Introducing the Microsoft Inclusive Tech Lab

As we all know, over the years Microsoft has already put in a lot of work towards the development of more inclusive solutions for all its customers. So when we talk about the Microsoft Inclusive Tech Lab, we’re not talking about something new but rather a significant update on the lab that had previously been at the center of this work. 

According to Microsoft, this new lab which is designed “to learn and develop specifically for people with various types of disabilities” will provide a facility that can greatly enhance the work being done to provide more inclusive solutions. In this blog, I will take an in-depth look at this new Microsoft Inclusive Tech Lab and what it could mean for inclusivity going forward. 

Why we need inclusive solutions

In this modern era that we live in, no one can deny the significance of technology in all our lives. Regardless of which sector we can look at. Whether it’s the health sector, education, engineering, etc. The applications of various types of technology are limitless in any sector.

And this is exactly why it’s important to ensure that technology can be accessible to everyone. So what do we imply when we say “inclusive technology?” Simply put, all this refers to is ensuring that the technology available is accessible to everyone including groups that may previously have had difficulty accessing it such as those living with disabilities.  

By having facilities such as the Microsoft Inclusive Tech Lab, we will witness significant strides being made in providing inclusive technology solutions for everyone. And this is something that would be crucial not just in the work environment but beginning in early education. 

This will help to provide all students with a similar platform for engaging with learning material and enhancing the learning experience. With a setup like this in place, we can expect to see the benefits of this go beyond the educational phase and into the work environment.  

Introducing the Inclusive Tech Lab

Arguably the most important aspect of the Microsoft Inclusive Tech Lab is that it not only develops inclusive solutions but that these solutions are made by people living with disabilities. As such, the objective for Microsoft is to show just how great the potential can be when you bring in people with disabilities in the development process. 

The facility itself is a representation of how committed Microsoft is to developing inclusive solutions. Especially when considering how sensitive a lot of individuals may be to their environment. This then creates the ideal environment where introductory tours and collaborative workshops can be held to further the work being carried out.

The lab gives you an opportunity to view just how Microsoft’s products as well as those of its partners can work together to good effect. Therefore, this is the place to go when searching for the best assistive solutions that Microsoft and its partners are putting together. 

This kind of work clearly demonstrates how Microsoft and its partners are determined to ensure that the fruits of all their development work can benefit all who require access. Expanding the realm of possibilities can significantly alter what the future of the technology industry can look like.

According to Microsoft:

The space is purpose-built to continue this work. It is highly modular and will adapt to specific needs over time and across different projects, allowing discussion and design sessions on products and services intended for home, the workplace, schools, and remote connections. It is a place designed to demonstrate what is possible when you intentionally and proactively include people with disabilities in the product-making process and strive to build products that are genuinely inclusive by design.

The Inclusive Tech Lab is intended to be an embassy for people with disabilities, not a space about them. It will include a showcase of Microsoft’s accessible hardware, software, and services, as well as experiences created by our partners. Primarily, however, it is an inclusive design incubator where Microsoft and disability communities can ideate and evaluate product design and direction. It is a space where our designers can challenge assumptions while learning to recognize the exclusions and constraints faced by people with disabilities. We harness that understanding to create new ideas, designing for “one” and extending to many.”

Inclusive involvement

The teams of individuals working on various projects are encouraged to use the ideas they have received from people with disabilities and find ways to apply them to the technologies they are working on. By providing teams with this lab and all its capabilities, the people here literally have the sky as the limit. They can imagine and work on ideas that are driven toward making a fully accessible environment for everyone across the globe. 

The full involvement of people with disabilities means that the Microsoft Inclusive Tech Lab seeks to do more than just create a product. As good as that may be, the project wants those working on solutions to be able to relate on a deeper level to those who they are designing products for and how it will affect their lives.  

Principles of Inclusive Design

So now that we’ve looked at why seeking to develop inclusive solutions is such an important objective, we can consider the principles that Microsoft will lean on during this endeavor. Firstly, we can talk about the recognition of exclusion. What this simply refers to is the fact that all of us, regardless of where we’re from, have our own inherent biases that determine how we view the world and therefore live our lives. 

The key then at Microsoft is to acknowledge that these biases exist and this gives you an opportunity to explore these issues. As you recognize what they are and how detrimental they’ve been, you can start engaging the affected communities and coming up with inclusive solutions to bridge all the necessary gaps.

Learning from diversity

The next principle that Microsoft looks at is that of learning from diversity. This is because there is an appreciation of just how different and divergent perspectives can positively impact a learning or work environment. We actually find that in some schools of thought, it is believed that within diverse work and learning environments cognitive skills and critical thinking can improve. 

What causes this is that the interactions that go on in these diverse communities can challenge you as an individual with different views and perspectives that you might not have previously considered. 

Therefore, Microsoft wants to have its Inclusive Tech Lab be a place that will promote learning from diversity. Especially considering the wide reach of its products and services across all continents.  

The last principle I’ll talk about is that of trying to solve challenges for one in a way that will extend to others. When looking at developing solutions from this perspective, the idea is that most people have abilities but as human beings there will always be limitations to those abilities. 

So, when we start considering creating inclusive technology solutions what we can ultimately come up with are systems that will enhance accessibility for people living with disabilities. However, we can also expect to see other users of these products being able to benefit as well. 

Microsoft’s Adaptive Accessories

At the heart of the work that Microsoft is doing with inclusive technologies are the adaptive accessories. These accessories, which have significant input from disability communities, are highly adaptable and have been designed with the intention of making them customizable to suit individual needs. The product line features an Adaptive Mouse, Adaptive Hub, and Adaptive Buttons. 

All of the accessories can be configured as necessary and will support everything. And so this includes first-party add-ons such as Thumb Supports or Mouse Tails, as well as custom 3D-printed add-ons that enhance the various use cases. These devices leverage the foundation that was laid by the Xbox Adaptive Controller and aims to eliminate the challenges that the disability community has faced with the traditional mouse and keyboard setup. 

Adaptive Hub

This product is designed to enable users to turn traditional keyboards into a central hub with several wireless buttons. It is in the form of a small, box-shaped device that is meant to enable the devices to offer accessibility. What this entails is that users can augment traditional keyboards and create custom inputs. You’ll notice that the Adaptive Hub has five 3.5mm ports, three USB-C ports, as well as a Bluetooth pairing button. The aforementioned ports are where you connect the adaptive buttons and switches. Furthermore, it can connect to your current assistive technology, such as third-party digital buttons and switches, through the 3.5mm ports.

Adaptive Mouse

This adaptable mouse is built to be accessible. You can personalize the device by attaching the Microsoft Adaptive Mouse Tail and Thumb Support. By leveraging these attachable parts, Microsoft offers users the chance to have a mouse that is designed to fit their unique needs. Also, I’m sure users will gladly discover that the adaptable and customizable attachments help to make the device lighter and more portable. Unlike other accessories, the Adaptive Mouse will connect directly to your PC. The two buttons that it has are easily clickable which adds to the ease of use. And it also features a similarly clickable scroll wheel. In addition, you get the option to configure the buttons and scroll wheel for action/function shortcuts and for both short presses and long presses. 

Adaptive Button

With the Adaptive Button, users will get a small, square-shaped wireless button. It is designed to give you eight digital inputs that can be uniquely customized in the Microsoft Accessory Center and an easy-to-press design. And each Adaptive Hub can connect with up to four Adaptive Buttons. In addition, because of the partnership with Shapeways (which is a 3D-printing company that creates other 3D-printed toppers), users can customize their devices by custom-printing their own button toppers. So, if the button toppers that Microsoft can offer you out of the box are not suitable for you then you can get something more personalized. The design of the button including its small size means that it’s relatively easy to hold and place according to your usage needs. 

Inclusive Design for Gaming

As already mentioned above, a significant amount of the work being done at the Microsoft Inclusive Tech Lab has to do with gaming consoles. There has been a growing realization of just how much need there is for inclusive solutions for gaming systems. 

For instance, the typical controller that comes with the vast majority of consoles requires two hands, two thumbs, and fine motor control for you to operate comfortably. Quite simply, this will mean the exclusion of a significant number of people who are living with disabilities. 

With this in mind, the teams of individuals working on the development of inclusive solutions need to recognize the exclusion that has existed with gaming consoles in the past. We can appreciate that these devices’ designers worked with certain assumptions about the users of these devices and how they would be using them. 

Unfortunately, that has created a scenario where plenty of potential users can use these devices but with great difficulty or may not be able to use them at all. So, Microsoft now appreciates that if users can’t use their products because of how they were designed then that creates a massive barrier. And this is what a lot of the work at the Inclusive Tech Lab is based around, developing solutions that can eliminate these barriers. 

Learning from diversity

Another important key area for gaming is learning from diversity. Microsoft has been able to do this over the years by engaging with the various gaming communities to seek their insights on a variety of issues. The teams working on these products have received feedback on the functionality of the devices, their ease of use, and any changes that users may want to see to improve accessibility. 

And all of this feedback combined with the development work being done has been central to the creation of inclusive gaming solutions such as the Xbox Adaptive Controller. Products like these will mean that can be something all users can potentially enjoy even more. 

Creating solutions that enhance inclusivity can be of great benefit to all. Why should individuals living with disabilities be restricted from the gaming experience that countless others across all continents get to enjoy? As Microsoft was working on the adaptive controller, there was a need to take into consideration the unique ambulatory abilities of users in the targeted communities. 

Not only that but looking at people’s situations such as Gamer, CareGiver, Maker, etc, allowed for the development of a product that could be tailored to address various needs. Going forward, we would fully expect the Xbox Adaptive Controller to play a key role in shaping inclusive solutions and significantly enhance the ease of use for all users. 

Inclusive Solutions

Microsoft has been working on several inclusive technologies for a while now. In fact, the Inclusive Tech Lab isn’t exactly something completely new. It’s something that the Xbox team has had in place since 2017 as they were working on the Xbox Adaptive Controller

Now, Microsoft has provided a designated space, extended the lab, and is looking to develop integrative design by working closely with the disability community. The work being done in this environment is producing a great variety of accessibility tools. In the table below we’ll go over some of the possibilities available.

Vision

Adapt Windows to your vision

  • use the available color filters
  • change the color contrast
  • make Windows easier to see
  • use Magnifier to enhance the visibility of what’s on the screen
  • use color and contrast for accessibility in Microsoft 365

Listen instead of watch

  • use Narrator to hear text read aloud
  • use the screen reader with Microsoft 365 apps
  • listen to your Outlook email messages
  • listen to your Word documents
  • converting text to speech in Excel
  • seeing AI narration (hear descriptive audio everywhere)
  • Microsoft Soundscape (experience maps in 3D sound)

Use Immersive Reader

  • use Immersive Reader in Microsoft Edge
  • open Immersive Reader for Outlook
  • use Immersive Reader in Word
  • use Immersive Reader in Microsoft Teams
  • use Immersive Reader in PowerPoint
  • use Immersive Reader for OneNote
  • use Immersive Reader in Microsoft Forms

Improve the efficiency of keyboard use

  • take advantage of keyboard shortcuts for accessibility

Hearing

Adapt Windows to your hearing

  • with mono audio, you can hear all sounds in one channel
  • change caption settings
  • make notifications stick around longer
  • display audio alerts visually

Watch instead of listen

  • instead of listening to sounds you can use text or visual alternatives
  • you can autogenerate captions for videos
  • you can use captions and subtitles during Skype calls
  • in Microsoft Teams meetings you can make use of live captions
  • add closed captions and/or subtitles to media in PowerPoint

Improve the efficiency of keyboard use

  • take advantage of keyboard shortcuts for added accessibility
  • use the Search/Tell Me feature (find the command you want)

Neurodiversity

Adapt Windows to suit your needs

  • make the Start menu simpler
  • declutter your taskbar and make it clean
  • focus on a task by minimizing distractions
  • customize the taskbar

Improve reading comprehension and writing skills

  • enable text suggestions in Windows
  • make reading easier by downloading and using fluent fonts
  • customize text spacing
  • take advantage of learning tools in OneNote
  • use Microsoft Editor to polish grammar and more

Customize your reading experience and read without distractions

  • when using Microsoft Edge, take advantage of Immersive Reader
  • use Immersive Reader in Word
  • open Immersive Reader for Outlook
  • use Immersive Reader in PowerPoint
  • use Immersive Reader for OneNote

Maintain focus and organization

  • improve your PowerPoint slides
  • by keeping your Microsoft 365 files in OneDrive you can prevent the loss of your work
  • make use of the calendar board view to organize things according to your needs
  • go paperless with Microsoft Lens

Improve the efficiency of keyboard use

  • take advantage of keyboard shortcuts for added accessibility
  • use the Search/Tell Me feature (find the command you want)

Learning

Improve writing quality

  • you can use Microsoft Editor as your writing assistant in documents, mail, on the web, etc. Also, you can use it to check your grammar, spelling, and more in Word.
  • you can type with your voice to dictate documents, to talk instead of type on your PC, as well as for troubleshooting.

Reading comprehension and skills improvement

  • use the Immersive Reader
  • practice reading fluency with the Reading Progress tool
  • if you want to eliminate distracting content from the web you can make use of the Reading view
  • hear text read out loud

Improve math skills

  • you can benefit from inclusive math interactive training
  • you can use Microsoft 365 apps to write equations or formulas
  • use Microsoft Forms to create math quizzes
  • use OneNote to create math equations
  • use OneNote Math Assistant to help you solve equations, draw graphs, and more.
  • replay ink strokes in OneNote for Windows
  • draw straight lines or measure with the ruler in OneNote

Communicate confidently with inclusiveness

  • create an inclusive communication environment. You can do this with the use of Reflect in Microsoft Teams as well as live captions during Teams events.
  • create inclusive PowerPoint presentations. This can be done by doing this such as using the Accessibility Checker to enhance accessibility and making presentations with real-time, automatic captions or subtitles in PowerPoint, among others.
  • use Microsoft Translator

Configure Windows for effective learning

  • make the Start menu simpler
  • declutter your taskbar and make it clean
  • focus on a task by minimizing distractions (Turn off animation and transparency effects)
  • use Magnifier to enhance the visibility of what’s on the screen
  • customize the taskbar
  • block alerts and notifications by using Focus assist

Mobility

Configure Windows to meet your mobility needs

  • Make your keyboard, mouse, and other input devices easier to use. You can do this by controlling your mouse pointer with the numeric keypad or making use of the Filter Keys to set the sensitivity of the keyboard, among other things.
  • As an alternative to typing on the physical keyboard, you can use the on-screen keyboard.

Type and navigate with your voice

  • use voice recognition in Windows
  • Windows Speech Recognition commands
  • dictate your documents in Word

Control Windows and apps with your eyes

  • take advantage of eye control features to enhance ease of use

Improve the efficiency of keyboard use

  • take advantage of keyboard shortcuts for added accessibility
  • use the Search/Tell Me feature (find the command you want)

Mental health

Configure Windows to meet your needs

  • make the Start menu simpler
  • declutter your taskbar and make it clean
  • focus on a task by minimizing distractions (Turn off animation and transparency effects)
  • use Magnifier to enhance the visibility of what’s on the screen
  • customize the taskbar
  • block alerts and notifications by using Focus assist
  • enable text suggestions

Improve your focus

  • using Immersive Reader can help you work with fewer distractions
  • stay on track with your tasks by creating Outlook tasks in OneNote or using the Tasks app in Microsoft Teams.
  • customize the look and feel of Office to your liking
  • use Microsoft Viva Insights to help you develop more efficient work habits

Improve the efficiency of keyboard use

  • take advantage of keyboard shortcuts for added accessibility
  • use the Search/Tell Me feature (find the command you want)

Tactile Port Indicators

Having tactile indicators placed on devices can be a great feature that can enhance ease of use for countless people. And for an example of this, we can look at the work that Microsoft has put into devices such as the Xbox Series X game console, Microsoft Audio Dock, and the Surface Thunderbolt Dock among others to improve accessibility for the visually impaired. 

The reason this came about is that when we consider a lot of devices out there, ports like the USBA and the HDMI can feel pretty similar to the touch. And so people working at the Microsoft Inclusive Tech Lab have been seeking feedback from those who are visually impaired on how best to develop a system that can offer them greater ease of use.

