Normale weergave
-
Windows Blog
- Introducing the next Surface Pro and Surface Laptop, built for performance and flexibility
Windows platform security for AI agents
Making Windows the trustworthy OS for agents
AI agents are no longer just answering questions, they are taking actions across systems with increasing autonomy. As they become persistent participants in how software runs, they introduce new risk to control and trust, challenging the security assumptions that have defined computing for decades. Developers are building agents that read files, invoke services, modify environments and chain operations together at increasing speed. That capability is powerful, but it raises a critical question: how do you ensure these systems remain trustworthy when they operate autonomously, at scale, on real data? This shift changes what developers, IT and security teams need from the platform. Security for agents must be built into the foundation by design so they can be developed, deployed and governed with confidence. When that foundation is in place, organizations can scale agent adoption while maintaining control and trust. Containment, identity and manageability are built as foundational primitives in Windows, extending security beyond the app and model into the OS. We’ve previously shared the principles guiding how we secure agent workflows on Windows. Then in May we announced how Microsoft Agent 365 was expanding its capabilities, including the ability to discover and manage local agents on Windows, starting with OpenClaw agents and expanding soon to other widely used agents like GitHub Copilot CLI and Claude Code. We also announced that "beyond monitoring, organizations will be able to apply policy-based controls to set guardrails for what agents are allowed to do." At Build 2026 we are sharing an update on how Agent 365 and Windows are working together to provide those capabilities with the introduction of Microsoft Execution Containers (MXC) SDK. For developers, Windows will provide the building blocks needed to implement agents that are more secure on both consumer and enterprise systems. For IT teams looking to balance deploying agents at scale while managing risks, Agent 365 and Windows provide the observability, governance and security capabilities that are critically needed.Policy-based controls
Containment bounds what agents can access and do, so non-deterministic behavior doesn’t translate into uncontrollable risk. Unlike traditional applications, agent behavior is dynamic and often generated at runtime. The agent often uses models to generate complex code for each prompt that can read, act and chain multiple operations. Containment ensures agents can do useful work without being granted the full authority of the user’s session.The Microsoft Execution Containers (MXC) SDK
To contain agent impact without limiting productivity gains, we’re introducing an early preview of the Microsoft Execution Containers (MXC) SDK, a cross-platform, policy-driven execution layer for agents on Windows and WSL. Developers define what to constrain in their apps and agents, and Windows enforces those constraints consistently at runtime through MXC. MXC provides an abstraction layer across isolation primitives, so developers do not have to manage low-level isolation details.The composable sandbox and containment spectrum
The composable sandbox is how Windows applies isolation and containment in practice, with MXC as the control surface for developers. The same policy model and SDK can map to different isolation constructs depending on the workload and containment requirements. A coding agent and an enterprise data-processing agent may not need the same guardrails, but they do need one coherent trust story. The composable sandbox delivers the flexibility and control that developers and IT need. Agent 365's policy-based controls with Microsoft Entra and Intune will be used to apply those MXC constraints to a specific agent. Windows supports a range of containment options so that guardrails can match the nature and risk of the workload. Additional functionality and security enhancements will be added to subsequent releases. The following will be released in early preview shortly after Build to meet the needs of the agent ecosystem:Process isolation
Windows is simplifying how developers enable process isolation for agents. Process isolation provides fast, lightweight containment within the user’s environment for scenarios like running model-generated code within a dedicated process boundary that restricts access to files and network domains outside defined policy. It is ideal for use cases like coding agents where the developer inner loop must stay responsive. GitHub Copilot CLI has adopted MXC process isolation to constrain what dynamically generated and executed code can do. We are excited to share the results of this deep partnership between Windows and GitHub with our shared customers.Session isolation
Workloads that span across large numbers of long running processes or ones that need their own resources like a desktop to run automation may find process isolation overly limiting. Sessions in Windows separate the agent’s execution from the human user’s environment, such as the interactive desktop, clipboard, UI, input devices and active sessions. This mitigates UI spoofing, input injection and cross-session data leakage, and is suited for sustained workflows that run alongside the user’s own work. Sessions in Windows run with distinct user accounts, which enables isolation. Windows assigns a local ID or a cloud provisioned identity backed by Entra and attributes all activity from the container to that identity, so you can clearly differentiate human from agent. MXC session isolation paired with unique local ID on Windows enables precise control, least-privilege access and full auditability. Access policies can be applied to Windows session isolation so agents run independently with controlled local access and full lifecycle governance managed through Microsoft Entra and Intune in the cloud. Teams can use Intune policies to require MXC isolation with guardrails such as filesystem rules. Our initial release will support non-interactive sessions with additional capabilities targeted for future releases. As agents evolve, we are continuing to expand MXC containment capabilities and invite developers and the broader ecosystem to share feedback, including through engagement with the project on GitHub. Some other MXC containment capabilities currently on our roadmap are:Micro-VM
