In development for Windows 365 Enterprise and Frontline

To help in your readiness and planning, this page lists Windows 365 updates and features that are in development but not yet released. In addition to the information on this page:

If we anticipate that you need to take action before a change, we publish a complementary post in Office message center.
When a feature enters production, the feature description moves from this page to What's new.
This page and the What's new page are updated periodically. Check back for more updates.
Similar features might be announced at different times for Windows 365 Business.

Note

This page reflects our current expectations about Windows 365 capabilities in an upcoming release. Dates and individual features might change. This page doesn't describe all features in development.

This article was last updated on the date listed at the bottom of the page.

Device management

Updated provisioning policy page in the Intune admin center

In the Intune admin center, when you go to Provision Cloud PCs > Provisioning policies and select a policy, you'll notice a new multi‑tab page layout with Overview, Properties, and Devices tabs. This view gives administrators consolidated visibility into policy configuration, provisioned Cloud PCs, and related reports and insights. Provisioning policy pages for Frontline Shared and Reserve license types already use this multi-tab page layout, and their overview pages will be updated with related reports and insights. Additionally, the Frontline Shared provisioning policies with experience type Cloud App will have a new Cloud Apps tab.

User settings transition to the new settings framework

Windows 365 is moving existing Cloud PC user settings in Intune to a unified settings framework. Administrators will configure Cloud PC settings in the new framework, which is the location for all new and updated settings going forward. Existing user settings will be unsupported, and administrators should plan to recreate their current configurations in the new settings framework to continue managing Cloud PC behavior.

Enhanced Frontline Shared Cloud PC naming template

Frontline Shared provisioning policies will support more flexible naming templates in alignment with Enterprise and Frontline Dedicated SKUs. Admins will be able to configure naming templates with anywhere between 5 to 15 characters, a prefix of 0 to 10 characters, and a required random alphanumeric string of at least 5 characters.

Automatic storage expansion for Cloud Profiles on Frontline shared Cloud PCs

Cloud Profile storage on Windows 365 Frontline shared Cloud PCs will automatically expand as usage increases, within administrator‑defined default and maximum disk size limits. Expansion occurs in the background without session interruptions, helping reduce storage‑related failures during normal use.

Automatic cleanup of inactive user storage on Frontline shared Cloud PCs

Administrators will be able to configure automatic removal of user storage profiles on Windows 365 Frontline shared Cloud PCs after a defined period of inactivity (5 to 365 days). Cleanup can also be triggered when the policy's storage quota approaches its limit, without requiring reprovisioning in the admin experience.

Autopilot device preparation for Windows 365 Reserve

Autopilot device preparation profiles will support association with Windows 365 Reserve provisioning policies in Microsoft Intune. This allows administrators to validate that required apps and scripts are installed before a user signs in for the first time. Cloud PCs display a Preparing status while setup tasks run during initial setup.

Add Cloud Apps using a file path

Windows 365 will support adding Cloud Apps by specifying a local or network file path. This allows admins to manually create Cloud Apps for applications that can’t be automatically discovered, expanding app publishing options for Windows 365, and Windows 365 Frontline shared Cloud PCs.

Improved Place a Cloud PC on hold for Windows 365

In a future update, the Place a Cloud PC on hold feature will no longer require enabling access from public networks—an Azure configuration many organizations can't allow due to security policies and recommended best practices. This improvement lets admins continue using the feature while staying aligned with Azure network security guidance.

Device security

Migration to updated managed RDP Shortpath

Managed RDP Shortpath connections for Windows 365 and Azure Virtual Desktop will transition to an updated transport experience that supports both private and public networks. This update includes connection reliability improvements. Administrators should review their current RDP Shortpath configuration as the transition progresses.

RDP Shortpath with TURN relay in sovereign cloud environments

Windows 365 and Azure Virtual Desktop will support UDP‑based connections over TURN relay in Azure Government environments, including GCC and GCCH. This enables users in sovereign cloud deployments to benefit from improved connection performance through RDP Shortpath. Administrators may need to configure additional IP ranges to enable UDP connectivity.

