enterprise users: Windows E3, Microsoft Intune and Microsoft Entra ID P1 licenses alongside Windows 365
- A working Intune and Microsoft Entra tenant, with Windows (MDM) corporate enrollment allowed
- Intune Administrator or Windows 365 Administrator role to provision Cloud PCs
- An Azure subscription only if Cloud PCs use your own network through an Azure network connection
- What it is not
- Windows 365 is not a multi-session VDI platform: in Business, Enterprise and Government each user has a dedicated 1:1 Cloud PC, and Windows 11 or 10 Enterprise multi-session is a feature of Azure Virtual Desktop. It is not a consumer product (not available to individuals). It does not give you control of the hosting VMs or consumption billing: price is fixed per user per month, except agent Cloud PCs, which are pay-as-you-go. Windows 365 Flex is not a new product: it is Windows 365 Frontline renamed, with unchanged licensing.17
Availability and licensing. Generally available. Human Cloud PCs are billed per user per month, agent Cloud PCs pay-as-you-go; no list prices are quoted on the product page (checked 26 October 2026). Windows 365 Frontline was renamed Windows 365 Flex in the week of 4 May 2026, with service plans and SKUs renamed from 3 September 2026 and no licensing change. Windows 365 for Agents: preview per Learn; generally available per the product page and Build 2026 (via Agent 365), preview in Copilot Studio.89
The problem it solves
Traditional virtual desktop infrastructure requires capacity planning, gateways, brokers, golden images and specialist skills, while physical PCs need procurement, shipping and on-site support. Both are slow for onboarding contractors, seasonal staff or people working from many locations.
Windows 365 turns a desktop into a per-user subscription: assigning a license creates a Cloud PC, Intune manages it like any other device, and costs are predictable per user. Windows 365 for Agents applies the same model to AI agents that need a Windows environment to complete tasks.
How it works
Windows 365 Enterprise uses three Microsoft services together:
- Microsoft Intune for provisioning policies and Cloud PC management (configuration, apps, updates).
- Microsoft Entra ID for identity and access.
- Azure Virtual Desktop technology for remote connectivity.
An admin creates a provisioning policy (image, region, join type and network) and assigns it to a Microsoft Entra group. When a licensed user in that group is detected, the service creates the Cloud PC and enrolls it in Intune. With Entra join on a Microsoft-hosted network, no Azure subscription is required; with your own network, an Azure network connection links Cloud PCs to your virtual network. Windows 365 for Agents uses provisioning policies (agents) and Cloud PC agent pools, and agents check Cloud PCs out and back in through platform APIs.46
Diagram as a list
Copilot & business apps
- Users on Windows, Mac, iOS, Android, browser or Windows 365 LinkConnect to their Cloud PCConnects to Remote connectivity (Azure Virtual Desktop technology)
Agents & automation
- Windows 365 for Agents poolsCloud PCs that agents check out for tasks (Copilot Studio, Agent 365, Researcher)Connects to Microsoft Intune provisioning policies and management
Security, identity & governance
- Microsoft Intune provisioning policies and managementCreates and manages Cloud PCs like other devicesConnects to Cloud PC (Windows 11 or 10 VM hosted by Microsoft)
- Microsoft Entra ID (and optional AD hybrid join)Identity, group-based assignment and access controlConnects to Microsoft Intune provisioning policies and management
Cloud & hybrid infrastructure
- Remote connectivity (Azure Virtual Desktop technology)Brokers and streams the sessionConnects to Cloud PC (Windows 11 or 10 VM hosted by Microsoft)
- Cloud PC (Windows 11 or 10 VM hosted by Microsoft)Dedicated or Flex desktop for the userConnects to Microsoft-hosted network or Azure network connection
- Microsoft-hosted network or Azure network connectionNetwork path to the internet or to your virtual network
Capabilities
Automatic Cloud PC provisioning3
Assigning a license to a user in an Entra group triggers creation of a Cloud PC from the provisioning policy.
Why it matters: Onboarding a remote worker does not require shipping hardware or building VMs.
Limits: Users must be in the right group and region capacity must be available.
Intune-native management3
Cloud PCs are enrolled in Intune and managed like physical devices, including apps, policies and security baselines.
Why it matters: One endpoint management process for physical and cloud devices.
Limits: Requires Intune licensing; Cloud PCs must be managed from the Intune admin center.
Flexible networking and join6
Microsoft-hosted network with Entra join, or an Azure network connection to your virtual network with Entra or hybrid join.
Why it matters: Simple setups need no Azure subscription; complex ones can reach on-premises resources.
Limits: Hybrid join and own-network setups require Azure and Active Directory configuration.
Windows 365 Flex5
One license provides up to three non-concurrent dedicated Cloud PCs or one shared Cloud PC, with one active session per license.
Why it matters: Lowers cost for shift, part-time and contingent workers.
Limits: Resize and cross-region disaster recovery are not yet supported for Flex; Shared mode is available only in Azure Global Cloud.
Windows 365 for Agents1910
Cloud PCs for AI agents, grouped into pools that agents check out and check in, managed through Intune and Entra ID.