Research at the cutting edge of agent security shows how LLMs are developing capabilities around escaping sandboxes. Is there a way to provide the desirable properties of process isolation like low overhead with a stronger isolation boundary? Micro-VMs that use hardware-backed isolation via the hypervisor with lightweight images can be well suited for higher-risk workloads. The micro-VM construct raises the bar against sandbox escapes by using a hypervisor while facilitating higher density than is possible with full VMs. They are desirable for agents processing sensitive data or running untrusted external code.Linux containers
Will bring the containment model to Linux-first agent toolchains via WSL. This enables compatibility with Linux ML frameworks and package ecosystems with OS-enforced boundaries.MXC integration for cloud VM Windows 365 for Agents
Windows 365 for Agents, now generally available, extends containment beyond the local device. The agent runs in an Intune-managed Cloud PC, fully separate from the user’s machine. If compromised, impact is contained to a disposable cloud instance. Suited for enterprise-managed agent fleets with centrally provisioned policy and compliance. To learn more, check out our Windows 365 blog. With the future addition of MXC integration, Windows 365 for Agents will scale from lightweight local isolation to stronger hardware-backed boundaries - through a single SDK and policy model. With the combination of these new Windows capabilities and Agent 365, Microsoft is continuing to expand its full stack offering to help enterprises to observe, govern, and secure their agents.Innovating with partners in the ecosystem
We are partnering with leading innovators in the industry like Hermes, Manus, NVIDIA, OpenAI and OpenClaw, to ensure the containment we are building supports real developer needs. OpenClaw now runs the node and gateway securely on Windows leveraging MXC. You can use the new Windows companion app to easily set up your own claws or connect to existing ones. NVIDIA brings OpenShell to Windows, built on MXC. Integrating MXC via OpenShell provides developers with an easy-to-deploy package for autonomous, always-on agents safely. Hermes Agent will be integrating OpenShell and MXC in their new Windows application. "Continuously running local agents, like Hermes Agent, require intentional isolation. Developers need control over what an agent can access and trust that those controls will hold,” said Dillon Rolnick, CEO of Nous Research. “Microsoft Execution Containers (MXC), integrated with OpenShell, provides a policy-driven foundation for private, on-device agents on Windows.” "Working with Microsoft on the Microsoft Execution Containers (MXC) allows us to explore new patterns for AI agents to safely and efficiently generate and execute code. By combining Codex's capabilities with MXC's execution environment, we aim to help developers move from intent to reliable execution faster, while maintaining the security and control enterprises need," said David Wiesen, Member of Technical Staff, OpenAI “Manus is built to help users move from intent to completed work across tools, files, code and workflows,” said Tao Zhang. Chief Product Officer. “With Microsoft Execution Containers (MXC), Windows gives developers a policy-driven way to define what an agent can access and enforce those boundaries at runtime, so more autonomous agents can operate safely in enterprise environments.”Built on a secure foundation by design
This agentic security model runs on a Windows platform designed to reduce risk by default. Decades of investment in Windows provide the foundation for everything running on top of it including agentic security capabilities. Under the Secure Future Initiative, continuously strengthening this foundation remains a company-wide priority. Windows reduces the attack surface and raises the security baseline by default – so agents inherit that protection without additional work. It shows up in capabilities like passwordless sign-in with passkeys, Hotpatch updates without restarts, production drivers written in Rust to reduce memory-safety vulnerabilities and post-quantum cryptography in Insider builds. Secure Boot enforces a hardware root of trust on every startup. Defender provides real‑time protection against prompt injection and other emerging agent threats. It uses advanced scanning engines and continuously updated intelligence to detect and respond to attacks. These protections are available to all Windows customers - including consumers using Windows Defender as their primary antivirus. Enterprise manageability has been a longstanding platform capability that IT and security teams depend on Windows to provide. Agent 365 now provides native integration of observability, governance and security capabilities for agents running on Windows OS environments, like MXC and Windows 365 for agents, so agents running on Windows can start secure and stay secure. Windows will continue to raise the bar for platform security with capabilities like our recently announced Baseline Security Mode. Together, these investments help provide the secure foundation on which trustworthy agentic computing is built.Start building secure agents today
The value of an agent is not just what it can do, but whether it can be trusted in production. Windows enables agents that are secure, governable and ready for real-world deployment. Many of these capabilities are available today in Windows Insider builds, with more coming through our developer preview program. Windows continues to evolve so developers and organizations can move fast on AI while maintaining trust and security. We are excited to see what you build. To get started:- Explore the Microsoft Execution Containers SDK.
- Try process and session isolation in Windows Insider builds when available shortly after Build.
Build 2026: Furthering Windows as the trusted platform for development
What’s new for Windows platform at Build?
- Developer-optimized Windows 11 experience to build and ship faster.
- Coreutils for Windows - a set of Linux-like command line utilities that run natively on Windows, now generally available.
- WSL containers - a built-in way to create, run and interact with Linux containers using familiar CLI & API, coming soon to public preview.
- Windows Development Skills - gives agents structured knowledge to build great native Windows apps end-to-end using WinUI3 skills and WinApp CLI, now generally available.
- Intelligent Terminal – intentionally brings context-aware intelligence to your favorite agents directly into a terminal based experience to help debug errors, run multi-step tasks so you can stay in your flow, available in experimental preview.