How it works

So how does this work exactly? Well, what this new system is designed to do is provide little bumps over the various ports on these devices to aid with discerning what’s what without the need for sight. This means you will no longer have to feel for just the shape of the ports, but with this additional system, it should become easier to determine which port is which. As we can all imagine, the potential for what this could offer visually-impaired individuals across countless devices is massive.  

It’s no surprise when you consider the devices that Microsoft has been working on initially. Gaming is a huge part of the work that takes place at the Inclusive Lab.

However, this system is something that everyone out there should be looking at considering what it offers. The objective is for the idea to grow even more and become even better because it is not meant to work alone but help improve ease of use. And ideally, it would be great to see this applied to various other types of devices so they benefit as well. 

Surface Also Making Changes

The teams working on the various Surface products have also had to look at their products and consider how they could improve accessibility. Unfortunately, the reality is that a lot of products have been previously developed without any consideration of the needs of those living with disabilities. 

For example, on older Surface devices you’ll find that F4 and mute shared a key and the only indicator for FN lock was a light. When you consider the needs of those without sight you can quickly spot how this would present challenges. When screen reader users were trying to close an app, they could inadvertently mute their PCs and thereby leave them cut off from their devices. 

Fortunately, teams working on Surface products are now developing systems that will enhance the ease of use for visually-impaired individuals. By sitting down with the blind, listening to their experiences, and hearing their suggestions, Microsoft can now come up with more inclusive tech solutions for their products. 

Going forward, starting with the Surface Laptop 3, you will see changes such as the separation of mute and F4. Additionally, FN lock is going to be made accessible via Windows Narrator and tactile bumps will be added to the F4 and F8 keys to simplify keyboard navigation. These wonderful improvements will be made to all Surface keyboards in the future as part of an ongoing effort to provide better inclusive technology. 

More is yet to come and discussions with the visually-impaired community have also uncovered the need for customizable tactile indicators. With this in mind, Microsoft has been able to develop the Surface Adaptive Kit. This is something that should enable the development of even better solutions by looking to overcome the limitations on hardware with enhanced software, better accessories, and more. 

Wrap Up

For far too long technology did not do enough to address the needs of the disability community. Plenty of individuals faced significant barriers when it came to using technology comfortably. As a giant in the tech industry, Microsoft could not ignore the responsibility. Hence, we have the Microsoft Inclusive Tech Lab. This facility is doing phenomenal work that aims to take down barriers and provide solutions that are accessible to all. And the great thing about all this is that this is not a place that simply comes up with solutions for the disability community but it has members of the community greatly involved in development. Undoubtedly, the work going on here will massively enhance technology inclusiveness going forward.

Top 10 reasons Why Windows 365 is a great choice

Windows 365 is a great choice for your business. As the world becomes more digital, it is important to have the right tools to stay productive and competitive. Subsequently, with this Windows solution, you can take your desktop anywhere you go, work from any device, and access your files and apps from anywhere with an internet connection.
Here are the top 10 reasons why Windows 365 is a game changer for businesses of all sizes:

To expand on each topic, simply click on the item.

Each topic will be released over the next couple of weeks, stay tuned for updates

  1. Secure and reliable: Windows 365 is built on top of the Azure platform, which provides top-notch security and reliability for your business. Additionally, your data is stored in the cloud and protected by Microsoft’s advanced security protocols, so rest assured knowing your information is safe.
  2. Scalable: Windows 365 allows you to scale up or down your computing power as your business grows or changes. Consequently, this means you can quickly add or remove users, adjust your storage capacity, and scale your resources according to your needs.
  3. Always up-to-date: With Windows 365, you will always have the latest version of Windows and Office applications. Moreover, this means you won’t have to worry about updates, patches, or upgrades. You’ll always have access to the latest features and improvements.
  4. Flexible pricing: Windows 365 offers flexible pricing options that allow you to pay only for what you need. You can select different plans based on the number of users, the amount of storage, and the computing power you need.
  5. Accessible from anywhere: With Windows 365, you can access your desktop and files from anywhere with an internet connection. For example, you can work from home, on the go, or from a remote location without any interruptions.
  6. Easy to set up: Setting up Windows 365 is easy and straightforward. You can quickly provision virtual machines, assign users, and set up policies and permissions. Additionally, you don’t need any special skills or knowledge to get started.
  7. Simplified management: Windows 365 offers a centralized management console that allows you to manage all your users, devices, and applications in one place. You can easily monitor performance, track usage, and enforce security policies.
  8. Collaborative: Windows 365 makes it easy for your team to collaborate and share files. You can set up shared folders, access permissions, and collaborative tools that allow your team to work together in real-time.
  9. Support for legacy applications: Windows 365 supports legacy applications that may not be compatible with modern operating systems. For example, you can continue using your existing applications without any compatibility issues.
  10. Green computing: By using Windows 365, you can significantly reduce your company’s carbon footprint and contribute to a greener planet. Since your desktop is in the cloud, you don’t need to have a physical machine running all the time. This can help reduce your energy consumption and lower your carbon emissions.

Conclusion

In conclusion, Windows 365 offers a secure, scalable, and flexible solution for businesses of all sizes. Moreover, it allows you to work from anywhere, collaborate with your team, and stay up-to-date with the latest technology. If you’re looking for a more effective way to streamline your business operations, improve your productivity, and reduce your costs, it’s definitely worth considering.

Azure Virtual Desktop’s Latest Capabilities

Using virtual desktop services enables you to have secure access to work applications and other organizational resources from remote locations. This is something that vastly increases your capabilities beyond the traditional desktop in the office. Microsoft offers Azure Virtual Desktop (AVD) as a desktop and app virtualization service that runs on the cloud.

And as the work environment consistently evolves, desktop virtualization services are becoming an integral part of the way that organizations operate. It can make it easier to have employees working remotely without worrying about the security of your network.

Unlike in the past when running a virtual desktop environment would have been an extremely complex and expensive undertaking, AVD simplifies the process and also makes it affordable. Additionally, you can expect guaranteed, regular updates and new capabilities that continuously improve the service.

Azure Virtual Desktop main features

Azure Virtual Desktop comes with a lot of capabilities, designed to optimize the use of virtual desktops. By using this service, you can have an environment that perfectly meets the needs of your organization, is scalable when necessary, and is flexible. Below are the key capabilities that you will benefit from:

  • You can create a full desktop virtualization environment in your Azure subscription. And you can do so without having to run any gateway servers.
  • You can publish host pools as you need so that you can adequately accommodate your various workloads.
  • Allows you to have your own image for production workloads or test from the Azure Gallery.
  • The availability of pooled, multi-session resources is something that will help you to lower your costs. You can see this even more with the new Windows 10 and Windows 11 Enterprise multi-session capability that will enable you to cut down on the number of virtual machines as well as the operating system overhead costs without having to make compromises about the resources that your users have. (This capability is exclusive to Azure Virtual Desktop and Remote Desktop Session Host (RDSH) role on Windows Server).
  • Users can get individual ownership through personal (persistent) desktops.
  • You can manage costs further by leveraging autoscale to handle the automatic increasing or decreasing of capacity and this can be based on time of day, specific days of the week, or changes in demand.

For the deployment and management of virtual desktops:

  • You can do it through the Azure portal, Azure CLI, PowerShell and REST API for the configuration of host pools, the creation of app groups, the assignment of users, and the publishing of resources.
  • From a single host pool, it’s possible to publish full desktop or individual remote apps. You can also create individual app groups for different sets of users, and you could even cut down on the number of images by assigning users to multiple app groups.
  • You can gather diagnostics that will help you understand the various configuration or user errors by taking advantage of the built-in delegated access when assigning roles.
  • Troubleshooting errors is easier when using the new Diagnostics service.
  • The infrastructure will not require any managing, only the image and virtual machines will. Unlike with other Remote Desktop Services, you won’t have to personally manage the Remote Desktop roles. You only need to manage the virtual machines in your Azure subscription.

Assigning and connecting users to your virtual desktops is also something you can do:

  • Once assigned, users will be able to launch any Azure Virtual Desktop client to connect to their published Windows desktops and applications. Conveniently, you can use any device to connect and you can do so through the native applications on your device or you could use the Azure Virtual Desktop HTML5 web client.
  • Opening any inbound ports is not necessary because you can securely establish users through reverse connections to the service.

New multi-session capabilities

The features I’ve gone over above are key in delivering a virtualization experience that eliminates the complexities of traditional virtual desktop solutions. However, Microsoft is adding to those capabilities to give users an even better Windows experience by introducing Azure Virtual Desktop multi-session with Microsoft Intune.

With this addition, you’ll now be able to use Microsoft Intune to manage Windows 10 or Windows 11 Enterprise multi-session remote desktops in the Microsoft Endpoint Manager admin center the same way as you would for your regular shared Windows 10/11 client device.

Consequently, you can now manage these virtual machines using either device-based configurations meant for devices or user-based configurations meant for users. Windows 10 or Windows 11 Enterprise multi-session is a new Remote Desktop Session Host and it is exclusive to AVD on Azure. It has some very attractive features:

  • You can have several concurrent user sessions.
  • It offers users a familiar Windows 10 or Windows 11 experience.
  • It delivers great convenience by allowing you to use existing per-user Microsoft 365 licensing.  

Microsoft has introduced user configuration in Microsoft Intune for Windows 11 multi-session VMs and this will mean that:

  • You’ll be able to use the Settings catalog for the configuration of user scope policies and then assign them to groups of users. To simplify this, there is a search bar that you can use to locate all the configurations with scope set to “user”.
  • You can configure user certificates and then assign them to users.
  • You’ll also be able to configure PowerShell scripts. These are installable in the user context and then assigned to users.

Pre-requisites

  • For Windows 10 multi-session, you need to be running version 1903 or later, or you should be running Windows 11 multi-session.
  • Your Azure Virtual Desktop agent needs to be version 1.0.2944.1400 or later.
  • You need to have the right Azure Virtual Desktop and Microsoft Intune license if the user is benefitting whether directly or not from the Microsoft Intune service. This includes access to the Intune service through a Microsoft API.
  • You’ll need to set up the VMs as remote desktops in pooled host pools. And deployment is through Azure Resource manager.
  • The VMs should also be Hybrid Azure AD-joined, as well as enrolled in Microsoft Intune via the methods below:
  • Configuration done with Active Directory group policy and then set to use Device credentials. Also, be sure to set credentials to enroll devices that are Hybrid Azure AD-joined automatically.
  • Configuration Manager co-management.
  • In addition, the VMs should also be Azure AD-joined and enrolled in Microsoft Intune by enabling Enroll the VM with Intune in the Azure portal.

You’ll need to remember that Windows 10 or Windows 11 Enterprise multi-session VMs are essentially different editions of the OS. Therefore, you can expect some Windows 10 or Windows 11 Enterprise configurations that aren’t supported for this edition. However, using Intune won’t interfere with AVD management of that VM nor does it depend on it.

Create the configuration profile

The Settings catalog in the MEM admin center is what you are going to have to use for configuring the configuration policies for Windows 10 or Windows 11 Enterprise multi-session VMs. Additionally, the following device configuration profile templates receive support for the Windows 10 or Windows 11 Enterprise multi-session VMs:

  • Trusted certificate – when targeting devices, it’s Device (machine) and when targeting users, it’s User.
  • SCEP certificate – when targeting devices, it’s Device (machine) and when targeting users, it’s User.
  • PKCS certificate – when targeting devices, it’s Device (machine) and when targeting users, it’s User.
  • VPN – Device Tunnel only

Except for the template above, the rest of the existing device configuration profile templates won’t have support. Unsupported templates will not be delivered to multi-session devices. And they will appear as Not applicable in reports.

Also, you’ll need to set the workload slider for Resource Access Policies to Intune or Pilot Intune. This applies if you use co-management for Intune and Configuration Manager. This is a necessary step that will enable Windows 10 and Windows 11 clients to begin the process of requesting the certificate.

Policy configuration

  • Navigate to the MEM admin center and sign in. Then, proceed to select Devices > Windows > Configuration profiles > Create Profile.
  • Next, you’ll want to choose Windows 10 and later for Platform.
  • For Profile type, you should select Settings catalog. However, you’ll need to select Templates as well as the name of the supported template if you’ll be deploying settings with a template.
  • Select Create.
  • Next, you’ll get to the Basics page where you need to give a Name and (optionally) Description > Next.
  • And when you get to the Configuration settings page, choose Add settings.
  • Next, we get to the Settings picker . Here you need to select Add filter and then pick the options below:
  • Key: OS edition
  • Operator: ==
  • Value: Enterprise multi-session
  • Select Apply. With this done, all the configuration profile categories that support Windows 10 or Windows 11 Enterprise multi-session will now appear on the filtered list.
  • You can now choose the categories that you want from this filtered list.
  • Every category you select will require you to choose the settings. These settings will apply to your new configuration profile.
  • In addition, you need to pick the value that you want for this configuration profile for each of your chosen settings.
  • After you’ve finished adding all the settings you want, select Next.
  • When you get to the Assignments page, you have to select the Azure AD groups that have the devices to which you want this profile assigned > Next.
  • Additionally, on the Scope tags, you have the option to add the scope tags you want > Next.
  • With all the above configured, you’ll then go to the Review + create page and select Create to create the profile.

Administrative templates

Administrative Templates for Windows 10 or Windows 11 are supported for Windows 10 or Windows 11 Enterprise multi-session through the Settings catalog. Addtionally, there are some limitations worth noting.

  • There are certain policies not available in the Settings catalog. However, ADMX-backed policies do have support.
  • ADMX-ingested policies also have support. And this includes the settings for Office and Microsoft Edge that are available in the administrative template files of both Office and Microsoft Edge. It’s also important to note that not all ADMX-ingested settings are applicable to Windows 10 or Windows 11 Enterprise multi-session. You can view the complete list of ADMX-ingested policy categories in the Win32 and Desktop Bridge app policy configuration.
  • At the time of writing, ADMX-ingested policies are supported for user targeting, only on Windows 11.

Compliance and Conditional access with Azure Virtual Desktop

Protecting your Windows 10 or Windows 11 Enterprise multi-session VMs will be of great importance to everyone. And to secure these VMs, you can go to the Microsoft Endpoint Manager admin center. There, you can configure the appropriate compliance as well as Conditional Access policies. Below is the list of compliance policies, supported on Windows 10 or Windows 11 Enterprise multi-session VMs:

  • Minimum OS version
  • Maximum OS version
  • Valid operating system builds
  • Simple passwords
  • Password type
  • Minimum password length
  • Password Complexity
  • Password expiration (days)
  • Number of previous passwords to prevent reuse
  • Microsoft Defender Antimalware
  • Microsoft Defender Antimalware security intelligence up-to-date
  • Firewall
  • Antivirus
  • Antispyware
  • Real-time protection
  • Microsoft Defender Antimalware minimum version
  • Defender ATP Risk score

These are the only policies you can use. And those not on this list will not be applicable.

Endpoint security

Without a doubt, endpoint security is one of the greatest concerns for most organizations today. Cyberattacks are growing in number and sophistication meaning that endpoints can easily become the weak point in your network. For multi-session VMs, you’ll have the ability to configure profiles under Endpoint security by choosing Platform Windows 10, Windows 11, and Windows Server. Any Platform that you will find unavailable will be for a profile that does not have support on multi-session VMs.

Deployment of applications

Having access to the applications that you need is essential to maintaining productivity and working efficiently. So naturally, I would want to know whether Windows 10 or Windows 11 apps will work for multi-session. Fortunately, all Windows 10 or Windows 11 apps are deployable to Windows 10 or Windows 11 Enterprise multi-session. However, it does come with certain limitations:

  • You should install the configuration of the apps within the system/device context. And aim to target specific devices. Additionally, web apps won’t apply to multi-session VMs because of how by default they always apply in the user context.
  • The next requirement involves the configuration of all the apps. They must indicate Required or Uninstall app assignment intent. As far as the Available apps deployment intent goes, it’s not going to have support on multi-session VMs.       
  • For any Win32 apps with configuration to install in the system context, and have dependencies relationships on any apps configured, to install in the user context, their installation is not possible. Instead, you’ll need to create a separate instance of the system context app if you intend to apply to a Windows 10 or Windows 11 Enterprise multi-session VM. Alternatively, you must verify all the app dependencies are configured to install in the system context.
  • At present, there is no support in Microsoft Intune for MSIX app attach and Azure Virtual Desktop RemoteApp.