Windows 365 Government support for Microsoft Purview Customer Key

Windows 365 Government will support encrypting Cloud PCs by setting up Microsoft Purview Customer Key. For more information, see Service encryption with Microsoft Purview Customer Key.

End user experience

Windows 365 Boot will add a Connection Center option to the Ctrl+Alt+Delete screen. Users can view their Cloud PC connection status, switch between assigned Cloud PCs, or perform device actions directly from the sign‑in experience.

State retention for Windows 365 Frontline dedicated Cloud PCs

Windows 365 Frontline dedicated Cloud PCs will support state retention, allowing users to resume their previous session including open applications and unsaved work after signing back in. If the Cloud PC restarts due to a system update, users start with a fresh desktop.

Email notifications for Windows 365 Reserve scenarios

An upcoming update to Windows 365 will introduce end‑user notifications for Windows 365 Reserve scenarios. These notifications are designed to improve visibility and awareness for users by providing timely information related to their Reserve Cloud PC, such as license assignment, provisioning status, expiration, revocation, and inactivity. Notifications will be delivered through email to help users stay informed about important changes and actions related to their Cloud PC.

Windows App will support taking screenshots while content is shared in Microsoft Teams. This allows users to capture the full screen—including Teams screen‑shared content—and save the screenshot to their Cloud PC, improving usability during collaboration scenarios.

True non‑persistence for Windows 365 Frontline shared Cloud PCs

In a future update, Windows 365 Frontline will support true non‑persistence for shared Cloud PCs. When a user signs out, the Cloud PC automatically resets to a known baseline so the next user starts with a clean session. This helps prevent data carryover and configuration drift in shared, shift‑based frontline scenarios.

B2B support for Windows App on macOS and Android

Windows App on macOS and Android adds support for external (B2B) identities, allowing guest users to connect to their Windows 365 resources using their invited account. This capability helps organizations support external vendors, partners, and users across multiple Microsoft Entra tenants without requiring separate local accounts. Users can sign in and access assigned resources through standard Windows App sign-in flows on supported platforms.

High‑level TWAIN scanner redirection

Windows 365 will add support for high‑level TWAIN scanner redirection, enabling administrators to configure scanner access with improved performance compared to USB‑based redirection. This capability is designed for environments where scanners are required, such as healthcare and other regulated industries, and provides a more responsive and reliable scanning experience in higher‑latency network conditions. Administrators can use this approach to support TWAIN‑based scanners without relying on low‑level USB redirection as a fallback.

Monitor and troubleshoot

Admin highlights in Intune for Windows 365

Admins will see a prioritized list of actionable insights in the Windows 365 experience within Intune, highlighting critical issues, optimization opportunities, and mis‑licensed users. Insights are dynamically ranked and link directly to underlying reports, with optional Copilot support for deeper analysis and fast follow‑up.

Available IP visibility for Azure network connections

The Intune admin center adds visibility into available IP capacity for each Azure network connection used by Windows 365. Administrators can view the number of available IPs directly in the Azure network connections list, helping identify capacity constraints that may affect Cloud PC provisioning. This view improves troubleshooting and planning by surfacing IP availability without exposing individual IP addresses.

End user manual connectivity check

End users will be able to manually run connectivity checks on their Cloud PCs from windows365.microsoft.com.

Security

Context‑based redirections

Context‑based redirections add server‑side controls that let administrators manage resource redirection in Windows 365 based on authentication context. Using conditions such as user identity, device compliance, and network context, admins can define when features like clipboard, drive, printer, and USB redirection are allowed or restricted. This capability helps strengthen data protection for bring‑your‑own‑device scenarios by enforcing consistent redirection policies without relying on client‑side enforcement.

Next steps

For details about recent developments, see What's new in Windows 365.

Feedback

Was this page helpful?

Last updated on 2026-04-17