- Windows Developer Configurations - powered by WinGet, sets up a distraction-free dev environment with VS Code, GitHub Copilot, WSL, PowerShell 7 and developer-optimized settings with one command on any Windows 11 device, now generally available.
- Windows 365 with Developer configuration – Windows 365 comes pre-configured with the same Windows developer configuration, available in public preview.
- Secure Windows platform to build and run agents with OS-enforced agent identity, containment and enterprise-grade manageability.
- Introducing Microsoft Execution Containers (MXC) SDK– A policy-driven execution layer that lets developers declare what an agent can access (e.g., files, network) with containment boundaries enforced at runtime. MXC offers a spectrum of isolation semantics that are dynamically composable based on intent and risk, available in early preview.
- Agent 365 native integration with MXC enables agents running on Windows to start secure and stay secure. Integration will deliver Defender, Entra, Intune and Purview protections so security and IT teams can constrain and secure local agents to prevent enterprise risk, available in preview in July.
- OpenClaw runs natively on Windows leveraging MXC - The Windows node and gateway run contained, so your system stays secure. You can easily install and use OpenClaw in Windows with its own companion app and set up your own claws or connect to existing ones, available in open-source. We are invested in continuing to make OpenClaw run securely on Windows.
- NVIDIA is bringing OpenShell to Windows built on MXC - Integrating MXC via OpenShell provides developers with an easy-to-deploy package for autonomous, always-on agents safely.
- Windows 365 for Agents - provides computer-using agents with secure, managed Cloud PCs to execute enterprise workflows, now generally available.
- Unmetered intelligence on Windows powered by on-device AI
- Introducing new on-device SLMs - Aion 1.0 Instruct, a smaller, faster and smarter on-device SLM, and Aion 1.0 Plan, a reasoning and tool-calling model that enables fully local agentic capabilities, available in the coming months.
- Expanding Windows AI APIs to more Windows 11 PCs across CPU and GPU Speech-to-text recognition API available on NPUs and CPUs. On-device SLM expands to capable dGPUs enabling text-intelligence capabilities locally and Video Super Resolution available on CPUs so developers can deliver richer experiences without a cloud round trip.
- Introducing Surface RTX Spark Dev Box – purpose-built for developers powered by NVIDIA RTX Spark silicon, delivering up to 1 petaflop of AI compute paired with 128 GB of unified memory shared across the CPU and GPU. Comes with all of the above developer optimized Windows 11 experience so developers can build, test and run AI and agent workloads locally without setup friction or unpredictable cloud costs.
- Introducing DGX Station for Windows — the world’s most powerful deskside AI supercomputer for developing and running agents on Windows — powered by the NVIDIA GB300 Grace Blackwell Ultra Superchip. It is purpose-built to develop and run up to 1 trillion-parameter frontier AI models locally, as well as connect always-on, frontier AI agents to enterprise applications and workflows, coming in Q4 this year.
- New capabilities in Microsoft Store – We are committed to making Microsoft Store a trusted platform for app distribution, delivering free and faster company onboarding with Entra ID support, accelerated app certification times, and new near real-time analytics and subscription insights for developers.
Introducing Project Solara
We're introducing Project Solara, a new platform built from the ground up to power agent-driven experiences, including two new concept devices that reimagine how this comes to life. With agents becoming a both a new unit of programming and an emerging new unit of human-to-machine interaction, the mission of Project Solara is to pioneer agent-first experiences that are shaped around you: your agents, your tasks, your environment, under your control.Developer-optimized Windows 11 experience to build and ship faster
We have optimized the Windows 11 experience for developers, bringing frequently used command line utilities, a familiar comfort shell, faster setup experience, a built-in way to create and interact with Linux containers on Windows and a new experimental Intelligent Terminal.Announcing general availability of Coreutils for Windows
Developers constantly move between platforms, but familiar commands don't work consistently, forcing workarounds, lost speed and context switching. To address this, we've built Coreutils for Windows from the uutils open-source project, a cross-platform reimplementation of GNU Coreutils in Rust. These are Linux-like command-line utilities that run natively on Windows. Whether you're moving between Linux, macOS, WSL, containers or cloud environments, the commands and workflows you've built over years just work in your Windows environment. Explore and get started with Coreutils for Windows. https://www.youtube.com/watch?v=_bcFOTI35gIAnnouncing WSL containers, coming soon to public preview
Containers and Linux are core to modern development workflows. Windows Subsystem for Linux (WSL) has become foundational for running Linux workloads on Windows. Last year at Build 2025, we open-sourced WSL, and community contributions have grown to over 200 PRs per month. We're building on this momentum by integrating WSL more deeply into Windows with WSL containers. Modern container workflows on Windows often depend on third‑party tooling, adding setup overhead, licensing cost and limited enterprise control. IT teams also lack consistent visibility into what’s running and how containers interact with the underlying host. WSL containers provide a built-in way to create, run and interact with Linux containers on Windows. Whether you are working on local development, AI/ML workflows or containerized testing, Linux containers run out of the box. To enable you to build WSL containers, we are offering WSL containers CLI & API.- WSL containers CLI: Use the new exe binary to directly build, run and deploy Linux containers on Windows, out of the box.