Script deployment

When it comes to script deployment, those configured to run in the system context, with assignment to devices, will have support on Windows 10 or Windows 11 Enterprise multi-session.

To configure this, navigate to Script settings and turn the Run this script using the logged on credentials to No. On the other hand, scripts configured to run in the user context and with assignment to users, will have support on Windows 11 Enterprise multi-session. Similarly, you can configure this by going over to Script settings. But this time, turn the Run this script using the logged on credentials to Yes.

Windows Update for Business

Managing the Windows Update settings for quality (security,) updates for Windows 10, or Windows 11, Enterprise multi-session VMs uses the settings catalog. Finding the supported settings that are necessary is pretty straightforward. You’ll first need to configure a settings filter for Enterprise multi-session. After that, you can expand the Windows Update for Business category. See the settings you can find in the catalog below:

Remote actions

When it comes to Windows 10 or Windows 11 remote actions, there are several that will not be supported. As a result, they will appear grayed out in the UI as well as disabled in Graph for Windows 10 or Windows 11 Enterprise multi-session VMs. These remote actions are as follows:

  • Autopilot reset
  • BitLocker key rotation
  • Fresh Start
  • Remote lock
  • Reset password
  • Wipe

Retirement

If you decide to delete certain VMs, then you can do so. But the device records will still remain in the Microsoft Endpoint Manager admin center. However, depending on the cleanup rules configured for the tenant, they will still automatically clean up.

Security baselines

Although security baselines are currently not available for Windows 10 or Windows 11 Enterprise multi-session, it’s still a good idea to go over those available. Having done that, you can then go to the Settings catalog and configure the recommended policies and values. This is vitally important as Windows security baselines intend to reinforce security for users and devices.

Using security baselines means that you can leverage the best practices and recommendations for enhanced security. And even though these security baselines come as groups of pre-configured Windows settings, you get the option of customizing each baseline that you deploy to enforce only the settings and values needed.

This is particularly important because the vast majority of the time the default settings in the security baselines are very restrictive. So, it would be good practice to adapt the baselines to meet your needs so that they do not conflict with any of your other pre-existing settings or features.

Unsupported configurations

There are some additional configurations that are not supported on Windows 10 or Windows 11 Enterprise multi-session VMs. Hopefully, this will change sooner rather than later. But currently Out of Box Experience (OOBE) enrollment isn’t available nor does it have support.

The unavailability of this option means that both Commercial OOBE and Windows Autopilot are not supported. And the same also applies to the Enrollment status page. Furthermore, as for the China Sovereign Cloud, Windows 10 or Windows 11 Enterprise multi-session is not as yet supported.

Troubleshooting common issues

Enrollment IssuesDetail
Failure to enroll hybrid Azure AD-joined virtual machineNormally, auto-enrollment is set up to use user credentials. However, for Windows 10 or Windows 11 Enterprise multi-session virtual machines, the enrollment requires using device credentials. You need to use an Azure Virtual Desktop agent that is version 2944.1400 or later. Another issue is having more than a single MDM provider, which isn’t supported. You’ll also have issues with Windows 10 or Windows 11 Enterprise multi-session VMs configured outside of a host pool. This is because Microsoft Intune only supports VMs that are provisioned as part of a host pool. If your Azure Virtual Desktop host pool hasn’t been created through the Azure Resource Manager template, then that will present a problem. 
Failure to enroll Azure AD-joined virtual machineIt could be as simple as you using an Azure Virtual Desktop agent that is not updated. You should be using an agent that is version 2944.1400 or later.If your Azure Virtual Desktop host pool hasn’t been created through the Azure Resource Manager template then that will  present a problem. 

More about configuration

Configuration issuesDetail
Failure of Settings catalog policyStart by verifying whether the VM is enrolled using device credentials because at present enrollment with user credentials is not supported for Windows 10 or Windows 11 Enterprise multi-session.  
Configuration policy didn’t applyWith the exception of Certificates, know that templates aren’t supported on Windows 10 or Windows 11 Enterprise multi-session. Therefore, the creation of all policies must be done via the settings catalog.
Configuration policy reports as Not applicableIt’s not all policies that are applicable to Azure Virtual Desktop VMs.
When applying the filter for Windows 10 or Windows 11 Enterprise multi-session edition, the Microsoft Edge/Microsoft Office ADMX policy is not showing upThe application of these settings is dependent on having those apps installed on the device, not on the Windows version or edition. In addition, the removal of filters applied in the settings picker may be necessary if you want to add these settings to your policy.  
App configured to install in system context didn’t applyStart by checking that the app doesn’t have a dependency or supersedence relationship on any of the apps configured to install in the user context. As of yet, Windows 10 or Windows 11 Enterprise multi-session doesn’t support user context apps.
Update rings for Windows 10 and later policy didn’t applyAt the time of writing, Windows Update for Business policies aren’t yet supported.

Availability of FSLogix Profiles

Another exciting new feature recently announced, is the availing of FSLogix Profiles for Azure AD-joined VMs for hybrid users in Azure Virtual Desktop. You can make use of Azure AD Kerberos with Azure Files to access file shares from Azure AD-joined VMs. This means you can then use to store your FSLogix profile containers. This new feature is going to provide you with the following capabilities:

  • You can now configure Azure Files with Azure AD Kerberos by using only a single checkbox.
  • Azure AD-joined Session Hosts can now achieve configuration with Azure AD Kerberos.
  • You can leverage Azure AD Kerberos to store FSLogix profile containers in Azure Files shares.
  • Access permissions for hybrid users, managed in Active Directory are also configurable.
  • The network line-of-sight from the Session Host to the Domain Controller can now be removed.

Getting started with Azure Virtual Desktop

This new release will be available on Windows 10, Windows 11, and Windows Server 2022 session hosts. Before you proceed, you first need to check the requirements to configure Azure Files with Azure AD Kerberos authentication.

A network line-of-sight from the session host to the domain controller is not necessary for FSLogix profiles in Azure Virtual Desktop. It will still be a requirement for configuring the permissions on the Azure Files share.

Configure your Azure storage account and file share

You will need to follow the steps given below to store your FSLogix profiles on an Azure file share:

  1. Start by creating an Azure Storage account if you don’t already have one.
  2. Next, you go to your storage account and create an Azure Files share where you can store your FSLogix profiles.
  3. To enable access from Azure AD-joined VMs you need to enable Azure AD Kerberos authentication on Azure files.
  • For the configuration of the directory and file-level permissions you need to go to Configure the storage permissions for profile containers. And go through the recommended list of permissions for FSLogix profiles.
  • It’s possible for users to accidentally delete the user profile or access the personal information of different users. This is common if you do not put in place adequate directory-level permissions. Such mishaps are costly and need to be avoided by ensuring all users have the proper permissions.

Configure the session hosts

Configuring the session hosts is required for you to be able to access Azure file shares from an Azure AD-joined VM for FSLogix profiles. To do this, you can follow the steps below:

  1. You first need to enable the Azure AD Kerberos functionality and there are a few methods you can use to do this:
  2. Configure this Intune Policy CSP and apply it to the session host Kerberos/CloudKerberosTicketRetrievalEnabled.
  3. You can also configure the Group policy and use it for the session host: AdministrativeTemplates\System\Kerberos\Allow retrieving the Azure AD Kerberos Ticket Granting Ticket during logon
  4. Lastly, you can create the following registry value on the session host: reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters /vCloudKerberosTicketRetrievalEnabled /t REG_DWORD /d 1 
  • If you want to use Azure AD with a roaming profile solution such as FSLogix, then the credential keys in Credential Manager should be from the currently loading profile. Having it set up this way means that you’ll be able to load your profile on many different VMs. By simply running the command below, you can create a new registry value. This enables the setting: reg add HKLM\Software\Policies\Microsoft\AzureADAccount /v SLoadCredKeyFromProfile /t REG_DWORD /d 1   

Configure FSLogix on the session host

  • Configuring a VM with FSLogix is possible by following a set of instructions whenever you configure a session host. You have several options available to make sure that the registry keys are set on all session hosts. These images can be set in an image or you could configure a group policy. See the steps for configuring FSLogix below:
  • If necessary, start by updating or installing FSLogix on your session host. In instances where you want to create the session host using the Azure Virtual Desktop service, you’ll need to have FSLogix already pre-installed.
  • To create the Enabled and VHDLocations registry values you should follow the instructions in Configure profile container registry settings. The value of VHDLocations should be set to: \\<Storage-account-name>.file.core.windows.net\<file-share-name>

Test your deployment

The final step, after completing the necessary steps for the installation and configuration, is to test the deployment. This allows you to verify everything is working properly. You can do this by signing in with a user account with assignment to an application group on the host pool.

Before you sign in, make sure that the account that you are going to use has the necessary permission to use the file share. For any users that have previously signed in, you’ll find available existing local profiles that the service is going to use during the session.

If you don’t want to create a local profile, then you can create a new user account to use for your tests. Alternatively, you can enable the DeleteLocalProfileWhenVHDShouldApply setting by using the configuration methods that you can find in Tutorial: Configure profile container to redirect user profiles.         

With these steps complete and the user sign-in successful, you can go ahead and check the profile in Azure Files.

Directions

  • Navigate to the Azure portal and sign in with an administrative account.
  • Next, go to the sidebar and choose Storage accounts.
  • You’ll need to then select the storage account that you had configured for your session host pool.
  • Once again, go to the sidebar and this time choose File shares.
  • Find the file share that you configured to store the profiles and select it.
  • What you should now see depending on whether everything has been configured correctly is a directory with a name formatted in the following manner: <user SID>_<username>.   

In addition to testing your deployment, you may occasionally encounter issues with FSLogix products. Below is a table demonstrating some actions you can take, should you encounter challenges.

Issues

IssueActions you can take
Profile ContainerPerform a comparative analysis between the data from this documentation and the current values of Status, Reason, and Error. Identify non-zero codes by looking at the log files. Verify you’ve met all requirements. The FSLogix Profiles product can only work properly if this patch is installed for users of Windows 7 or Windows Server 2008 R2. Additionally, check that the Enabled setting is set to 1. Check the ‘VHDLocations’ setting for a valid file system location. Check on the file server to see if the user has the necessary permissions to the VHD(X). Verify that the user is on the local FSLogix Profiles Include group rather than the Exclude groups there a pre-existing local profile for the user?
Office ContainerPerform a comparative analysis between the data from this documentation and the current values of Status, Reason, and Error. Check for non-zero codes being returned by looking at the log files. Check that you’ve met all requirements. Check that the Enabled setting is set to 1. Check the ‘VHDLocations’ setting for a valid file system location. Verify that the user is on the local FSLogix ODFC Include group rather than the Exclude group. You should expect to NOT see OneDrive icons when using Windows Server 2016 as this is intended. When FSLogix is virtualizing Outlook Search you should also expect to NOT see Outlook in the windows indexing options.
Application MaskingCheck that the rules have been moved to the Rules folder. Using sc query frxsvc and sc query frxdrv verify that the service and driver are running.  Check for non-zero codes being returned by looking at the logs. Verify in the assignment files that the user is included in the assignment: Open the rule in the rule editor. Next, click the manage assignments button. Check that the concerned user is on the list and that the rule applies. In cases where folders or files are hidden from an excluded user then check that the Apply Rules to System button is not clicked.
Java Version ControlVerify that rules are loading properly by checking the IE Plugin for errors. From Tools > Manage Add-ons, check that FSLogix Internet Explorer Plugin is installing and enabling. Also, check that the rules move to the Rules folder. Additionally, check that you’re using 32-bit Java. Ensure that the Service and Driver are running.

Wrap Up About Azure Virtual Desktop

Organizations are witnessing a rapid change in the work environment as well as the preferences of employees. And as the popularity of cloud-based solutions grows organizations are having to invest in technology that supports a hybrid working model. This has plenty of potential benefits for any organization. Also, these include employee satisfaction garnered from some now preferring to work from home when possible.

By leveraging Azure Virtual Desktop, you can get a secure and cost-effective solution that eliminates the complexities of legacy virtualization infrastructure. This means no more fretting over managing licensing, RDS gateways, load balancing, and more.

In addition to the already extensive list of capabilities, Microsoft is now introducing Azure Virtual Desktop multi-session with Microsoft Intune and FSLogix Profiles for Azure AD-joined VMs. These new capabilities are going to further enhance the user experience and potentially increase productivity. Users will get an improved experience that gives them the familiar Windows 10 or Windows 11 experience. Without a doubt, these new features will help your organization to have a more efficient hybrid environment.

Script to add a Windows 365 Cloud PC User – Add-CloudPCUser.ps1

Script prerequisites for Windows PowerShell:

1. A minimum Windows PowerShell version of ‘7.2’ is required to run this script. The script automatically checks for and installs module if needed.

2. Windows 365 Cloud PC Management PowerShell Module must be installed on local machine. The script automatically checks for and installs module if needed.

3. Microsoft Graph PowerShell Module must be installed on local machine. The script automatically checks for and installs module if needed.

4. An Azure AD user that has an admin consent permission, if needed, to approve the following permissions in Microsoft Graph application in Azure AD apps:

CloudPC.ReadWrite.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.ReadWrite.All, Directory.Read.All

.PARAMETER Username

Username to add to Windows 365 Cloud PC

.PARAMETER UsersListPath

CSV file path containing a list of users to add to Windows 365 Cloud PC. Sample file contents:

———- Windows PowerShell Continued

upn

[email protected]

[email protected]

[email protected]

[email protected]

.PARAMETER Group

Azure AD group name to add users to

.EXAMPLE

.\Add-CloudPCUser.ps1 -Username [email protected] -Group IT -Verbose

.EXAMPLE

.\Add-CloudPCUser.ps1 -UsersListPath c:\temp\users.csv -Group Sales -Verbose

Direct link: Add-CloudPCUser.ps1
Github – https://github.com/ThomasMarcussen/assortedScripts/

Taking A Closer Look At Windows 365 Security

The idea of having a desktop that you can access from just about anywhere is an incredible option to have. Not only that but you can do so using your PC, tablet, or smartphone. As can be seen by the disruptions we witnessed to business activities at the height of the pandemic, the lack of viable options can be disastrous. Hence why the Windows 365 Cloud PC has been very well received by organizations since coming onto the scene in 2021. It gives organizations a solution that they may not have had a few years back.

You can provide desktops for employees regardless of where they are working from. Be it at home or in the office, the Cloud PC remains accessible and productivity levels can be maintained.

But, the key question is how secure is Windows 365? Can the corporate network remain secure with the use of Cloud PCs?

Getting started with Windows 365

Organizations that use Windows 365 will benefit from an end-to-end connection flow for all their employees thus allowing them to work in a secure environment. Windows 365 has been designed with Zero Trust principles being integral to the security structure.

What this means is that clients have a great foundation that allows them to apply controls that help them to better secure their environments across the 6 pillars of Zero Trust. Microsoft allows you to implement Zero Trust controls in the following areas:

  • Securing access to the Cloud PC – this is something that is crucial to Identity and it enables you to set the specific regulations concerning who can access the Cloud PC and under which conditions.
  • Securing the Cloud PC device itself – the actual Cloud PC devices that one uses to access corporate resources require extremely high security. So this is an important category that allows for the securing of the Endpoint by placing extra security measures on the devices themselves.
  • Securing the Cloud PC data and other data available while using the Cloud PC – this last area allows you to place additional security measures to secure the data itself that users will need to access. Also, you can place extra measures on how Cloud PC users can access the data.