Why it matters: Agents can operate Windows and web apps in governed sandboxes.
Limits: Status differs by source: Learn says preview, while Microsoft's product page and Build 2026 say generally available (Build: through Agent 365, preview in Copilot Studio).
Predictable billing1
Human Cloud PCs are billed per user per month; agent Cloud PCs are billed pay-as-you-go.
Why it matters: Desktop costs do not vary with compute and storage use.
Limits: Additional costs may apply for network usage.
Practical use cases
Contractors need a secure Windows desktop for a few months without company hardware.
- Approach
- Assign Windows 365 Enterprise licenses and provision Entra-joined Cloud PCs on the Microsoft-hosted network.
- Role of Windows 365
- Windows 365 creates and hosts the desktops; Intune manages them.
- Data, infrastructure and skills
- Licenses, Entra ID and Intune.
- Type of benefit
- Faster onboarding and security
- Caveats
- Licenses for external collaborators must be bought in your tenant.
- First step
- Provision Cloud PCs for a small contractor group and test access.
Shift workers share time on desktops but each needs their own settings.
- Approach
- Use Windows 365 Flex in Dedicated mode, where one license covers up to three non-concurrent Cloud PCs.
- Role of Windows 365
- Windows 365 Flex manages session concurrency per license.
- Data, infrastructure and skills
- Flex licenses and Entra groups per shift pattern.
- Type of benefit
- Lower licensing cost per user
- Caveats
- Only one active session per license; a limited concurrency buffer exists.
- First step
- Size licenses against peak concurrent sessions, not head count.
An automation agent must operate a legacy Windows app that has no API.
- Approach
- Give the agent a Cloud PC from a Windows 365 for Agents pool, for example through Copilot Studio computer use.
- Role of Windows 365
- Windows 365 supplies a governed Windows sandbox for the agent.
- Data, infrastructure and skills
- Agent platform support and Intune management.
- Type of benefit
- Automation of UI-only tasks
- Caveats
- Status of Windows 365 for Agents differs across Microsoft sources; Copilot Studio integration is in preview.
- First step
- Create a Cloud PC pool and run one supervised agent task.
Works with
Requires
- Microsoft IntuneWindows 365 Enterprise users need Intune licenses and Cloud PCs are managed in the Intune admin center.
- Microsoft EntraMicrosoft Entra ID provides identity; Enterprise users need Entra ID P1.
Optional integration
- Microsoft Copilot StudioCopilot Studio computer use can run on a Cloud PC pool from Windows 365 for Agents (preview).
- Microsoft Agent 365Windows 365 for Agents can be integrated into Agent 365 agents.
Complementary tools
- Windows 11 and Copilot+ PCsWindows 365 offers screen capture protection so Cloud PC content stays out of Recall snapshots.
- Visual Studio Code and Visual Studio 2026Visual Studio system requirements list minimum Windows 365 Cloud PC sizes.
Alternative approaches
- Azure Virtual DesktopBoth deliver Windows desktops from the cloud; Windows 365 Enterprise itself uses Azure Virtual Desktop technology for connectivity, while AVD offers multi-session and consumption billing.
Relationship labels follow Microsoft's documentation. "Alternative approaches" does not mean one is better: each profile says when it fits.
Compared with
Getting started
Pick the edition
Use Business for up to 300 seats with simple management, Enterprise for Intune-managed fleets and custom images, Flex for shift or part-time users.
Check: Each user group is mapped to an edition and license count.
Check prerequisites
Confirm Windows E3, Intune and Entra ID P1 licensing for Enterprise users and allow Windows MDM corporate enrollment in Intune.
Check: Licensing and enrollment restrictions meet the Windows 365 requirements page.
Create a provisioning policy
In the Intune admin center, choose Entra join on a Microsoft-hosted network for the simplest start, pick a gallery image and region, and assign the policy to a pilot group.
Check: Pilot users' Cloud PCs show as provisioned in Intune.
Connect and manage
Have pilot users connect from windows365.microsoft.com or Windows App, and apply your standard Intune policies and apps.
Check: Users sign in and the Cloud PCs report compliant in Intune.
Official resources
Deciding whether you need it?
Three free tools apply Microsoft's own published guidance to your situation, and say when Windows 365 or any new technology is not needed.
Sources
Each statement above links to the source it comes from. Labels say who reported it.
- What is Windows 365? (opens in a new tab)
- What's new in Windows 365 Enterprise (opens in a new tab)
- What is Windows 365 Enterprise? (opens in a new tab)
- What is Windows 365 for Agents? (opens in a new tab)
- What is Windows 365 Flex? (opens in a new tab)
- Windows 365 requirements (opens in a new tab)
- What is Azure Virtual Desktop? (opens in a new tab)
- August 2026 announcements (Partner Center) (opens in a new tab)
- Windows 365 product page (opens in a new tab)
- Microsoft Build 2026 live blog (opens in a new tab)
Thank you. Your correction was sent.
The editors check it against the sources. If you left an email address, they may reply about it.