- WSL containers API: Access functions to run Linux containers programmatically in your native Windows apps - unlocking scenarios like running local AI workloads, testing pipelines, and Linux based processing.
Announcing general availability of Windows Developer Configurations
We understand that getting to a code-ready state quickly matters, regardless of your development workflow. Windows Developer Configurations enables you to go from a fresh machine to a ready-to-code environment in minutes. It includes:- dev-config.winget - a WinGet configuration file, to get an optimized, distraction free development environment with the right versions of essential developer tools installed – WSL, PowerShell 7, Git, GitHub CLI, Visual Studio Code, Python and more. It also applies developer-optimized settings — like Git version control in File Explorer, file extensions visible and hidden files shown. It’s fully customizable, so you can adapt it to your needs and add your favorite third‑party tools.
- Workload-specific scripts for container, cloud and infrastructure development - make it easy to install the exact tools, libraries and dependencies you need for your specific use case.
- WSL comfort setup scripts - enable you to bring your preferred tools and workflows to Windows - like homebrew, zsh, starship, and more.
Announcing Intelligent Terminal, available as experimental version
Developers spend a significant part of their workflow in the terminal, but today that experience lacks integration with agentic tools and context they rely on. They must leave the terminal to look up fixes, and copy suggestions from multiple sources, which leads to increased context switching. To address this, Intelligent Terminal provides context to your favorite agents via ACP (Agent Communication Protocol) so you can stay in the terminal and query, debug or complete any task on hand. It is based on the existing Windows Terminal experience, so you get everything it offers (tabs, profiles, themes, settings, shells) plus native agent CLI integration in the agent pane. If no agent is installed, GitHub Copilot is available for you to get started. In a typical scenario, when a command fails, Intelligent Terminal automatically surfaces the context and suggests fixes you can run immediately in the dedicated agent pane. Instead of debugging step-by-step across multiple tools, you can resolve issues, iterate and move forward quickly while staying in your flow. To learn more, check out the Intelligent Terminal blog. https://www.youtube.com/watch?v=o1DmM6_z4zkAnnouncing general availability of Windows Development Skills
We are introducing Windows Development Skills to enable agents to directly leverage structured knowledge to execute across the full lifecycle of building a native Windows app using WinUI3 skills and winapp CLI. By powering agents with Windows specific application development knowledge, these skills help achieve token efficiency. To add Windows Development Skills to your favorite agents visit https://aka.ms/winui-skills. https://www.youtube.com/watch?v=7OK30hI5h-IAnnouncing Windows 365 with Developer configuration, available in public preview
Alongside local development, enterprises often increasingly need a cloud-based option to standardize development environments across teams, scale on demand and to be ready to code from any device - without managing local infrastructure or setup. To address these needs, we are bringing new developer capabilities to Windows 365, a cloud-based service that securely streams a full Windows desktop experience to any device. Windows 365 with Developer configuration offers ready‑to‑code environments in the cloud. This image provides a consistent, preconfigured Windows 11 development experience from first sign‑in, with commonly used tools such as Visual Studio Code, Git, GitHub CLI and WSL already set up. The environment can also be extended with additional SDKs, CLIs, packages and build tools based on project requirements, while remaining aligned with organization policies and controls. With flexible performance configurations and seamless access from any device, Windows 365 helps streamline development workflows, whether working on-site or remotely, across Windows and Linux (via WSL) environments, running AI models or moving between local and cloud setups. To learn more, check out the Windows 365 blog. All these improvements share a common goal: giving developers an environment they can rely on, one that stays out of the way and keeps them in the flow. And as AI becomes integral to how software is built and shipped, the platform must evolve too. That's why we're taking the next step: making Windows the best place to build and run agents.Windows is the secure platform to build and run agents with OS-enforced containment, agent identity and enterprise-grade manageability
As agents become more capable and autonomous, they're delivering material productivity gains. But they're also introducing new risk, and the issue isn't just the agent. It's the entire system the agent operates across. Every interaction — between agents and humans, tools, apps, models and even other agents — exposes new attack surface and introduces different failure modes. This is a multi-layer systems problem. That's why we've built containment, identity and manageability as foundational primitives in the operating system — making Windows the most trusted platform to build and run agents.Microsoft Execution Containers (MXC) — now available in early preview
It's critical to contain agent impact without limiting productivity gains. That’s why we are introducing Microsoft Execution Containers (MXC), a cross-platform, policy-driven execution layer for agents across Windows and WSL. Developers declare what an agent can access, like files and networking related policies configured in Intune, and MXC enforces those boundaries at runtime. Windows delivers a composable sandbox spectrum through MXC — a single SDK and policy model that maps to the right isolation construct for any agent workload.- Fast process isolation (adopted by GitHub Copilot CLI) and session isolation separates the agent's execution from the user's desktop, clipboard, UI and input devices, and critically, binds the agent to a strong user identity — mitigating UI spoofing, input injection and cross-session data leakage. Process isolation and session isolation will be available to Windows Insiders shortly after Build.
- Windows 365 for Agents, now generally available, extends containment beyond the local device and agents run in an Intune-managed Cloud PC, fully separate from the user's machine.
- Micro-VMs, Linux containers and MXC integration for Windows 365 for Agents are currently on our roadmap as additional MXC containment capabilities.