Default features

Microsoft has a few features that are enabled on all new Cloud PCs by default. These include:

  • Virtual Trusted Platform Module (vTPM): a vTPM is a virtualized version of a hardware Trusted Platform module and is designed to be compliant with the TPM2.0 spec. What it offers you is a dedicated secure vault for keys and measurements. With trusted launch, your virtual machine will get its own dedicated TPM instance that will run in a secure environment outside the reach of any VM.
  • Secure boot: this next feature could be described as something that provides the foundation of trusted launch. Secure boot is a mode that is implemented in platform firmware and enhances the overall security posture by protecting against the installation of malware-based rootkits and boot kits. Basically, what you get is a system that ensures that only signed operating systems and drivers can boot. Therefore, any image that Secure Boot fails to Authenticate will be restricted from booting.

As a result of having the above features enabled, Windows 365 will support the enabling of the Windows security features below:

  • Hypervisor Code Integrity (HVCI)
  • Microsoft Defender Credential Guard

Automatic enrollment

Another key thing that Microsoft has advised clients to secure their Windows 365 Cloud PCs is to configure devices to enroll into MEM using automatic enrollment. However, to do that, you need to meet the following requirements:

Sign in Intune in Microsoft Endpoint Manager

Start by signing in to the MEM admin center as a Global administrator. If you are using the Trial subscription, then the account you used to create the subscription becomes the Global administrator.

Set up Windows 10/11 automatic enrollment

If you want to enroll both corporate and bring-your-own-devices, you’ll have to use MDM enrollment. In addition, you have to sign up for a free Azure AD Premium subscription.

  1. Navigate to the MEM admin center. Select All services > M365 Azure Active Directory > Azure Active Directory > Mobility (MDM and MAM).
  2. Choose Get a free Premium trial to use this feature. This enables auto-enrollment using the Azure AD free Premium trial.
  3. Select the Enterprise Mobility + Security E5 free trial option.
  4. Click Free trial > Activate the free trial.
  5. Choose Microsoft Intune to configure Intune.
  6. Go to the MDM user scope and select Some. This enables you to use MDM auto-enrollment to manage enterprise data on your employees’ Windows devices. This will configure MDM auto-enrollment for AAD joined devices and bring your own device scenarios.
  7. Click Select groups > Contoso Testers > Select as the assigned group.
  8. And then for data management on your workforce’s device, choose Some from the MAM Users scope.
  9. Choose Select groups > Contoso Testers > Select as the assigned group.
  10. And then, for the remaining configuration values, you’ll use the default values.
  11. Choose Save.

Windows 365 Business

Windows 365 comes in two different options to cater to the various businesses and their different needs. Microsoft intends for Cloud PCs to be available for both small and large enterprises. Therefore, smaller organizations have Windows 365 Business that can meet the needs of the business.

If your organization does not have an IT department/staff or central IT management solutions then this is the option for you. This option gives end users local admin rights to their Cloud PCs in a way that is typically seen with smaller businesses.

In instances where IT would like to use Windows 365 Business for a particular scenario, Microsoft recommends sticking to standard IT protocols. That is, of course, if you intend to set users as standard users on their devices. You can use Microsoft Endpoint to carry this out and to do so you need to follow the steps below:

  • The process starts with device configuration to enroll the devices in MEM using automatic enrollment.
  • The next step involves the management of the Local Administrators group. This can be done using Azure Active Directory (Azure AD) or using Microsoft Endpoint Manager.
  • In addition, it would be a good idea to have Microsoft Defender Attack surface reduction (ASR) rules enabled. This would be very useful because these rules are in-depth defense mitigations for specific security concerns, such as blocking credential stealing from the Windows local security authority subsystem.

Windows 365 Enterprise

When it comes to Windows 365 Enterprise, the process is slightly easier for IT admins. This is because, for the Enterprise license, Cloud PCs are automatically enrolled. Not only that but they also get reporting of Microsoft Defender Antivirus alerts as well as optional onboarding into Microsoft Defender for Endpoint capabilities.

By default, Enterprise users are automatically set up as standard users. However, admins still retain the option to make per-user exceptions when necessary. The guidelines for users of Windows 365 Enterprise Cloud PCs are as below:

  • Users should stick to standard Windows 10 security practices. This also means restricting access to your Cloud PC using local administrator privileges.
  • You need to deploy Windows 365 security baselines to your Cloud PC from MEM. Furthermore, you should utilize Microsoft Defender to protect your endpoints, especially all Cloud PCs.
  • Taking advantage of Azure AD conditional access is a must. With features such as multifactor authentication (MFA) and user/sign-in risk mitigation, you can significantly reduce the risk of unauthorized access to your Cloud PC.

Enhancing your security posture with Windows 365

Microsoft offers organizations security recommendations that are meant to enable you to improve your security. These guidelines are as follows:

Conditional Access

Microsoft recommends the use of Conditional Access policies to improve your authentication processes. These policies are central to the zero trust strategy and help to secure your corporate network by putting strict controls concerning which devices can access it and how. You can even configure Conditional Access policies to meet the specific needs of your business and your Windows 365 environment.

Microsoft Defender for Endpoint

Microsoft Defender for Endpoint (MDE) has been described as an enterprise endpoint security platform designed to help enterprise networks prevent, detect, investigate, and respond to advanced threats. Organizations can connect MDE to their Cloud PC devices and thus have access to security procedures that are an industry standard for endpoint protection.

You can significantly improve your security because of how MDE can easily integrate with other Microsoft security tools. Clients with Windows 10 or Windows 11 licenses will get Microsoft Defender and Microsoft Defender Firewall as part of Windows Security which comes with their subscriptions. This also includes firewall and network protection, account protection, virus and threat protection, and device security among others.

Another thing to be aware of is that if you have a Microsoft 365 E5 plan then you’ll also get Microsoft 365 Defender. This service, which may also be purchased as an add-on for other Microsoft 365 subscriptions, compiles security data from the Microsoft 365 ecosystem and organizes it into a centralized dashboard.

And the way this dashboard has been designed simplifies the task for admins by making it easier to detect and respond to threats while setting aside the non-urgent. Ultimately, leveraging this security platform will help organizations to provide next-generation cybersecurity for their Windows 365 environment.

Intune compliance

The use of Intune compliance policies is highly recommended as a way to set the requirements and settings that users and devices must abide by to be considered compliant. These policies can be used in conjunction with Conditional Access policies for your Windows 365 environment. This means that you can block any non-compliant devices from accessing corporate resources until any issues have been resolved.

Regular updates

Another recommendation that Microsoft gives has to do with OS updates. Devices need regular updates to not only maintain high levels of security but to keep enhancing performance as well. Occasionally, vulnerabilities are discovered that may be exploited so updates will help mitigate those issues and provide new features as well. And when it comes to Cloud PCs, IT admins can use Endpoint Manager to configure Intune Windows 10/11 update rings and policies for Windows Update for Business.

Admin rights

With regard to Windows 365 Business, the target market is small businesses that may not have an IT team to manage the environment. So it makes sense that users are granted local admin rights. For Windows 365 Enterprise, on the other hand, users will not get those same privileges. And this is by default so as to be in line with Windows 10/11 security guidance.

Integration

Microsoft further enhances the overall security by having an integration between Microsoft Defender for Endpoint and Windows 365. What this means is that security and endpoint admins can collaborate on the management of the Cloud PC environment just like for any regular physical endpoint. If subscribed, Cloud PCs will:

  • Send data through to Microsoft 365 Secure Score.
  • Have the option to view unhealthy PCs on the Microsoft Defender for Endpoint Security Center and threat analysis dashboards.
  • The response of Cloud PCs to remediation measures will replicate that of any other managed devices.

Deployment of security baselines

Every organization needs specific security controls that can help to address its cybersecurity needs. To ensure the highest level of security, Microsoft recommends using industry-standard security measures that have been well-tested.

With Windows 365 security baselines, you’ll be getting Microsoft-recommended security measures that are based on best practices and expert feedback. This will help to improve the security of your Cloud PCs because of the recommendations you benefit from. Windows 365 security baselines are going to affect the following areas:

  • Windows 10 settings: 1809
  • MDATP settings: version 4
  • Edge settings: April 2020 (Edge version 80 and later)

Applying Windows 365 baselines

Microsoft also optionally allows you to apply Windows 365 security baselines to the Azure AD groups containing Cloud PC devices in your tenant. Once you are ready to deploy the security configurations, you’ll follow the steps below:

  1. Navigate to the Microsoft Endpoint Manager admin center and sign in. Then select Endpoint Security > View Security Baselines
  2. Select Cloud PC Security Baseline (Preview).
  3. Next, you select Create Profile and then give a name for the profile.
  4. The groups of settings for the baseline you chose can now be viewed on the Configuration settings tab. If you want to view the settings in a particular group as well as the default values for those settings in the baseline, all you need to do is expand the group. And if you want to see specific settings:
  5. Select a group to expand and from there you can review the available settings.
  6. You can use the search bar to type in specific keywords so that you get results displaying only the groups that match your search criteria.

Default configurations

All the settings in a baseline will have default configurations for that particular baseline version. To cater to varying business needs, Microsoft gives you the option to reconfigure the default settings. You will also notice that depending on the intent of the baseline, some baselines will have the same setting but will use different default values for that setting.

  • Next, go to the Assignments tab and select a device group with Cloud PCs to include. After that, you’ll need to assign the baseline to one or more groups with your Cloud PCs. You can use Select groups to exclude to fine-tune the assignment.
  • After completing the above and you’re ready for deployment, go to the Review + create tab and review the details for the baseline. To save and deploy the profile click on Create.

Application of the baseline to the assigned group is carried out immediately following the creation of the profile.

Implementing Conditional Access

Conditional Access is a system designed to enhance the security of corporate networks by restricting access to verified and compliant devices. Being a policy-based approach allows you to configure the specific conditions that you want to apply to the access controls. As Microsoft puts it, these policies are basically “if-then” statements. If a user needs to access certain resources on the corporate network then it follows that he/she will need to meet certain requirements. Using Conditional Access can help you to accomplish the following:

            ◆ Enable users to maintain productivity levels wherever they may be.

            ◆ Safeguard corporate resources.

Assigning conditionalcccess policies to cloud PCs

Windows 365 Enterprise admins should be aware that Conditional Access policies aren’t set for tenants by default. So to assign policies to the Cloud PC first-party app you’ll need to use either of the following services:

            ◆ Azure

            ◆ Microsoft Endpoint Manager by performing the steps below:

  1. Navigate to the MEM admin center and sign in. Proceed to select Endpoint Security > Conditional Access > New Policy.
  2. The specific Conditional Access policy that you want will require you to provide a name for it.
  3. Go to the New Policy tab and select Specific users included which you’ll find under Users and groups. Next, you need to pick the specific user or group that you want to target with the policy. You also get the option to Exclude certain users or groups if that’s the way you want to set up.
  4. Select No cloud apps, action, or authentication contexts selected. You can find this option under Cloud apps or actions.
  5. Select Cloud apps > Include > Select apps.
  6. Next, head over to the Select pane. Here you’ll need to search for and select the apps below:
  7. Windows 365 (you can also search for “cloud” to find this app).
  8. Windows Virtual Desktop (this may also appear as Azure Virtual Desktop)

More to know about Windows 365

Ensuring that the policy is applied to the Cloud PC end-user portal as well as the connection to the Cloud PC.is achieved by choosing both of the apps above. Choosing both of these apps is also necessary if you want to be able to exclude apps.

  • Fine-tuning a policy can be performed by going over to Access and then choosing the options that you want to apply to all objects assigned to this policy.
  • Before you proceed any further you may want to test the policy. This can be done by going to Enable Policy and turning the setting Report-only to Off. This will prevent the policy from being applied as soon as you’ve completed the creation process.
  • All that’s left now is for you to select Create and you’ll complete the creation of the policy.

If you want to see the list of your active and inactive policies, navigate to the Policies view in the Conditional Access UI.

Windows 365 wrap up

Remote desktop services offer countless benefits to businesses that can help enhance the overall performance of the business. Businesses can easily have hybrid workforces without having to sacrifice productivity. Not only that but services like Windows 365 ensure that if an unexpected event such as the COVID-19 pandemic occurs, the disruption to business activities can be minimized.

However, all of this doesn’t mean much without the best security features you can get to safeguard corporate data as well as the physical devices that employees use. And Microsoft has provided Windows 365 clients with a wide array of security features to ensure that Cloud PCs have next-generation protection. This will make it such that the user experience becomes significantly better.

Getting Set up With Windows 365

Cloud computing and Cloud PC has come a long way in the last couple of decades. As a way of delivering various on-demand IT resources over the internet, cloud computing has an endless list of applications. These can then offer individuals and organizations alike access to resources that may otherwise be beyond their means.

As you can imagine, the cost of running an on-premises IT environment can be very steep. This is why cloud computing is being adopted by a lot of organizations as they realize the benefits and convenience you get. And Microsoft has been providing these services for a long time but with Windows 365, the company is looking to make cloud computing even better.

Windows 365

Windows 365 is a Desktop as a Service offering that was introduced by Microsoft in 2021. It is designed to provide both small and large organizations with a cloud computing environment that can adequately meet the various needs. And when you consider that Microsoft already had other virtualization technologies on offer, you can trust that this new service will give you some of the best of those other technologies.

In fact, Windows 365 is built on the Azure infrastructure so that already breeds confidence in the service. Microsoft has basically leveraged its existing products and gone for a new approach to delivering virtual desktop infrastructure. Organizations can use the Cloud PC to increase security as well as productivity. In addition, having a cloud-based Windows PC can also help employees collaborate better regardless of where they physically are.

By using the Windows 365 Cloud PC, users will be able to stream their Windows PC to any supported device. And this is something that you can do using either a browser or a native RDP client.

Rooted in simplicity

Arguably the key foundational concept of Windows 365 is simplicity and so Microsoft has designed the service to be relatively easy to set up and use. In line with that, you’ll get to use all your favorite tools such as Microsoft 365, Microsoft Dynamics 365, Microsoft Power Platform, and plenty more.

Furthermore, Windows 365 comes in two editions to cater to both small and large enterprises. The Windows 365 Business edition targets the small to medium enterprise sector that may only need a few desktops. Organizations can get up to 300 desktops and will be charged a fixed rate that depends on the selected hardware configuration.

For larger enterprises, there is Windows 365 Enterprise which can help you to integrate the desktops with your existing Azure virtual network.

Simplifying virtual desktop infrastructure

One of the things that Windows 365 aims to do is to ensure that it can avail cloud computing to as many people as possible. With traditional VDI environments, you would need to set up a server, install applications, and then provide access to users.

But, Windows 365 does away with all of that. Microsoft has designed a product that has all the building blocks automated for you and will take care of all the virtualization. In addition, the service can scale with you in a highly optimized way to use Microsoft 365 apps.

Your organization doesn’t need to worry about the hardware and software configurations of the devices that your users have. Admins will be particularly glad to hear this because it means that deployment will become significantly easier and faster.

Traditional VDI may sometimes have limitations regarding where one can get access. This is not so with Windows 365 as users can access their Cloud PCs from anywhere on almost any device. The kind of freedom that Windows 365 gives its users is what makes it the ideal product for an increasingly hybrid world.

Device requirements

So, before you get started with setting up your Windows 365 environment, you’ll need to find out what the device requirements are. Are there any specific devices that your organization needs to purchase if you want to use Windows 365? Fortunately, there’s not much to worry about in this regard because Microsoft wants to make accessing Cloud PCs convenient and easy.

Therefore, Windows 365 will do this by allowing you to use most devices which Microsoft also hopes will help you reduce your IT costs in the hardware department. Because Windows 365 is essentially PC hardware that runs in the cloud, the importance of your actual physical device is significantly less.

As long as you have an internet connection, you’ll be able to operate a reasonably powerful Windows PC using just about any device. To access this Cloud PC, you can use any modern browser or the Remote Desktop app.

Additional benefits of Cloud PC

A setup like this is going to be extremely beneficial for organizations that have a sizeable remote or seasonal workforce. Your organization won’t need to make a massive investment in hardware for all those employees. Even better is the fact that they’ll be able to easily access these Cloud PCs anywhere without losing any progress.

In short, all Windows 10 and Windows 11 devices should be compatible with Windows 365. The best part, however, is that clients will be able to easily stream a Windows 365 session to hardware running macOS, iOS, Linux, and Android.

