In development for Windows 365 Enterprise and Frontline

To help in your readiness and planning, this page lists Windows 365 updates and features that are in development but not yet released. In addition to the information on this page:

• If we anticipate that you need to take action before a change, we publish a complementary post in Office message center.
• When a feature enters production, the feature description moves from this page to What's new.
• This page and the What's new page are updated periodically. Check back for more updates.
• Similar features might be announced at different times for Windows 365 Business.

Note

This page reflects our current expectations about Windows 365 capabilities in an upcoming release. Dates and individual features might change. This page doesn't describe all features in development.

This article was last updated on the date listed under the title above.

Device management

Improved Place a Cloud PC on hold for Windows 365

In a future update, the Place a Cloud PC on hold feature will no longer require enabling access from public networks—an Azure configuration many organizations cannot allow due to security policies and recommended best practices. This improvement lets admins continue using the feature while staying aligned with Azure network security guidance.

Updates to Windows 365 navigation in the Microsoft Intune admin center

The Windows 365 entry point in the Intune admin center will move from the Devices > Device onboarding section into a new, dedicated navigation area called Manage Windows 365 Cloud PCs under Devices. The existing horizontal navigation menu (such as Overview, All Cloud PCs, Provisioning policies, and Settings) will become a vertical list under the new Manage Windows 365 Cloud PCs section. A new Windows 365 administration section will be added under Tenant administration, grouping the following existing pages: Cloud PC encryption type, Cloud PC alerts, Cloud PC maintenance windows, Partner connectors. No features, workflows, assignments, or Cloud PC behaviors are changing.

Device security

Windows 365 Government support for Microsoft Purview Customer Key

Windows 365 Government will support encrypting Cloud PCs by setting up Microsoft Purview Customer Key. For more information, see Service encryption with Microsoft Purview Customer Key.

End user experience

B2B support for Windows App on macOS and Android

Windows App on macOS and Android adds support for external (B2B) identities, allowing guest users to connect to their Windows 365 resources using their invited account. This capability helps organizations support external vendors, partners, and users across multiple Microsoft Entra tenants without requiring separate local accounts. Users can sign in and access assigned resources through standard Windows App sign-in flows on supported platforms.

High‑level TWAIN scanner redirection

Windows 365 will add support for high‑level TWAIN scanner redirection, enabling administrators to configure scanner access with improved performance compared to USB‑based redirection. This capability is designed for environments where scanners are required, such as healthcare and other regulated industries, and helps provide a more responsive and reliable scanning experience in higher‑latency network conditions. Administrators can use this approach to support TWAIN‑based scanners without relying on low‑level USB redirection as a fallback.

Monitor and troubleshoot

Admin highlights in Intune for Windows 365

Admins will see a prioritized list of actionable insights in the Windows 365 experience within Intune, highlighting critical issues, optimization opportunities, and mis‑licensed users. Insights are dynamically ranked and link directly to underlying reports, with optional Copilot support for deeper analysis and fast follow‑up.

Windows 365 monitoring

The new Windows 365 Monitoring experience provides IT admins with richer visibility into Cloud PC health and performance. This preview includes trended charts for connection quality, Cloud PC reliability, and user/device‑level insights to support help‑desk scenarios. Admins can also access detailed data tables to investigate performance patterns and connection issues more deeply. This enhanced monitoring view helps organizations better understand Cloud PC behavior end‑to-end and more quickly identify areas requiring attention.

Available IP visibility for Azure network connections

The Intune admin center adds visibility into available IP capacity for each Azure network connection used by Windows 365. Administrators can view the number of available IPs directly in the Azure network connections list, helping identify capacity constraints that may affect Cloud PC provisioning. This view improves troubleshooting and planning by surfacing IP availability without exposing individual IP addresses.

End user manual connectivity check

End users will be able to manually run connectivity checks on their Cloud PCs from windows365.microsoft.com.

Security

Context‑based redirections

Context‑based redirections add server‑side controls that let administrators manage resource redirection in Windows 365 based on authentication context. Using conditions such as user identity, device compliance, and network context, admins can define when features like clipboard, drive, printer, and USB redirection are allowed or restricted. This capability helps strengthen data protection for bring‑your‑own‑device scenarios by enforcing consistent redirection policies without relying on client‑side enforcement.

Windows 365 Boot

Captive portal support for Windows 365 Boot

This update adds captive portal support to Windows 365 Boot, enabling users to connect to Wi-Fi networks that require web based sign in (such as terms acceptance or one time password authentication). The experience uses the default browser for network registration and includes improved connectivity feedback through Quick Settings and Action Center. Applies to Windows 365 Boot devices only.

Next steps

For details about recent developments, see What's new in Windows 365.