- Agent 365 layers Entra and Intune policy on top so IT can govern containment centrally while developers choose the guardrail weight their workload demands.
OS-enforced Agent Identity and enterprise manageability on Windows
Beyond containment, every agent activity must be attributable and governed. Windows assigns agents a local ID or a cloud provisioned identity backed by Entra and attributes all activity from the container to that identity, so you can clearly differentiate human from agent. Native Windows integration with Agent 365 provides a common foundation for observability, security and governance, including native Intune integration to set policies that gate the agent runtime execution and control how agents run. Defender, Entra, Intune and Purview will provide runtime protections for evolving threats across access, sensitive data, malicious prompts and risky behavior so security and IT teams can prevent enterprise risk. Get started at: Microsoft Execution Containers. Learn more at: Windows Platform Security for AI Agents and aka.ms/BUILD_SecurityBlog.Innovating with partners in the ecosystem
We are partnering with leading innovators in the industry like Hermes, Manus, NVIDIA, OpenAI and OpenClaw, to ensure the containment we are building supports real developer needs. OpenClaw now runs the node and gateway securely on Windows leveraging MXC. You can use the new Windows companion app to easily set up your own claws or connect to existing ones. NVIDIA brings OpenShell to Windows, built on MXC. Integrating MXC via OpenShell provides developers with an easy-to-deploy package for autonomous, always-on agents safely. Hermes Agent will be integrating OpenShell and MXC in their new Windows application. "Continuously-running local agents, like Hermes Agent, require intentional isolation. Developers need control over what an agent can access and trust that those controls will hold,” said Dillon Rolnick, CEO of Nous Research. “Microsoft Execution Containers (MXC), integrated with OpenShell, provides a policy-driven foundation for private, on-device agents on Windows.” "Working with Microsoft on the Microsoft Execution Containers (MXC) allows us to explore new patterns for AI agents to safely and efficiently generate and execute code. By combining Codex's capabilities with MXC's execution environment, we aim to help developers move from intent to reliable execution faster, while maintaining the security and control enterprises need." said David Wiesen, Member of Technical Staff, OpenAI. “Manus is built to help users move from intent to completed work across tools, files, code and workflows,” said Tao Zhang, Chief Product Officer. “With Microsoft Execution Containers (MXC), Windows gives developers a policy-driven way to define what an agent can access and enforce those boundaries at runtime, so more autonomous agents can operate safely in enterprise environments.” Get started here: OpenClaw Windows Node.Announcing Windows 365 for Agents generally available within Agent 365
Windows 365 for Agents provides Cloud PCs that enable AI agents to execute multi-step workflows across software, including opening apps, navigating interfaces, entering inputs and processing data. Today, we are making Windows 365 for Agents generally available within Agent 365, enabling Agent builders to build computer-using agents for a variety of enterprise use cases. To learn more, check out Windows 365 for Agents documentation | Microsoft Learn.Unmetered intelligence delivered on Windows
We're entering a new era of software development. As AI models grow more powerful, agentic workflows demand continuous compute, escalating cloud costs. By shifting some of that intelligence to the edge, we are transforming the developer experience: frontier models tackle frontier problems, while everything else runs locally at scale. A new generation of on-device small language models (SLMs) on Windows is making this easier. Windows ML is the platform that unlocks unmetered intelligence on Windows, enabling developers to build, optimize and deploy AI at scale, across all silicon. Today we are bringing new capabilities to accelerate your local AI development.A new generation of on-device models - Aion 1.0 Instruct and Aion 1.0 Plan in preview
We are introducing a new generation of models purpose-built for local execution, each designed for a specific tier of device capability. Together, they represent a clear progression: from efficiency at scale to local agentic reasoning, all running without cloud dependency or per-token cost.- Aion 1.0 Instruct: efficiency at scale. Aion 1.0 Instruct is our next-generation small language model, smaller, faster and more efficient than our current Windows OS SLM. Designed from the ground up for on-device workloads, Aion 1.0 Instruct powers everyday text intelligence (summarization, rewrite, intents, accessibility) and extends beyond Windows APIs with integration into the Edge browser and availability as open weights. Developers can start experimenting with Aion 1.0 Instruct in preview today in Edge Insider channels and as an open source model in July on Hugging Face.
- Aion 1.0 Plan: local agentic reasoning. Aion 1.0 Plan is a 14-billion parameter reasoning and tool-calling model with 32K context length that ships in-box as part of Windows on capable devices. It enables applications to reason over user intent, invoke tools, manage files and orchestrate sub-agents, bringing fully agentic workflows onto the device.