However, for the best experience, Microsoft recommends devices that have a traditional keyboard and mouse. For the most part, as long as your device has an HTML5 browser and a DSL connection or a wireless internet connection capable of streaming a video you will be just fine. The amount of bandwidth that you’ll need, however, will depend on your workload.

How much does it cost?

Microsoft offers Windows 365 at varying prices to cater to the different needs of the target organizations. From the small outfit needing only a handful of PCs to the larger enterprises that may require unlimited options. Not only that but it also helps to ensure that users will only pay for what they need.

So, support staff can get a Cloud PC that works for them, and individuals such as engineers that have heavier computing needs can also get something that suits them. You can get Cloud PCs in multiple configurations from $20 per user per month for the lowest-end SKU, to $162 per user per month for the most expensive one.

This fixed per month pricing model is something else that distinguishes Windows 365 from Azure Virtual Desktop which is consumption-based. And if the need to scale up ever arises then you have the option of doing that by getting a different subscription.

Windows 365 Business Edition

For the Windows 365 Business edition, the $20 per user per month fee is going to get you a single virtual core, 2GB of RAM, and 64GB of storage. Although you will require Windows Hybrid Benefit, which is Microsoft’s Bring-Your-Own license model that is designed to help clients to apply existing (or new) licenses toward the cost of a product.

Otherwise, if you don’t have Windows Hybrid Benefit then the cost goes up to $24 per user per month. At the other end of the spectrum, clients will be able to purchase the Business SKU that offers eight virtual cores, 32GB of RAM, and 512GB of storage for $158. And similar to the previous one, without Windows Hybrid Benefit the cost goes up, this time to $162.

Larger organizations have the Windows 365 Enterprise edition designed for them and the pricing range is similar. Users that have lighter computing needs can get a single virtual core with 2GB of RAM and 64GB of storage for $20 per user per month. And for the other users that require virtual machines that can deliver significantly more, you can get an option that gives you eight virtual cores, 32GB of RAM, and 512GB of storage for $158 per user per month.

Provisioning with Cloud PC

The provisioning process is going to create a Cloud PC virtual machine and then set it up for a user. Provisioning also enables the completion of other tasks that will prepare the machine for use as well as the sending of access information to the user. To start the process, admins will have to provide configuration details to set up the process.

Once that’s been done, users that have a Windows 365 license that matches the configuration details will automatically get Cloud PCs provisioned for them. However, each user and license pair can only have one Cloud PC provisioned for them because the provisioning setup works on a one-time per user and per-license basis. The steps of the provisioning process are given below:

  • A provisioning policy is created to manage access to the Cloud PCs. These provisioning policies are integral to the process because they are responsible for building, configuring, and availing Cloud PCs to end-users. As such, each policy needs you to provide information about the on-premises network connection, the image used to create each Cloud PC, and an Azure AD user group.
  • The provisioning process will begin with the assignment of a Windows 365 license to users in the Azure AD user group. Subsequently, Windows 365 will then proceed with the automatic provisioning of the Cloud PC. And after doing that, the necessary access information will be sent to the user. The automation is performed in 3 phases that will remain invisible to the administrator.
  • Once all the above has been carried out successfully, what only remains is for the end user to get the access data that will provide them with access to sign in to the Windows Cloud PC from anywhere.

Improving the Cloud PC setup process

In the first few months of 2022, Microsoft announced that it was implementing a few changes meant to make setting up Cloud PCs even easier. The announcement informed us about how Windows 365 was going to get the “join” feature. Azure AD joined devices are those whose computer object is no longer stored in the on-premises Active Directory Domain Services environment.

Instead, it is now located in Azure Active Directory. By using Azure AD Join you’ll be able to join devices directly to Azure AD without the need to join to on-premises Active Directory. And all this can be done while keeping your users productive and secure. Your admins can easily leverage Azure AD Join for both at-scale and scoped deployments. According to Microsoft, this feature was highly requested by organizations who wanted to simplify the onboarding process.

Microsoft’s announcement

When Microsoft made the announcement, it was said that Azure AD join had been the most requested feature since Windows 365 reached general availability. So, admins will be glad to know that they now have the possibility of using Azure AD join as a Cloud PC join type option.

Therefore, what this means for organizations is that you no longer need to have an existing Azure infrastructure to use the service but just your Azure AD users. All of this has been done to make it easier for admins to onboard users using Azure Active Directory.

Expectedly, this presents a massive upgrade, especially when looking at how integral Azure AD is to Microsoft’s identity and security services. Bringing the ‘join’ feature to the Windows 365 platform will go a long way in maintaining the theme of ease of use that Microsoft has described for its Cloud PC.

Before this upgrade, the ‘join’ feature had helped businesses that use the on-premises version of Active Directory by functioning as a device-joining bridge. Simply put, adding Azure AD Join to the Windows 365 platform is going to enable admins to enroll devices without the need to have on-premises Active Directory. Now all you need to do is use your Azure AD users.

Accessing your Cloud PC

After everything has been set up it’s time for users to learn just how they can connect to the Cloud PC. We need to clarify what clients can be used as well as what options the end-users will have. Also, we need to know how administrative credentials can be provided to the end-user. Microsoft has provided two ways for users to connect to the Cloud PC:

  1. Web browser – the first method that users have for accessing the Cloud PC is via a web browser. All you have to do is simply navigate to windows365.microsoft.com. Once there, you can log in with the user credentials that have a desktop provisioned. The portal will show you an overview of the desktops available to you. However, to access the Cloud PC using this website, users’ devices need to meet the following requirements:
  2. supported operating systems: Windows, macOS, ChromeOS, Linux,
  3. a modern browser like Microsoft Edge, Google Chrome, Safari, or Mozilla Firefox (v55.0 and later).

Task management

When using windows365.microsoft.com, end users can carry out various tasks on their Cloud PCs. They only need to select the gear icon on a Cloud PC card.

  • rename: doing this will change the name of the Cloud PC that the user sees on the website. But, performing this action doesn’t change any name in Microsoft Endpoint Manager. Nor does it change Azure Active Directory, on the device, or in the Remote Desktop Apps.
  • restart: this will restart the Cloud PC.
  • troubleshoot: whenever a user is encountering challenges with connecting to the Cloud PC, this will help to resolve those challenges. A few checks will verify that all the files and agents necessary for connectivity have been properly installed. There will also be a check for the availability of Azure resources.
  • Remote desktop – the second method that Microsoft offers clients for connecting to the Cloud PC. This works by using the Microsoft Remote Desktop app. This is designed to enable users to access and control a remote PC, including a Cloud PC. So, for those who have been using Azure Virtual Desktop, this is an app they will already be familiar with. Setting up the Remote Desktop is a relatively simple process that requires you to follow a few steps:
  • first, you’ll have to download the Remote Desktop app. You can find it on the Download App page at www.microsoft.com/windows-365?rtc=1.
  • next, you select Subscribe.
  • the next step will require you to enter your Azure Active Directory credentials.
  • you will then see the Cloud PC appear on a list. Simply double-click it to launch.

Cloud PC security

Microsoft provides Cloud PCs with good security measures straight out of the box. And just like you have with your physical computers, Windows 365 Cloud PCs will come with Microsoft Defender. This helps to ensure that your device is secure from the first-run experience.

Also, the provisioning of the Cloud PCs is done using a gallery image. To ensure improved security, the image will have the latest updates for Windows 10 through Windows Update for Business. However, there are a few differences between what exactly you’ll get for Windows 365 Business and for Windows 365 Enterprise.

Windows 365 Business

Since Windows 365 Business is a service aimed at smaller organizations, particularly those that may not have IT staff, users on this edition are granted local admin rights to their Cloud PCs. So, this situation basically replicates what happens with a lot of small businesses. And users purchase computers and retain local admin rights.

For IT departments that want to use Windows 365 Business for particular cases, they need to follow standard security practices. These intend to make those users standard users on their devices. To use MEM for this approach, you’ll need to follow the guidelines below:

  • The process starts with device configuration to enroll the devices in MEM

               using automatic enrollment.

  • The next step involves the management of the Local Administrators group.

               This can be done using Azure AD or MEM.

  • In addition, it would be a good idea to have Microsoft Defender Attack Surface Reduction (ASR) rules enabled. This would be very useful because these rules are in-depth defense mitigations for specific security concerns. These include blocking credential stealing from the Windows local security authority subsystem.

Windows 365 Enterprise

When it comes to Windows 365 Enterprise, you’ll start to see some significant differences right away. This edition intends to serve organizations that have dedicated IT teams. This makes things slightly easier for IT, too. It provides a system that is bases on the management and security that Microsoft Endpoint Manager provides. All Cloud PCs in Windows 365 Enterprise configure users as standard users by default.

However, admins still have the ability to make exceptions on a per-user basis. Furthermore, all Cloud PCs will be enrolled in MEM with reporting of Microsoft Defender Antivirus alerts. You’ll also get the ability to onboard into the full Microsoft Defender for Endpoint capabilities. Microsoft makes the following security recommendations for users of Windows 365 Enterprise:

  • Users should stick to standard Windows 10 security practices. This also means restricting access to your Cloud PC using local administrator privileges.
  • You need to deploy Windows 365 security baselines to your Cloud PC from MEM. Furthermore, you should utilize Microsoft Defender to protect your endpoints, especially all Cloud PCs.
  • Taking advantage of Azure AD conditional access is a must. With features such as MFA and user/sign-in risk mitigation, you can significantly reduce the risk of unauthorized access to your Cloud PC.

Wrap up about Cloud PC

There has been a lot of talk about remote work and hybrid work environments in recent years. And with the growing interest, a product like Windows 365 is perfec to meet the needs of most organizations. The flexibility and scalability of the platform offer an endless list of benefits. And it makes it valuable to users both at home and in the office.

Additionally, Microsoft built the product to be simple to configure. It’s additionally easy for businesses that don’t have specialist IT professionals on staff. All of these benefits, among many others, combine to give you an incredible virtual experience that runs on the highly secure Microsoft Cloud.

What You Need To Know About Windows 365 Lifecycle

Organizations have countless products that they have to enable them to optimize the productivity of staff members. These products can come from different vendors and so it’s extremely important to guarantee the quality of these tools. And when there is a lifecycle policy available, like with Windows 365 lifecycle, organizations are confident. They can be certain that the products they are purchasing have been rigorously tested, are built extremely securely, and will meet any necessary compliance and security regulations. With Windows 365, clients know that they are using a product that meets all of the above and can perform to very high standards.

Windows 365 Lifecycle Policies

Microsoft gives its customers products that come with industry-leading lifecycle policies. These ensure that when purchasing a product, you’ll be receiving something with consistent, transparent, and predictable guidelines for software support and servicing.

And these policies are valid for all Microsoft customers regardless of where they are across the globe. However, it’s important to remember that how these policies are used will depend on the regulatory requirements in other countries. Also, the application of these policies may differ according to the industry sector.

The level of quality that customers get is a result of the development process. Microsoft puts into high-quality methods into these Windows 365 lifecycle policies. In addition to the specialists at Microsoft, the process also involves customers, partners, and analysts to produce a policy that meets all expectations.

Because of this, customers can plan better and manage their support requirements effectively. Microsoft provides Fixed Lifecycle policies for products that have defined end-of-support dates at the time of release. Then, for products that will receive continuous support and servicing, there are Modern Lifecycle Policies.

Fixed Windows 365 Lifecycle Policy

This type of policy is aimed at plenty of commercial and some consumer products. Customers can acquire through retail purchase and/or volume licensing. It is a policy that offers:

  • Defined support and servicing Lifecycle timeline at the time of product launch.

Receiving the support may possibly require you to deploy the latest Service Pack or update.

Modern Windows 365 Lifecycle Policy          

This type of policy is designed for products that will be serviced and supported continuously. However, there are certain conditions that need to be met for products and services to remain in support. These requirements are as follows:

  • It will be the customer’s responsibility to ensure that they stay current. This includes servicing and system requirements that are defined for a particular service or product.
  • Customers also need to verify that they are licensed to use the service or product.
  • It’s again necessary to check that Microsoft currently offers support for that service or product.  

Microsoft provides a modern lifecycle policy for Windows 365. This ensures Cloud PC users will have a great product that has continuous support.

The Cloud PC lifecycle

Microsoft has developed a setup whereby Windows 365 will coordinate and manage the lifecycles of all Cloud PCs. And due to the fact that Cloud PCs exist only in the cloud, the management of their lifecycles will be significantly easier than that of physical Windows devices. The lifecycle of the Cloud PC comprises 5 stages which are:

  1. Provision
  2. Configure
  3. Protect
  4. Monitor
  5. Deprovision

Provision

In keeping in line with the goal of making things simple, Windows 365 provides clients with an optimized experience for Cloud PC deployment. Microsoft has integrated the admin experience for setting up deployments into the MEM admin center.

The provisioning process will prove to be easier than one may imagine because it is an automated one. All you need to do is assign a Windows 365 license to a user. Then, add them to a group targeted with a provisioning policy, and the provisioning of the user’s Cloud PC will proceed automatically. The process will:

  • create a Cloud PC virtual machine.
  • set it up for the end-user.
  • perform any other necessary tasks to ready the Cloud PC for use.
  • send access information to the user.

A simplified admin experience

What Microsoft has done is create a simplified admin experience that makes the provisioning much simpler and more straightforward. Once you’ve finished providing a few configuration details, Cloud PCs will be automatically provisioned for all users who have a Windows 365 license and matching configuration details.

Because this process is a one-time per user and per license process, a user and license pair can only have a single Cloud PC provisioned for them. The complete process is going to follow the steps below:

  • Starts with the creation of a provisioning policy to manage access to the Cloud PCs. Provisioning policies are key to the entire process as they are responsible for building, configuring, and availing Cloud PCs to end-users. Each policy requires you to provide details regarding the on-premises network connection, the image used to create each Cloud PC, and an Azure AD user group.
  • Assignment of a Windows 365 license to users in the Azure AD user group will begin the provisioning process. And the provisioning of the Cloud PC will be carried out automatically by Windows 365. After which it will then send the necessary access information to the user. The automation is going to proceed in 3 phases that will be invisible to the administrator.
  • The last part of the process involves the end-user receiving the necessary access information. This will allow them to sign in to the Windows Cloud PC from anywhere.

Configure

As for Cloud PCs, they need to be configured and secured similarly to any other endpoint in your environment. Microsoft integrates configuration into the provisioning process thus making it simpler. Every Windows 365 Cloud PC will either be:

  • Azure AD joined or
  • Hybrid Azure AD joined.

Azure AD joined devices can be deployed by any organization regardless of the size or sector of a business. Moreover, Azure AD join will work in hybrid environments. This gives you access to both cloud and on-premises apps and resources. These devices can be signed into using an organizational Azure AD account.

To enhance the security of corporate resources, access can be controlled depending on the Azure AD account as well as the Conditional Access policies that govern the device. You also get Mobile Device Management (MDM) tools. These include Microsoft Intune or Microsoft Endpoint Configuration Manager. Both allow admins can use to enhance security and establish greater control over Azure AD joined devices.

Great for hybrid organizations

Hybrid Azure AD joined devices are joined to your on-premises Active Directory and registered with Azure Active Directory. This scenario can be a good option for hybrid organizations that already have on-premises AD infrastructure. The hybrid Azure AD joined devices can be signed into with organizational accounts. This works by using a password or Windows Hello for Business for Win10 and above. The key capabilities available include:

  • Configuration Manager standalone or co-management with Microsoft Intune
  • SSO to both cloud and on-premises resources
  • Conditional Access through Domain join or through Intune if co-managed
  • Self-service password reset and Windows Hello PIN reset on lock screen.

Once the Cloud PCs have been joined they will then be enrolled into Microsoft Endpoint Manager. Because of this enrollment, every Cloud PC will be instantly ready for Azure AD Conditional Access. And management through Microsoft Endpoint Manager granted. And this also includes co-management if necessary.

Microsoft Endpoint Manager plays the vital role of using compliance policies. They enable you to verify that your Cloud PCs are compliant. Understandably, when it comes to cloud computing, security is of very great concern. Windows 365 does a great job of addressing that through the optimized security baseline that is available for Cloud PCs. Leveraging this baseline would be a good way to securely configure your Cloud PCs with minimal overhead.

