Microsoft used its October 7 Windows and Surface event to set out how it wants AI agents to run on Windows 11, and the one piece available to enterprises today is a security feature. Microsoft Execution Containers, which let organisations limit what files and networks an AI agent can touch, became generally available on Windows 11 on October 7 (eSecurity Planet, Petri).
Microsoft Execution Containers reach general availability
Microsoft Execution Containers, or MXC, let developers and IT administrators define which files and network locations an agent may reach, with the rules enforced at runtime. The key design point is that the policy sits outside the agent's control, so an agent cannot grant itself more access than it was given. Microsoft describes three modes, Enforcement, Learning and Permissive, and the agent activity report is available on Windows only.
MXC offers several containment backends:
| Container type | What it does | Status |
|---|---|---|
| Process container | Restricts an agent inside the user's environment (Windows 11, macOS, Linux) | Available |
| Session container | Runs the agent under a separate Windows account and session | Available |
| WSL container | Isolates the agent in Windows Subsystem for Linux | Available |
| MicroVM | Runs the agent in a lightweight virtual machine | Experimental |
Agents that already support MXC include GitHub Copilot, OpenAI Codex, OpenClaw, Replit, LM Studio and Unsloth AI, with Anthropic's Claude Code, Box, Manus and Perplexity among those expected to add support (Let's Data Science). SC World says MXC initially ships with Windows 11 version 24H2 Pro and Enterprise editions, with Windows Server 2027 to follow. Microsoft says Entra integration, so agent activity can be told apart in Agent 365, and Intune management of MXC are coming soon. Tom's Hardware adds that agents must attribute their actions to themselves, and that IT administrators can set agent rules once and apply them across a fleet.
MXC limits where an agent can act. It does not stop an agent from making mistakes inside the area it is allowed to use.
Search becomes an action launcher
The most visible consumer change is a new Windows Search experience that offers thousands of actions from the taskbar. Microsoft says it will start with changes such as dark mode, Do Not Disturb, Airplane mode, screen dimming, audio muting, window arrangement and sending texts. Tom's Hardware describes natural-language quick actions that can change settings, take screenshots and arrange windows.
These actions began rolling out to Windows Insiders in the Experimental channel on October 7, so ordinary users will not see them yet. Microsoft also plans an opt-in option that integrates Copilot into taskbar Search, first in select markets later in 2026. Microsoft has not given a date for a broad release of either feature.
Copilot gets local files and local models
On Copilot+ PCs, Microsoft says the Copilot app will be able to understand relevant files and recent activity on the device, with the user's permission. It will also be able to take actions across Windows, such as organising files, checking device diagnostics, troubleshooting and running workflows. Microsoft calls the approach hybrid intelligence, because Copilot can combine on-device models with cloud models when needed. Tom's Hardware reports that it uses cloud models by default and switches to local models when privacy matters.
These features are expected to roll out over the coming months, with timing varying by device, market and silicon. They extend the new Copilot Microsoft launched on September 25, which has Home, Code and Autopilot experiences.
Local models and developer tooling
Microsoft is also pushing smaller models onto the PC. It says its MAI Code 1.1 Flash model will run locally in 3-bit precision, which it says cuts model size by nearly 80 percent. Nvidia Nemotron and DeepSeek V4 Flash are planned for local use on RTX Spark hardware, the platform behind the new Surface Laptop Ultra (iTWire). Windows ML gains support for llama.cpp, and Microsoft is extending GitHub's HydraFusion routing to Windows, with hybrid intelligence in the GitHub Copilot app, the GitHub Copilot CLI and Visual Studio Code. Microsoft calls this an experimental preview later in October, and Tom's Hardware gives a date of October 15. Tom's Hardware also reports that Perplexity and Meta's Muse are coming to Windows.
What it means for users and IT teams
For most people, nothing changes today. The agent security layer is generally available, but the headline consumer features are either in the experimental Insider channel or promised for the coming months. For IT teams, MXC is the part to evaluate now, because it gives them a way to allow agent tools without handing them open access.
The wider direction is clear. Microsoft wants Windows to be where agents run, with local models handling private work and the cloud handling heavier jobs. An assistant that can read local files and change settings is only useful if people believe the limits will hold, so independent testing of MXC and clear documentation of what Copilot reads and keeps will matter more than the demos.
What to watch next
Watch for Insider build notes on the new Search actions, Entra and Intune support for MXC, the markets where Copilot in taskbar Search arrives, and security researchers testing whether the containers can be bypassed.