Announcing new Speech Recognition API
Last year at Build, we introduced Windows AI APIs powered by local on-device models. Today we are adding Speech Recognition API to this list. Speech Recognition API enables real-time or batch, on-device speech-to-text from live audio. Developers can enable their apps to produce transcripts from recordings or embed captions anywhere audio plays, using microphone, streamed or audio file inputs, with hardware-accelerated execution where available. By running locally, transcriptions can still be generated without network connectivity, saving on cloud costs. This unlocks new possibilities for modern text entry, audio-video applications, dictation-enabled workflows and accessibility tools that need reliable, low-latency transcription regardless of connectivity. The Speech Recognition API will enter public preview. The API will initially be limited to English-language speech recognition and will expand as it gradually roll outs across global markets. Learn more about the new Speech Recognition API when it becomes available this week at: aka.ms/speech-recognition-api.Announcing Expansion of Windows AI APIs across GPUs and CPUs, now available
Windows AI APIs offer the fastest and easiest path for developers to integrate local AI into their apps using ready-to-use APIs powered by on-device models specializing in specific tasks. We are thrilled to share that Windows AI APIs are expanding beyond NPUs to CPUs and GPUs, bringing local AI experiences to a much broader set of Windows 11 devices. In addition to existing NPU support, our existing Windows inbox SLM is available on capable GPUs and Video super resolution and Speech Recognition on CPUs, all in public preview. https://www.youtube.com/watch?v=1mSUNPLDZNE https://www.youtube.com/watch?v=zWsBdlZsy_w This expansion gives developers a broader audience for their AI-powered applications with OS-optimized performance. Learn more about Windows API support and minimum hardware requirements here: aka.ms/WinAI/APIs The Windows inbox models that power the AI APIs are not automatically downloaded to every device. They are only acquired when an application on the device requests them, keeping storage and bandwidth impact minimal for users who do not need them. Many app developers are leveraging Microsoft Foundry on Windows to enable local AI in their applications.Windows on next-generation hardware purpose-built for developers
We are bringing purpose-built developer devices which are the best expression of the full suite of advancements and new capabilities we are introducing today from developer optimized experience, secure platform to build and run agents to our local AI platform. With the increase in capability of agentic and coding models that run locally on this class of device, we can take the next step for hybrid compute – bringing the best of cloud and client together. In GitHub Copilot CLI we will enable developers to configure selective task delegation to subagents powered by a local model. Using /fleet, the primary agent running in the cloud builds a plan, assesses the complexity of each task, and routes appropriate ones locally based on the models’ size and capability. This approach harnesses available local compute to reduce cost without compromising on quality. With Windows 11 PCs powered by capable silicon from AMD, Intel, NVIDIA and Qualcomm including workstation-class machines powered by AMD Ryzen™ AI MAX+ 395, new NVIDIA RTX Spark, and data-center-class systems like NVIDIA DGX Station for Windows, developers now have access to unmetered, tiered AI capabilities tailored to specific needs, from everyday development to frontier-class tasks.Announcing Surface RTX Spark Dev Box available later this year
Surface RTX Spark Dev Box delivers GPU-first AI performance with the new NVIDIA RTX Spark silicon, providing 1 petaflop of AI compute[i] and 128GB of unified memory shared dynamically across CPU and GPU in a single memory address space. This hardware foundation is designed for model optimization, fine-tuning and large inference workloads. By making these workloads practical to run locally, it reduces reliance on cloud only workflows, helping avoid recurring token costs and usage spikes while keeping iteration fast and predictable. Surface RTX Spark Dev Box ships with developer optimized Windows 11 experience - preconfigured with all your essential developer tools - Visual Studio Code, GitHub Copilot available inline in Windows Terminal, WSL, PowerShell 7 and Windows settings tuned for development - so you spend less time configuring your machine and more time building from the moment you sign in. To learn more, check out the Devices blog. Surface RTX Spark Dev Box will be available later this year in the U.S. exclusively on Microsoft.com. Learn more at microsoft.com/devbox [ii]. https://www.youtube.com/watch?v=vzD4OvMIECMIntroducing DGX Station for Windows, available later this year
For decades, we have partnered with NVIDIA to bring the most powerful computing experiences to the world. DGX Station for Windows is the next step in a multi‑year journey to bring the full power of Windows and unlock breakthrough AI performance on the Windows platform. Building on the NVIDIA DGX Station™ system design, DGX Station for Windows is the ultimate deskside AI supercomputer bringing NVIDIA GB300 Grace Blackwell-class AI infrastructure directly into the Windows ecosystem — providing the compute needed to build, run and connect powerful AI agents to the applications and infrastructure Windows users already harness. It can run frontier AI models up to 1 trillion parameters locally.Stronger Windows security, reducing risk by default
Windows is strengthening its security foundation to reduce risk by default. New capabilities strengthen this foundation across key layers by reducing legacy risk, enforcing code trust and advancing cryptography. This raises the security bar at the platform level, protecting earlier in the lifecycle, not just after code runs.- Prepare your applications for a post-quantum world on Windows. Windows continues to expand post-quantum cryptography (PQC) support across the platform, broadening algorithm coverage and integrating it more deeply into the platform. This includes PQ hybrid key exchange in the Windows TLS stack, support for composite PQC algorithms through Windows cryptography APIs (CNG) and certificate functions, and PQ certificate issuance via Active Directory Certificate Services (ADCS). Read more here.
- Move away from legacy authentication to stronger, more secure defaults, reducing exposure to known attack paths. IAKerb and LocalKDC (in WIP Server and Client) are configurable via new registry keys, helping reduce NTLM usage and enable stronger Kerberos-based authentication across more scenarios. Read more here.