However, in case you have concerns, the baseline is optional. Additionally, you’ll find that these baselines have been optimized to ensure that remote connectivity won’t be affected.

Protect

The integration between Windows 365 and the rest of Microsoft 365 intends to ensure that you can secure your Cloud PCs to meet your standards. Similar to physical devices that come with Microsoft Defender for Endpoint, the Windows 365 environment will also get the same security.

Because of Microsoft Endpoint Manager’s integration with Microsoft Defender for Endpoint, your Cloud PCs will get instant protection as soon as they provision occur. As a result, Cloud PCs get excellent security measures in place from the first-run experience.

Gallery imagery

Also, it’s worth noting that the provisioning of Cloud PCs uses a gallery image. And to further strengthen your security, the image will have the latest updates for Windows 10 through Windows Update for Business. Among the available features include the ability to use the endpoint detection and response capabilities of Microsoft Defender for Endpoint to determine device risk.

Similarly, you can also get protection for your Windows 365 environment through Azure AD Conditional Access. This protection comes with an option that would be of great interest to certain users whereby you can exclude Windows 365 itself from device compliance policies.

The advantage that this has is that it allows your end users access to their Cloud PCs from any supported device they choose. However, to ensure that those users are securely authenticated, Windows 365 offers multi-factor authentication, sign-in risk, and various other controls.

Updates are another key element in ensuring a highly secure Cloud PC environment. With that in mind, Windows 365 will carry out the installation of the latest quality updates using the Windows Update auto-scan ability.

It’s important to verify that your end users sign in to their newly provisioned Cloud PCs as soon as possible so that the necessary updates can install swiftly. Another thing that you can do to strengthen security is to disable the clipboard and drive redirection so that you optimize data loss prevention. By disabling this feature, users won’t be able to:

  • Copy or paste information from their Cloud PCs to other unmanaged locations.
  • Save files to their personal devices from Cloud PCs.

Monitor

For Windows 365 to work effectively for its users, it’s extremely important to verify that the end user gets a virtual machine that can adequately meet their needs. To aid in this operation, Windows 365 integrates with the Endpoint analytics in Microsoft Productivity Score

These analytics are important for providing you with insights that allow you to measure how your organization is working as well as the quality of the experience that you are delivering to your users.

Leveraging the data on offer can help you identify policies or hardware issues that are causing problems for end users such as long boot times or other disruptions. All of this generally stems from IT not having enough feedback or visibility into the end user experience.

So to resolve this, Endpoint analytics aim to improve user productivity while simultaneously reducing IT support costs thanks to the provision of insights into the user experience.

Additionally, Endpoint analytics gives you a measurement of the compute and memory load on your Cloud PCs. Following this, you can use Windows 365 to resize those Cloud PCs so that they can meet the needs of different users and their apps.

A seamless experience

Along with other device actions, the resize is available in Microsoft Endpoint Manager. And setting it up this way allows you to have a seamless experience between your Cloud PCs and other endpoints.

Another tool that you can use to enhance Cloud PC monitoring and remediation is Proactive Remediation. These remediations are script packages that can detect and fix common support issues on a user’s device before users even realize there’s a problem.

By using these remediations, you can vastly improve the end user experience as well as reduce the load on support staff. They are also very flexible so you can schedule them to run hourly, daily, etc. Not only that but you can create your own script packages to perfectly meet your requirements.

Alternatively, you can deploy one of the provided script packages that should help you in reducing support tickets. Ultimately, by using Proactive Remediation, you can extend the built-in Microsoft 365 optimizations that are provided by Windows 365. Among these optimizations include those for a heterogenous IT environment.

Deprovision

Now and again a situation may arise that may require you to revoke a user’s Cloud PC access. And Windows 365 provides you with a couple of remedies. You can use these to remove anyone’s access.

The first method you can use involves removing the user’s license or targeted provisioning following which the Cloud PC will transition into a seven-day grace period. The potential benefit of this option is that it allows for errors and reinstatement in a way that does not affect the user.

Alternatively, if you need to block access immediately, you can disable the user account in the on-premises Active Directory. You can additionally revoke the user’s refresh tokens in Microsoft Azure Active Directory.

So, at the expiration of the seven-day grace period, Windows 365 will then deprovision the Cloud PC and its storage completely. The encryption of Windows 365 Cloud PCs using server-side encryption in Azure Disk Storage (platform-managed keys) helps to ensure that the devices deprovision securely.

However, if you find yourself in a situation whereby you determine that removing a user’s license was the right course of action and not a mistake, then you don’t need to wait out the seven days.

Windows 365 allows you to proceed with your action by clicking on the In Grace Period state and then selecting End Grace Period. Consequently, this will transition the Cloud PC to the state of Deprovisioning while the Cloud PC is deleted.

Cloud PC operating systems

As I’ve already gone over above, Windows 365 lifecycle policies govern operating systems’ servicing and support. And this also includes end of support. When we talk of lifecycle we are referring to the period during which Microsoft provides support for the operating system as well as releases regular security updates.

Also, we find that not all products share the same lifecycle timeline. The lifecycle timeline of each product will be determined by its respective lifecycle policy. And this will also be consistent by product family for new and future versions. With the older products, however, lifecycle timelines may differ so there will be a need to verify the necessary information.

Windows 365 Cloud PCs run on the Windows OS and are therefore governed by the Microsoft 365 Lifecycle Policy. When the operating system on a Cloud PC eventually reaches the end of support, it will no longer receive security updates, non-security updates, and assisted support.

Image status

Windows 365 keeps up to date of all necessary end of support information in Microsoft Endpoint Manager. There the information will be located on the Provisioning policies page under Image status. Below is information you can use to verify whether the OS on the image within each provisioning policy is supported or not.

Image statusGallery imageCustom image
SupportedThis lets you know that the Cloud PCs that have been created using this policy have a Windows operating system that is supported by Microsoft and can thus receive updates.Same as gallery image.
WarningIn this scenario, the OS would have expired within the previous six months. So the Cloud PCs that were created using this policy have an OS that is no longer supported. Because of this, those Cloud PCs are extremely vulnerable and don’t benefit from security updates.Same as gallery image.
UnsupportedThe Cloud PCs created using this policy would be running a Windows operating system that hasn’t been supported for over six months. So this is a policy that can no longer be assigned to any users. Consequently, you will need to resolve the issue by updating the OS image in the provisioning policy to an image with a supported OS. All Cloud PCs that were created using this policy are vulnerable and no longer receive security updates. Furthermore, they cannot be provisioned or reprovisioned. If you were to attempt to provision a Cloud PC using this policy you would not be successful and face a Windows Image out of Support message.Not applicable.

You can also find the status values for custom images under the OS support status column on the Device images page. Once we get to the end of support date, you’ll no longer be able to select gallery images that use the expired OS for newly created provisioning policies. In addition, those images also won’t be available for use when editing existing provisioning policies.

Wrap Up on Windows 365 Lifecycle

As with all Microsoft products and services, Windows 365 is governed by a Lifecycle policy enabling the delivery of industry-leading service to clients. In a world of rapidly increasing cybercrime, organizations are looking for products and services that get excellent support and regular security updates.

And as more and more organizations are migrating to the cloud and adopting Windows 365, the modern lifecycle policy that governs Windows 365 takes on even greater importance. It gives you a clear picture of what to expect from the provisioning of your Cloud PCs all the way to the deprovisioning protocols.

Leveraging the support that Microsoft provides will help your organization to run a more streamlined IT environment. Coupled with the ease with which you can deploy Cloud PCs to your users, this clearly highlights the principle of simplicity that Windows 365 is known for most. So, for any organizations that are considering a cloud computing environment, one such as Windows 365 would be a great option to consider.

Understanding Windows 365 Government

The interest in cloud computing technology has grown significantly over the last few years. Although it has been around for at least a couple of decades, a lot of businesses simply lacked interest in adopting the technology.

But, since the COVID-19 pandemic, many now recognize just what value cloud computing brings to their organizations.

Among the many potential benefits, it can enhance the security of your corporate data, it can reduce IT expenditure, and it can also contribute to greater employee satisfaction. As a leader in this space, Microsoft wants to offer clients a platform that can deliver the best of cloud computing. And this is where Windows 365 comes in.     

What is Windows 365?

Windows 365 is a service that Microsoft designed to offer clients an operating system on the cloud. This means that you can stream a Windows 365 PC to your PC, tablet, or even mobile phone. According to Microsoft:

“Windows 365 is a cloud-based service that automatically creates a new type of Windows virtual machine (Cloud PCs) for your end users. Each Cloud PC is assigned to an individual user and is their dedicated Windows device. Windows 365 provides the productivity, security, and collaboration benefits of Microsoft 365.”

So, what that ultimately means is that all those that are subscribed to the Windows 365 service will get access to all Microsoft apps and can access them using the Cloud PC on their device of choice. This allows Microsoft to address the growing need for hybrid work models as well as a platform that can offer flexible access to the Windows operating system.

And Microsoft assures prospective clients that their data will be extremely secure regardless of what device an individual may be using or where they may be working from. This is because all processes run on the highly secure network of Microsoft servers.

How it helps

As a result, your IT environment gets an excellent degree of protection that comes with all the benefits of the Windows Enterprise model.

Microsoft offers Windows 365 under two subscription models. Windows 365 Business which is aimed at organizations with 300 employees or fewer, and Windows 365 Enterprise which is meant for much larger organizations.

However, it’s worth noting that these two models both have the same range of features. As far as configurations go, we get twelve Windows 365 Cloud PC configurations with the cheapest one offering one vCPU, 2GB RAM, and 64GB storage, and setting you back $20 per user per month. At the other end of the spectrum, users that perform compute-heavy tasks have the option of purchasing a subscription that gives them 8 vCPUs, with 32GB RAM, and 512GB storage for $158 per user per month.

Analyzing Windows 365 Government

Microsoft wants to ensure that its Windows 365 Cloud PC offering is available to all organizations that require it. And this includes the federal government of the US. With this service, US government users can have Cloud PCs automatically created for them.

As a version of the Cloud PC designed for federal employees and contractors, Windows 365 Government will be offered for Government Community Cloud (GCC) and Government Community Cloud High (GCC High). According to Microsoft, this offering provides a full Windows 365 experience designed to meet the extremely high security and compliance requirements of the US government.

This will allow US government users to benefit from the power and security of the Microsoft Cloud to enhance the user experience through flexibility and innovation.

A better line of support

This service is going to extend to US government agencies, contractors, partners (State, Local, Federal Civilian, Defense), and native Indian tribes (US only). The users who will have access can stream their Windows apps, data, content, and settings from the Microsoft cloud to any supported device at any time in an extremely secure environment. Microsoft promises to deliver the complete Windows experience by offering the following advantages:

  • Personalization – you can easily stream all your apps, content, and settings to any supported device from the Microsoft cloud.
  • Powerful – Microsoft makes a point of emphasizing that the Cloud PC is a scalable service that brings you the complete Windows 10 experience on the device of your choice. And as of December 2022, clients will also have the option of Windows 11.
  • Simplicity – potential clients can provision and deploy Windows on a Cloud PC at their convenience using either Microsoft Intune or going through windows365.microsoft.com
  • Secure – the Cloud PC already has some great security benefits but those will be even further enhanced with the new security features that you can expect to get with Windows 11.

As one would expect, the cloud environment that US government users have access to is understandably different from what’s available to other organizations. For most other organizations, there is Microsoft 365 Commercial which is the standard Microsoft 365 cloud.

This is where we will find Enterprise, Business Essentials, Academic, as well as home Office 365 tenants. It comes with a comprehensive list of tools and features, widespread availability across the globe, and a very competitive pricing model. As far as the Government Community Cloud is concerned, we can look at it as a version of the commercial environment specifically designed for government use.

Unique differences

We’ll find that the majority of the features available are generally the same. But the biggest difference is that in this case, the data centers only present in the continental United States. This is so that the environment complies with the FedRAMP Moderate and adheres to the following requirements:

  • DFARS 252.204-7012 (As of February 2021 Microsoft will now attest to compliance)
  • DoD SRG Level 2 (with no provisional authority)
  • FBI CJIS (Criminal Justice Information Services)
  • FedRAMP High

Importance of the Government Community Cloud

The government cloud environment has to meet stringent security and compliance requirements some of which do not apply to the commercial environment. This is why Microsoft has found it necessary to create several, different cloud environments that can meet the various needs of the US government. Therefore, we find that there are 3 types of government clouds that Microsoft offers. These are:

  • Government Community Cloud – this particular type is ideal for local, civilian, and federal government agencies.
  • GCC High – this type is similar to the previous one but is for highly classified government users as well as those that they have business dealings with.
  • DOD cloud – this one is a level higher than GCC High and is specifically for intelligence agencies.

Microsoft has several cloud services and solutions that uniquely serve government employees. These are the services that we’ll find:

Microsoft Azure Government

This cloud gives you a platform designed with the key principles of security, privacy and control, compliance, and transparency at the heart. Because of this, government entities will benefit from a physically isolated instance of Microsoft Azure. It provides the highest level of security services to ensure that US government systems and applications can run seamlessly.

There are hundreds of different services available for businesses, organizations, and agencies that are looking for cloud computing services. Among these services, there are full virtual machines, services for mobile and web apps, file storage, backups, and databases to name a few.

What Microsoft Azure offers organizations is the ability to leverage the resources provided by the vast network of highly secure Microsoft servers. Doing this eliminates the need to host your own infrastructure. In turn, it could come at great expense to both purchase and maintain.

By using Azure, on the other hand, you can pay for what you need and no more. And if the need arises to scale your environment, then you don’t need to worry about purchasing even more hardware to do so.

With Azure, organizations can host email servers, user directories, and web servers. Additionally, they can accommodate databases, virtual machines, and file storage servers among other things. Taking advantage of what Azure has to offers a host of benefits. It means that organizations can basically hire a very secure data center that doesn’t cost as much as on-premises infrastructure.  

Office 365 US Government

Office 365 is undeniably one of the key productivity tools for plenty of organizations. And Microsoft ensures that this service is also available to the US government. The Microsoft 365 for US Government Cloud offering for clients will include Windows 10, Office 365, and Enterprise Mobility + Security features for US government customers.

Additionally, to cater to the varying needs of different organizations, Microsoft offers several versions of this service. This means that educational institutions, nonprofits, customer service employees, and more can all get a version that meets their needs. It also goes without saying, the service is built to adhere to the strict security and compliance requirements of the US government.

Microsoft avails this service to various organizations including tribal entities and governments at the local, state, and federal levels. Those in the defense can benefit from Office 365. They also work with entity contractors who can also benefit greatly from using Office 365 for US Government.

Dynamics 365 Government

The US public sector has a large number of very unique requirements that are constantly changing. So, to cater to the needs of qualified US government entities Microsoft came up with Microsoft Dynamics 365 Government. This service represents the continuing progress of the highly protected environment that was previously named Microsoft CRM Online Government. With the evolution of the service, Microsoft offers protections to the government community cloud in the form of eight separate functions:

  • Customer Service
  • Customer Voice
  • Field Service
  • Finance
  • Guides
  • Omnichannel Engagement Hub
  • Project Service Automation
  • Remote Assist on HoloLens or HoloLens 2
  • Sales
  • Supply Chain Management

The service is available for several different organizations including the following:

  • Federal, state, local, tribal, and territorial government entities in the United States.
  • Private organizations that are using Dynamics 365 Government to provide solutions or services to various government entities.
  • Private organizations that deal with customer data and use Dynamics 365b Government to meet the government’s regulatory requirements.        

Familiar experience

One of the best things about Windows 365 Government is how it aims to offer the same Windows experience. Government users can expect the same service that all other clients are used to. When using this platform, all Cloud PCs will be provisioned within a US government data center.

But, for those familiar with the Cloud PC, the experience will remain largely the same. If you’ve already experienced Cloud PCs in the commercial cloud, you’ll already be familiar. The experience you’ll get in the Government Community Cloud environment will offer you familiar tools and provisioning policy configuration.