- Ensure only trusted drivers run on your device by default. Driver signing now follows a higher security bar with an updated certification process. Windows is moving toward Windows Hardware Compatibility Program (WHCP) certified drivers as the default, with a staged transition from audit to enforcement and stronger trust requirements over time. Read more here.
- Protect devices from untrusted apps without disrupting users. Smart App Control for consumers and App Control for Business are expanding in coverage across millions of devices, with stronger reputation-based enforcement, new integration APIs and policy-driven control for enterprise environments.
Looking ahead
Build is always a moment to pause, reflect and look forward. As development continues to evolve, Windows will continue to provide developers with the flexibility to choose their tools, shape their workflows and decide how intelligence runs. Whether you’re building applications, deploying AI models or experimenting with agents, our goal is the same: to make Windows the best place to build - today and into the future. We’re excited to see what you create next. Join us throughout Build to learn more, explore the sessions and dive deeper into the updates shaping the Windows developer platform. [i] Source: NVIDIA. Based on 1 Theoretical FP4 TOPS using the sparsity feature. [ii] Microsoft Surface RTX Spark Dev Box and Surface Laptop Ultra are pre-release products. Products and features are subject to regulatory certification/approval; actual sale and delivery is contingent on compliance with applicable requirements.Introducing Surface Laptop Ultra: Made for world makers
Introducing new Surface devices built for business and AI acceleration
"At Flagstar, we're focused on equipping our teams with technology that's secure, flexible and ready for the next wave of AI. Surface brings together the hardware, security and Microsoft ecosystem in a way that just works, giving our teams the confidence to run AI-powered workflows on device while staying protected and productive wherever they are." — Jason Pope, Chief Technology Officer, Flagstar Bank
We have always believed that the hardware people use enables businesses and teams to achieve more. Surface was created to set the standard for what a premium Windows PC can be, and that standard has never been higher. Today, we are proud to announce the next generation of the Surface for Business portfolio, the new Surface Pro for Business and Surface Laptop for Business powered by Intel Core Ultra Series 3 processors are available today in select markets, delivering world-class performance and AI on the edge to accelerate productivity. Powered by Intel's next‑generation Core Ultra Series 3 architecture, the new Surface Laptop for Business and Surface Pro for Business deliver a meaningful leap in graphics performance, delivering up to 35% more graphics performance than MacBook Air with M5[1], and more than 90% faster performance than Laptop 5[2] on select configurations with Intel Core Ultra X7. From analyzing complex information to presenting to customers or creating content on the go, the Intel Core Ultra Series 3 GPU enables work to move in real time, delivering the sustained, fluid performance leaders expect from a premium business PC, without compromising mobility, battery life or security. Whether your teams are in the boardroom, at a customer site or working from anywhere, these AI PCs are built to perform at the speed of business. Later this year, we will extend the Surface for Business portfolio with models featuring the Snapdragon X2 processors, delivering up to 80% faster local AI inferencing than before[3] and uncompromising battery life[4].
The new Surface Laptop for Business 13-inch is the most portable Surface Laptop, available starting today in select markets in 16GB and 24GB configurations starting at $1,499 (MSRP), with an 8GB configuration coming later this year starting at $1,299.99 (MSRP). With on-device AI processing, Wi-Fi 7[5] and a removable Gen 4 SSD designed for enterprise serviceability, it brings the full Surface experience to the entry-premium tier without asking IT or employees to trade off performance and productivity for portability.
- Security and trust are fundamental and should be built into every aspect of a device.
- Innovative devices are the platform that enables organizations to move faster with hybrid AI to accelerate workflows, productivity and end-to-end management.
- Intentional, functional and human centered design is imperative for hardware that supports how businesses work, with PCs that are built with a focus on reliability, sustainability and repairability features designed to keep employees productive and in their flow.
For the first time ever on a Surface device, we are introducing an optional integrated privacy screen with anti-glare. Built directly into select configurations of the 13.8-inch display of our Surface Laptop for Business, this software driven visual privacy filter helps protect sensitive information from unintended viewers and can be centrally managed by IT or activated instantly by employees with a single keystroke. Once activated, the privacy screen provides immediate protection from prying eyes without the need of a third-party physical screen protector. Designed from the ground up as part of our security‑by‑design approach, this innovation is made possible only by the tight integration of Surface hardware and software.
Surface allows us to run AI where learning happens, on the device itself. The future of AI is not everything going to the cloud; it's AI at the edge." — Eric Sedore, AVP and Chief Technology Officer, Syracuse University
For organizations building and deploying enterprise AI applications, Surface is also the reference platform for Windows AI APIs and the Foundry platform. Surface is purpose-built for developers who need a trusted, consistent hardware baseline, helping to enable on-device AI processing that can help offload everyday workloads from the cloud and optimize overall AI infrastructure costs at scale. Surface for Business does not just transform the experience for employees, it transforms the experience for IT. From UEFI to browser, it can be managed through Microsoft Intune. Every device in this portfolio is built to support the end-to-end Microsoft stack: Microsoft Intune, Windows Autopilot and the Surface Management Portal give IT administrators a single, unified plane to provision devices at scale, enforce policies and manage the full device lifecycle including zero-touch deployment that gets people productive from day one.[7] When the hardware, the operating system, the management platform and the productivity suite are all built and optimized by Microsoft, the result is not just operational efficiency, it’s a level of assurance and confidence that benefits the end-customers and businesses.Raising the bar together. Introducing the Driver Quality Initiative at WinHEC 2026
“Great platforms aren’t built in isolation. Platform quality depends on early, honest collaboration across OEMs, ODMs, silicon partners and IHVs. WinHEC brings engineers together with Microsoft to align early, solve real problems and deliver higher‑quality solutions for our shared customers” — Syam Poluri, Distinguished Engineer, Dell Technologies
Raising the bar on quality takes all of us.