Windows 365 Government is easier

This makes getting up to speed with Windows 365 Government significantly easier. And there is no need to train users to use a completely new service. Additionally, clients that use both Commercial and GCC environments will get the convenience of using the same identities and credentials.

Cloud computing using the Windows 365 Cloud PC is meant to eliminate as much as possible. Even the complexities that have been previously associated with virtualization technology are simplified. End-users get a transparent platform that is easy to use but also extremely secure.

But, using Windows 365 Government is also great for IT admins. They don’t need to worry about meeting the stringent security and compliance requirements of the US government. Ultimately, this gives Windows 365 clients a service that enables them to potentially reduce their operational costs. It effectively manages their hybrid environments as well as both legacy and modern applications.      

Are all the available features supported yet?

Government users would like to know how extensive the features available for Windows 365 Government really are. Especially for individuals that are already familiar with the Cloud PC experience. However, it’s worth noting that there are features that aren’t as yet available. These include the following:

  • Configure installed language and region for provisioning Cloud PCs
  • Digital forensics and placing a Cloud PC under review
  • Unified dashboard
  • Virtualization-based workloads
  • Endpoint analytics support (this is supported in GCC)
  • Windows 365 Security baseline
  • RDP Shortpath for public networks
  • Windows 365 System based alerting on Microsoft Endpoint Manager for Cloud PCs
  • User initiated feedback in End User Portal and Windows 365 Web Client
  • Resize VM

How does it compare to AVD?

This is, as you would expect, one of the most frequently asked questions by people considering Windows 365. Windows 365 offers clients virtual desktops known as Cloud PCs. These come at a fixed per user per month cost whereas Azure Virtual Desktop uses a consumption-based pricing structure. Windows 365 Cloud PCs are dedicated to a single user. This is unlike AVD which is a more traditional VDI setup accessible to multiple users.

When it comes to management, Windows 365 offers a simplified system that resembles the management of physical devices. However, AVD is heavily reliant on Azure management concepts. Ultimately, what you get with Windows 365 is a platform that is built to fully enhance the user experience while AVD is geared more towards flexibility.

Setting up users

Microsoft has put in place a system that makes it relatively easy to set up users with Cloud PCs. Even when you need to onboard thousands of Windows 365 devices you aren’t going to necessarily require an entire team of admins to get the job done. One of the key areas of focus when it comes to Windows 365 is simplicity and that applies to the onboarding process as well. This means that the ease with which users can be set up allows a single admin to be able to onboard hundreds or even thousands of devices.

As Microsoft has explained, the tools available to admins and the management of Cloud PCs are very much similar to how admins handle physical devices. So even for federal government clients who want to bring their own image the simplified, accelerated onboarding process remains the same.

Regardless of whether you’re talking about a handful of devices or a thousand. The admin can easily upload a custom image to the provisioning policy and can then assign groups to it with each group having a single user or a thousand.

Establishing ease of use

Windows 365 aims to make the use of Cloud PCs a simple process for all its clients. But, working in a regulated US government cloud is typically not the easiest of things. This is why Microsoft is determined to extend the ease of use of Windows 365 to its government clients. For instance, GCC customers that want to have their data and Cloud PCs to be hosted in the government cloud can use the same identity and credentials as for the commercial cloud.

So, by doing this, Windows 365 Government makes it significantly easier for clients to access their Cloud PCs on the secure government cloud. On the other hand, admins will still be able to meet the very high security requirements of the US government. Also, organizations can potentially run their operations more cost-effectively as they adopt an increasingly cloud-based approach.

End-users have their experiences made simpler because of the potential to have one identity that can authenticate both to on-premises resources as well as provide easy access to their Cloud PCs in Microsoft Azure for Government.

And users can do this through the Windows 365 portal at windows365.microsoft.com or through the remote desktop app on Windows, MacOS, iOS, and Android. There is also a recent addition to this list with the Windows 365 native client app which has recently been put in public preview and can be found in the Microsoft Store.

Looking at the admin experience

Administrators will find that the cloud-native Windows 365 architecture for GCC is delivered to customers FedRAMP compliant.  This means that admins will not need to make any other configurations thus keeping in line with the concept of simplicity. Admins can also stay in Entra (AAD) and Intune in Azure Commercial for the provisioning and administration of Cloud PCs in Microsoft Azure for Government (MAG).

Microsoft has also addressed the issue of clients who are already invested in the Microsoft Azure Commercial environment. Trying to rebuild everything in MAG would be a huge task that would probably come at a significant cost.

Therefore, Microsoft came up with the idea of a dual cloud execution that would see the identity and management planes remaining in the Azure Commercial environment. On the other hand, all the Cloud PC resources would be provisioned and accessed in the Azure for Government environment.

Management tools

One of the reasons why Windows 365 can repeatedly highlight how easy it is to use is the availability of the same tools that you use to manage physical devices. This means that end users and admins can operate in the same familiar environment that they have become accustomed to over the years.

Therefore, clients don’t need to learn how to function in a completely new environment and admins can keep the same controls and tools that they want. So, the way that you have been using tools for Endpoint Configuration Manager is going to translate to Windows 365 Cloud PCs. And this is regardless of whether you are operating in the commercial cloud or the government cloud.

Wrap Up

The modernization that we are seeing in the modern workplace is not only limited to the commercial sector. It goes beyond that and we can now see that government agencies are also leveraging cloud services at a faster pace than in the past.

As a result, this is having a massive impact on the way these entities operate. But, to do this effectively there is a need for a platform like Windows 365 Government that can provide the services needed for optimal operation.

Not only that but Windows 365 Government meets the stringent security and compliance requirements of the US government. This allows government entities to take advantage of the vast array of tools that Windows 365 offers to commercial entities without compromising security.

Analyzing the Economic Impact of Windows 365 on Businesses

In 2021, Microsoft added a new product to its software portfolio. The Windows 365 Cloud PC enables users to experience a cloud version of Windows 10/11 from their personal devices. And given what we have experienced in the last few years, the value of the Cloud PC to businesses is significant with real economic impact. No longer do employees have to be confined to their physical offices.

In fact, according to a survey done by Microsoft, 73% of workers would like to maintain flexible and remote work options. But, this presents a challenge for businesses. Can a hybrid workforce be a viable option? Also, what value if any would businesses stand to gain from such a work environment?

Below, I want to go over just what Windows 365 may potentially offer your business. Not only that, but it’s also important to know how the Cloud PC compares to some of the other options.

Adopting a cloud computing model

Windows 365 is ushering in a new era of computing that is putting aside the enterprise PC for an innovative Cloud PC. The latter is highly secure and always available thus offering users a different way of approaching their work.

But, as with any new technology, there are several concerns that need to be addressed. Businesses are concerned about how they would effectively manage a hybrid workforce with employees working remotely.

And then there is the issue of security. How do you secure the corporate network when employees are using personal devices that were never meant for the office?

Then there are concerns about operational viability as well as setting up costs. What about the time it will take as well as the cost to train your staff? 

These are only a few of the very real concerns that businesses have when the issue of setting up a cloud computing environment comes up. However, Windows 365 was designed to resolve all those issues to businesses’ satisfaction.

Incorporation of significant changes

Cloud computing is not something new and plenty are already familiar with it. And because several businesses already have experience with various other VDI platforms, they will be wondering what makes Windows 365 different from the technology they already have in place. After all, why pay for another service that potentially does the same thing? But, we very quickly realize that Windows 365 is very different from traditional on-premises VDI environments.

One of the biggest selling points of the Cloud PC is its ease-of-use. Microsoft has designed it to be simple to set up and easy to use. You can have new employees fully set up with Cloud PCs in a matter of hours. Something that could take weeks with legacy infrastructure.

You only have to look at what it takes to run on-premises VDI systems. Businesses have to purchase the necessary servers, set them up, install all the applications you’ll require, and then go through the often long process of onboarding users.

Windows 365 just about eliminates all of that. Offering you a Cloud PC means that Microsoft alone will take care of the virtualization. Ultimately this will make the deployment of operating systems a lot faster since you won’t have to deal with the hassle of hardware and software configurations.

The automation of the various processes also means that there is no need for additional VDI expertise or resources. Microsoft will also ensure that you can scale the service as necessary to meet your organization’s needs. And as organizations start to reap the benefits of a highly productive and remote workforce, the need for a solution like Windows 365 grows even more.

The ability to customize and provision a desktop based on the users’ needs means that for the most part, it doesn’t really matter what device an individual is using. It also doesn’t matter whether it’s a corporate-owned device or a personal one. The security measures that come with Windows 365 ensure that end-users can securely access corporate resources on personal devices.

What can businesses expect with Windows 365?

The Cloud PC is designed to offer a better cloud experience than other services on the market. Including Windows traditional devices. Developed for hybrid working, Windows 365 can offer the kind of flexibility that allows seamless device changes without affecting the status of the work. Not only that, but users will be happy to know that Windows 365 is compatible with other Microsoft 365 business applications. This means that you won’t miss out on your favorite apps such as Word, Planner, or SharePoint.

According to Wangui McKelvey, general manager for Windows 365, “However, the ability to work anytime, anywhere has become the new normal. All employees want technology that is familiar, easy to use, and available across devices. In the most complex cybersecurity environment weve ever seen, organizations need a solution that helps their employees collaborate, share, and create while protecting their data. We have the opportunity to develop the tools that enable this new world of hybrid work with a new perspective and the power and security of the cloud.

There’s plenty to like about Windows 365 with all the features available that benefit businesses and create significant economic impact. Features that enable this service to be a game changer in the world of cloud computing. And these features include:

  • Instant boot to a personal Cloud PC,
  • Clients get the full Windows experience in the cloud,
  • Clients can also stream various applications, tools, data, and settings directly from the Microsoft cloud across any device,
  • You get a choice of running either Windows 10 or Windows 11,
  • Secure by design, and fully compliant with Microsoft’s Zero Trust principles,
  • Flexible per-user, per-month pricing plans at flat subscription rates,
  • A scalable set of virtual hardware parameters that lets you adjust to changing conditions whenever necessary,
  • Fully compliant with Azure AD and Microsoft Endpoint Manager,
  • Fast setup process that provisions your Cloud PC within minutes.

Financial Windows 365 considerations

Outside of security, the economic impact and financial side of things is probably the biggest area that the Cloud PC needs to address. What sort of economic impact would adopting the Cloud PC have on your organization? If we consider a study by the Enterprise Strategy Group (ESG), using Windows 365 may possibly increase your annual potential revenue by up to $14,000 per user. For smaller businesses, there is mention of a possible annual benefit of up to $7000 per user. Undoubtedly, these kinds of figures could provide massive upturns in the performance of any business.

Now we may only be talking of potential here but those are really good numbers to look at. You also have to consider that Windows 365 can possibly lower your hardware expenses as well. Think about the costs involved in purchasing, running, and maintaining on-premises network servers. What about the cost of refreshing your hardware every now and again or providing new hires with devices? All these are costs that can be lowered when using Windows 365.

Windows 365 offers Cloud PCs at a fixed per-user/per month cost. This allows businesses to plan their budgets with greater certainty. Being able to accurately plan in advance can help increase revenue streams and decrease unexpected expenses. Below we’ll go over just what kind of security clients can expect from Windows 365. The high-end security that Microsoft has put in place means that businesses can rest assured that their data will be highly secure.

Simplified onboarding process

With traditional VDI environments, setting up new employees may take weeks. I’m sure we can all agree that this is far from ideal in a busy work environment. The beauty of Windows 365 is that deployment of Cloud PCs has been designed to be relatively easy. So much so that even if your organization doesn’t have the expertise to set up a traditional VDI it still won’t be too much of a challenge.

The process is simple and enables your business to onboard new employees with IT equipment, regardless of location, within a matter of hours. This gives users the advantage of using devices they are familiar with and thus comfortable with. While on the other hand, businesses need not worry about the security of corporate resources.

The swiftness with which employees can be onboarded can significantly reduce downtime and allow businesses to maintain productivity levels. In addition, this also makes it easier to bring on temporary workers when the need arises. Setting up temporary employees is done quickly and when their services are no longer required, access can be revoked just as quickly. So if you have seasonal workers, they can cycle on and off very easily.

Economic impacts and operational flexibility

As mentioned above, recently many workers have begun stating their desire to have flexible work conditions. Plenty are choosing to work from home if the option is availed to them. Windows 365 can make this a viable option for most businesses that are willing to consider it.

And accessing your PC on the cloud can even help organizations build an international workforce seeing as geographic boundaries are less of a concern with cloud computing. This can help businesses bring in the best talent regardless of location. The flexibility of Windows 365 also extends to your relationships with independent contractors.

A business won’t need to purchase company PCs for all these individuals nor go through a lengthy onboarding process. People who can benefit greatly from this include IT professionals, consultants, physicians, and countless others. Windows 365 can grant them access to your environment in a safe and as-needed capacity.

Enhanced network security with Windows 365

One of the key areas of great concern when establishing a hybrid workforce is security. How do you maintain a high level of security over corporate resources? Especially when you consider that employees may be using personal devices. But, Microsoft designed Windows 365 using Zero Trust principles. Also, it is powered by the security architecture of Microsoft Azure thus providing an incredibly secure cloud computing environment.

When it comes to the use of personal devices, Windows 365 can prevent the compromise of corporate data by configuring how those devices interact with the Cloud PC. This provides an enhanced layer of protection around the corporate network to safeguard data.

In addition, businesses need continuity strategies in case of disaster or something like the COVID-19 pandemic. Windows 365 is well placed to address these kinds of scenarios. With access to Cloud PCs, businesses will significantly reduce the risk of massive disruptions if disaster ever strikes. Microsoft has a wide distribution of data centers meaning your Cloud PCs will remain accessible and your data secure. The redundancies built into the system are designed to ensure that.

Another security issue concerns the offboarding process for employees or independent contractors. This can prove challenging especially when you have unhappy individuals in possession of expensive company devices. And when these individuals still have access to your network then your corporate data becomes extremely vulnerable.

There have been reports that have stated that 20 percent of companies have experienced breaches due to disgruntled former employees. However, with Windows 365 that is not a concern. This is because the offboarding process is swift with employees’ access to corporate resources being revoked immediately.

Windows 365 Accessibility

Microsoft offers the Windows 365 platform to both small and large businesses. There are options available that can cater to the needs of most. And the fixed price model means that businesses can find it easier to accurately predict the cost of use. Once the system is up and running, users can access their Cloud PCs from anywhere and may even use their mobile phones to do so. This means that productivity levels can be maintained when employees are traveling or working from home.

Additionally, because your desktop now resides on the Microsoft Cloud, your physical devices have slightly less value. Even if your laptop or mobile device is stolen, your desktop, as well as corporate data, will remain secure. Also, because the heavy computing runs on the cloud, users don’t need to worry about having powerful devices to run resource-intensive apps.

Certain design and engineering apps, for instance, may require a significant amount of processing power. But, with the cloud handling the processing you can take advantage of these apps on less powerful devices. And when it comes to the types of apps you can access on the Cloud PC, Microsoft has designed it such that all your apps that work on Windows 10/11 will run on the Cloud PC. So accessibility is not limited to Microsoft apps.

Localized user experience

A few decades ago English was considered the language of the internet by most. And this was understandable given how much of the early development was taking place in English-speaking regions. However, for a long time now that is no longer the case.

A lot of people across the globe are now very much active online. People from different cultural backgrounds and different languages. This means that localization of the user experience can no longer be something to consider as an afterthought. Microsoft has clients from all different continents and so it’s important to cater to the various needs.

A large part of the attraction of Windows 365 is that businesses both great and small can have options that will work for them. But, Microsoft wants to expand not only the reach of Windows 365 but the ease of use as well. To that end, Microsoft is aiming to simplify the configuration process by enabling admins to set up local language Cloud PCs easily and at first login.

Breaking the language barrier with Windows 365

This localization feature, which was announced earlier this year, is going to allow you during the stage of creation of provisioning policies to configure a Language & Region pack to be installed on the Cloud PCs during provisioning. Microsoft reported that there would be a selection of 38 languages to pick from.

So this creates a situation where organizations from various regions across the world can use the Cloud PC with greater ease. For any business that may have been hesitant to subscribe because of language barriers, Microsoft has addressed that.