Drivers sit at the heart of every Windows experience. They connect the OS to the silicon, components and peripherals that make Windows one of the most versatile platforms in the industry. Today, thousands of partners contribute to tens of thousands of active driver families across the Windows install base. When drivers are high quality, customers experience reliable, secure, performant devices. When drivers fail, customers experience it as a device problem, regardless of where the root cause sits.- Architecture: We are heavily investing in hardening kernel mode drivers and enabling the third-party kernel mode driver transition to either user mode driver or Microsoft authored class drivers. This is to ensure higher driver security, reliability and resiliency. User-mode driver investments include performance updates to PCIe devices with DMA support as well as Wi-fi stack (coming soon). Class driver investments include Soundwire Device Class for Audio (SDCA), introduction of the I3C class driver, NCM USB ethernet class driver as well as continuous enhancements to existing first-party class drivers on Windows 11.
- Trust: We are raising the bar for trusted partners and trusted drivers, including stronger partner verification, expanded automated analysis and updated Windows Hardware Compatibility Program requirements.
- Lifecycle: We are improving driver lifecycle management through better Windows Update catalog hygiene, including deprecating outdated or low-quality drivers, advancing SBOM alignment and enabling faster issue analysis through driver symbols.
- Quality Measures: We are expanding how driver quality is measured beyond crashes to include stability, functionality, performance, and power and thermal impact, giving partners clearer signals to improve the real customer experience.
“Delivering high-quality drivers and resilient platforms isn’t owned by any one company—it’s a shared commitment. Through our close collaboration with Microsoft, AMD is focused on building a culture of joint accountability to ensure security, stability and predictable performance for our customers at scale.” — David Harmon, Director, Software Engineering, AMD
What we did at WinHEC
Day 1 opened with a keynote presentation featuring our Windows leadership team, organized around three themes: navigating the evolving landscape, raising the bar on Windows 11 quality and the future vision for Windows. The keynote set the tone for the days ahead. We were candid about where we are, clear about where we're going and explicit about the partnership required to get there. From there, attendees broke out into workshops, with sessions spanning five tracks:- End-to-end driver quality — covering the full lifecycle from authoring and validation through publishing, and post-release health
- Platform fundamentals — power, thermal and storage fundamentals that define everyday device experience
- Exceptional device experiences — delivering best-in-class quality across media and display, camera, audio, connectivity and peripherals
- Windows Server — platform direction, reliability and the evolving requirements for modern datacenter and edge deployments
- Ecosystem advancement — end-to-end security, co-engineering tools, manufacturing and AI hardware innovation.
“At Acer, we believe that continuous innovation and collaboration are the engines that drive the technology industry forward. On display at WinHEC, Windows stands out as an innovative platform that brings together partners across a broad range of expertise. The Microsoft conference is where innovation, technology and domain experts come together to unlock the true value of platform engineering.” — Mark Yang, Associate Vice President of Compute Software Technology, Acer Inc.
"The customers ASUS serves — gamers, creators, students and professionals — each demand a different kind of Windows device. WinHEC is where ASUS and Microsoft engineers go deep on the platform fundamentals that make those very different devices share the same quality bar, generation after generation." — Justin Yo, Software Associate VP, ASUSTeK Computer Inc.
What we heard from partners
A few themes came through clearly in our conversations across the two days:- Quality is a shared priority. Across silicon, OEM and IHV partners, the message was consistent — driver and platform quality is central to the customer experience, and the ecosystem is ready to invest.
- Innovation thrives on a strong foundation. When the fundamentals are solid, partners can invest more confidently in differentiated experiences, AI-powered capabilities and next-generation hardware, knowing the platform will support them. The energy around what becomes possible when quality is a given, not a variable, was one of the most exciting themes of the week.
- There is real appetite for this kind of engagement. Partners told us repeatedly that the combination of roadmap clarity and hands-on technical depth is exactly what the ecosystem needs at this moment and going forward.
- Transparency matters. Partners welcomed the open methodology behind driver quality metrics, the phased rollout of lifecycle states and the commitment to incentive-based distribution as the right model for moving forward together.
"The best customer experiences are built on the foundation of strong partner collaboration. WinHEC is where that work happens — engineers from HP and Microsoft aligning early, solving real problems and ensuring that what we ship together actually works for the people who depend on it every day. That kind of direct, honest partnership across the ecosystem raises the bar for everyone." — Deepak Patil, Senior Vice President, Personal Systems Engineering, HP Inc.