Furthermore, those who have already provisioned their Cloud PCs can also take advantage of this feature. It has been set up to enable admins to change the configured language for any existing provisioning policies that you choose and subsequently reprovision any desired Cloud PCs.

This is going to give your admins something to be happy about as they will save a lot of time by not having to manually install language packs onto a custom image to localize Cloud PCs. All they need to do now is simply configure language settings in a gallery image. The time saved will also benefit the business as IT staff can spend more time on business-centric endeavors and aim to improve overall productivity.

Better workforce management

Windows 365 can play an integral role in helping your business improve in the area of workforce management. The features that the service provides are designed to enable you to optimize the way your business operates. As a result, you can expect to have the tools you need to put the right people in the right place at the right time to enhance your client’s experience in a way that will reflect positively on your revenue stream.

Leveraging Windows 365 can improve your use of time thus improving your efficiency and productivity. The ease of use that Microsoft has emphasized helps your employees because they don’t need to spend time maintaining the environment or resolving issues. Also, the available collaboration platforms such as Microsoft Teams facilitate instant communication and simplify working together for teams who may be in different locations.

Adapting to remote workforce management

Those communication platforms are equally important in ensuring that employees who are working remotely retain the same degree of efficiency and productivity as their peers who are on-site. As this trend of remote work continues to grow, those in leadership positions will need the flexibility to comfortably perform their management duties without missing a step.

This is why it’s so important that you can access your Windows 365 Cloud PC from anywhere on just about any device. Additionally, you can create various groups of people on Microsoft Teams so that those managing people working on the same project find it a lot simpler. Regardless of where they or you are.

A lot of businesses are in great need of innovative solutions that can promote rapid growth without relying on massive amounts of investment. Windows 365 has got this well covered. There are a wide range of options available with both Windows 365 Business and Windows 365 Enterprise.

So there’s something for everyone. From the small business trying to grow to the huge enterprises looking to streamline their operations. Because of the pricing structure, scaling up is easy and relatively affordable allowing you to acquire more resources as your business expands.

Another thing that helps with better workforce management is the fact that Windows 365 will be responsible for software updates and new releases. This helps your business to focus its energies on critical, productive endeavors. Not only that but you can also eliminate the exhaustive and costly task of refreshing dated hardware. As long as your current hardware is compliant with the Windows 365 requirements then you won’t need to worry about your hardware anytime in the near future.

Support availability

A good part of the overall value of a service can be attributed to the support that clients can expect to receive. If a problem was to arise with your Cloud PCs you would need for it to be attended to swiftly. From the beginning, Microsoft has designed Windows 365 to be easy to use. Unlike with Azure Virtual Desktop, businesses won’t require the services of an Azure Solutions expert to configure and manage the Windows 365 environment.

Microsoft also announced that they would look to help clients become more proficient at using Windows 365 clients by hosting Ask Microsoft Anything (AMA) events specifically dedicated to Windows 365. According to the announcement, these meetings would be scheduled for the fourth Wednesday of every month starting February 2022. So all clients that are using or considering Windows 365 should find these events a great source of information.

Getting support

Any questions that you have about Windows 365 will be up for discussion including questions regarding the available features, provisioning, deployment, customization, best practices, and anything else you may need clarification on. And Microsoft will have members of its engineering and product teams available at these hour-long events to help you and provide you with the answers you need. Therefore if your organization wants to get the most out of running Windows in the cloud, there’s probably no better place to get the information you need.

Another place where one can find out more about Windows 365 is the Windows 365 Tech Community. This platform can also provide great support to Cloud PC users by addressing any issues they may be encountering. But, the information available may also be of great value to businesses looking to establish a Windows 365 environment. They can get feedback from the community members regarding their interest in Windows 365.

Ease the load on IT staff

As one is going through the information that we have on Windows 365, it becomes abundantly clear that there are countless benefits for end-users. But, your IT admins will also want to know if they’ll see changes when compared to other services. And the reality is, that the ease of use principle that Microsoft applies to Windows 365 extends to your IT team as well.

From the management perspective, there is plenty to be excited about starting with the fact that there is no need to have headaches about the infrastructure you need to set up to get the Cloud PC experience. Microsoft handles that side of things. Also, admins won’t need to get certified in anything else or learn new management tools. This is because Windows 365 is designed for all organizations even those without expert IT pros on staff to be able to run it without difficulty.

Furthermore, you’ll be happy to know that the way you currently manage your physical devices with Microsoft Endpoint Manager will for the most part be similar to the management of Cloud PCs. A good example of this is that if you navigate to the All Devices list in Microsoft Endpoint Manager, you’ll see both your physical and Cloud PCs listed side by side.

Deployment and assignment

Admins will also find that the deployment process is not complicated at all. For users to get a Cloud PC assigned to them, there are pretty much just two requirements that need to be met. They need to have the necessary license in addition to being part of an Azure Active Directory Group that’s assigned to a provisioning policy.

The process starts in the Microsoft Admin Center where you assign licenses similarly to how you would for other Microsoft 365 services. You can have a licensing admin take care of this particular task. After that, you can head over to Active Users and perform the assignment. With that done, you can now give users Cloud PCs and set them up with Microsoft 365 as well.

As soon as a user is added to a group, the Cloud PC provisioning process will be launched and it won’t be long before the Cloud PC is ready for use. And with Windows 365 using a fixed price per user per month model, there’s no extra workload involving tracking, utilization, or keeping idle resources running.

Comparing Windows 365 and Azure Virtual Desktop

While Windows 365 may be a relatively new service, Microsoft already had another platform that offers remote desktop services. This product is of course Azure Virtual Desktop (AVD). Those who may be familiar with AVD will be asking themselves what if any are the differences between the two services.

Design

With Windows 365, you get a cloud-based service that delivers a Windows 10/11 desktop to a business’s employees. Using this service eliminates the need for managing Azure infrastructure and businesses get the advantage of using existing resources. This can include things such as the Microsoft Endpoint Manager portal, your Windows OS licenses, as well as various other applications. Windows 365’s ease-of-use principle enables businesses to get a remote desktop service that is simple to use with Cloud PCs that can be set up in a matter of hours.

Azure Virtual Desktop, on the other hand, is a virtual desktop infrastructure (VDI) service that works great for multi-session use, temporary use, high-end computing, and application virtualization. AVD offers clients affordable, flexible, and scalable virtual environments. The customizability of AVD allows businesses to have greater control over their VDI environment and potentially reduce operating costs. Costs can also be reduced because you won’t need single gateway servers to manage multiple host pools and run simultaneous workloads.

Technical features

When it comes to the technical side of things, there are several differences that you need to know for you to decide which service is right for your business. Some of the differences are as follows:

  • Design – Windows 365 has been designed to be simple and easy to use whereas AVD has been designed more for flexibility.
  • Desktop – clients get personal desktops for Windows 365 and AVD (single session). For AVD (multisession) there are pooled desktops.
  • Pricing – the pricing structure for AVD follows a consumption-based model whereas Windows 365 offers a fixed per-user per-month pricing.
  • Subscription – subscriptions are customer-managed for AVD and fully Microsoft-managed for Windows 365 Business. Windows 365 Enterprise is also Microsoft-managed with the exception of networking.
  • VM SKUs – Windows 365 has various optimized options for multiple use cases. On the other hand, AVD offers any Azure VM including GPU-enabled SKUs.
  • Backup – AVD clients will get to use Azure backup services while Windows 365 users get local redundant storage for disaster recovery.

Costs and economic impact

AVD normally has virtual machines (VMs) that are dedicated to a single user. However, there is also a pooled desktops feature that enables several users to have access to a VM. Also, AVD session hosts can provide personal desktops if the need arises. Because VMs operate under your Azure subscription it means that the computing expenses are passed on to you. Your costs for using AVD are going to be based on your consumption. But, this has the benefit of allowing you to lower AVD and VM environment costs because of auto-scaling.

Windows 365 provides clients with a virtual machine that is dedicated to one user. In this case, these VMs function under a Microsoft Azure subscription meaning that the client has no computing expenses to worry about. Cloud PCs require a Windows 365 Cloud PC license and usage costs are based on a fixed per-user/per-month price plan. Unlike with AVD, auto-scaling and reserved instances won’t be an option for Cloud PCs since the cost is fixed and admins don’t have access to the VMs from the Azure portal.

Ideal user scenarios

When deciding what your business should use you need to know what kind of scenarios would be best for Windows 365. The first thing you can look at is the number of PCs you have in your IT environment. Because of the low-cost factor, ease of deployment, and lack of prerequisites, environments with only a few PCs will find Windows 365 to be a great choice.

Another consideration is organizations that currently aren’t utilizing Azure and have no plans to do so in the near future. For these businesses, they should consider Windows 365 because of how easy they’ll find desktop assignment. Not to mention that there is no administrative overhead for IT admins to worry about.

If your organization has already invested in Microsoft Endpoint Manager then Windows 365 can be a great option for your environment. The Cloud PC is also ideal for clients that would like personalized VMs with local admin rights.

Windows 365 is An ideal business solution

Azure Virtual Desktop provides a wonderful solution for those who are already familiar with VDI environments and are comfortable with them. In addition, if you need a fully customizable environment then AVD may be the way to go.

For scenarios that require a published RemoteApp application, AVD is your best choice given that RemoteApps cannot be published from Windows 365 Cloud PCs. If the number of users requiring virtual desktops frequently varies throughout the month then you may be better served with AVD. Windows 365 has fixed costs per month regardless of whether a virtual desktop has been used or not.

 Windows 365Azure Virtual Desktop
Control planeAVDAVD
Business<300 Business, >300 Enterprisepersonal desktop (small deployments), pooled desktops (large deployments)
Active Directory requirementsAzure AD Connect (Hybrid Azure AD supported)Azure AD
ComputeFully Microsoft managed, admins have no access to VMsCustomer-managed, flexibility to configure VMs
StorageFully managed storage, fixed pricingCustomer managed, flexibility with OS Disks, FSLogix profiles
CostFixed per-user/per month costConsumption-based cost
User profileNo FSLogixFSLogix optional for Single-User, and mandatory for Multi-User
RemoteApp supportNoYes
Pooled desktopsNoYes
Supported endpoint operating systemsWindows, macOS, iOS, Unix, Web, AndroidWindows, macOS, iOS, Unix, Web, Android  

What about VMware Horizon?

When looking at VDI solutions, another name you’ll likely come across is VMware Horizon. The latter is a virtualization service that can deliver desktops and apps on Windows, Linux, and MacOS systems. Using this platform enables IT staff to run desktop applications and virtual machines in the data center or cloud.

They can then deliver these to employees as managed services. VMware gives you virtual machines that you can run on the VMware Cloud on AWS, Azure, Google Cloud, or other VMware partner clouds. End-users can run their VMs on various devices including PCs, tablets, and smartphones.

VMware is capable of delivering a very personalized user experience by separating desktop and application components before delivering them together when required. Below is a table that provides comparative information on all three of Windows 365, Azure Virtual Desktop, and VMware Horizon.

 Windows 365Azure Virtual DesktopVMware Horizon
PlatformWindows, SaaSWindowsSaaS
Target marketBusinesses requiring Windows Clouds PCs that are always availableIT professionalsIT professionals, app developers
SupportOnlineBusiness hoursBusiness hours, online
TrainingDocumentationDocumentationDocumentation
FunctionDaaS, VDIApp virtualization, DaaSDaaS, VDI, VM, virtualization
IntegrationsMicrosoft Endpoint ManagerAuthPoint, Automai Robotic Process Automation, Catapult Spyglass, Liquidware, Login VSI, Microsoft Azure, Remote Desktop Commander Suite, SysTrack    AuthPoint, Commvault HyperScale X, Goliath Performance Monitor, Login VSI, Oracle Database, Remote Desktop Commander Suite, SQL Server, SecureIdentity DLP, SecureIdentity MFA, SecureIdentity PAM, SysTrack, ThinPrint, vCenter Server, vRealize, Automation  

Wrap up on Windows 365

There used to be a time when getting your work done meant that you needed to be at your workstation using your desktop. Then the use of laptops allowed employees to have a bit more flexibility, although it was rather limited. In the last few decades, remote desktop technology has come along in leaps and bounds. Now, we’re at a point where businesses have options that deliver desktops from the cloud. Not least of which is Windows 365.

This remote desktop service from Microsoft is built on top of existing Azure Virtual Desktop infrastructure but comes with unique capabilities of its own. The Cloud PC presents a great economic solution in a world where the workspace is evolving. Businesses can leverage Windows 365 to provide desktops for remote workers without having to invest in physical devices.

And as we have seen with some of the potential figures, making the migration to Windows 365 could significantly boost revenue. Going forward, Microsoft is taking cloud computing to a completely new level. Businesses have plenty to gain as they begin to experience the Windows desktop in a completely new way.

What You Need To Know About Windows 365 Multi-Window Support

One of the most important elements that any organization requires to have functional teams is effective communication. Multi-window support matters especially when you are trying to establish a hybrid work environment. This is because failure to create good communication can negatively affect collaboration on projects and overall productivity.

Reasons like these are why platforms like Microsoft Teams can be vital for enhancing the way your organization works. Teams can help you establish good communication channels and boost cooperation.

And there are a number of different features that Microsoft has introduced to help streamline workflow. Multi-window support is one such feature that has plenty to offer and I’ll be going over that below.

Challenges that needed addressing

Since the introduction of Microsoft Teams a few years ago, the service has brought a lot of convenience to how employees can communicate and collaborate. However, despite the great features on offer, there were issues that were constantly brought forward by users.

These issues involved instances such as where a user could be on multiple chats while simultaneously trying to edit a file and join. Doing this would be somewhat challenging as you would need to leave each action ongoing in the background.

And then you would need to go through the process of running around later trying to figure out where you would have left off with each action. Most users needed multi-window support to simplify the way they work.

Multi-tasking is a key element for a lot of people to work as efficiently as they need. So it’s no surprise that Microsoft developed the multi-window support feature to enhance the work experience for their clients.

What is Multi-window support?

Multi-window support is simply a feature that enables users the option to pop out chats, meetings, calls, or documents into separate windows. The goal here is that users will be able to easily multitask in the team collaboration app.

In the past, people have faced challenges when trying to keep up with multiple conversations, particularly those docked to one application window. But, with multi-window support, users can now view full-sized, separate windows for meetings or calls as well as the main Teams client during a Teams meeting.

Furthermore, to prevent blocking underlying content, Microsoft has designed it such that meeting and call controls such as video, chat, mute, etc., are now found at the top of the meeting window.

Windows 365 users will be glad to know that this feature has just recently been made generally available to them. Undoubtedly, this is something that can be of great value to your communication and collaboration with a hybrid workforce.

Setting up

Getting started with the process of setting up multi-window support is a relatively simple exercise. To begin, you’ll need to ensure that you have the latest Teams Desktop version 1.5.00.11865. This will be necessary for you to enable the feature on Azure Virtual Desktop.

Two download options are available, one in MSI format and the other in EXE format. Once you are finished updating the Teams desktop client to version 1.5.00.11865, a banner will appear. This will occur when you open the new Teams desktop client for the first time.

And then to turn on the multi-window feature, all you’ll need to do is restart Microsoft Teams. If you want to check whether multi-window has been successfully turned on, right-click on any chat. If you get a “pop out chat” option then you know the feature has been enabled.

Using the pop-out facility

Before you can use the pop-out facility, there are a few additional things about this feature that you need to know. Microsoft has designed it to be a simple and easy-to-use feature that should pose few if any problems. One of the things to note is that the feature will not allow you to pop out the same chat or app twice at a time.

But, you can still open several chats and apps simultaneously. Also, there are certain tasks that require you to go back to the main window. These include app installations, attaching files, and scheduling of meetings.

How it works

There are a few different ways that users can take advantage of the multi-window feature to enhance communication and collaboration. These may include:

Multiple windows for Chat

The multi-window feature can be used for separating a one-on-one chat conversation into a window. To do that you’ll first need to head over to Microsoft Teams. Once there, go to the Chat tab. Next, you need to select the chat or conversation thread that you intend to separate. With that done, click the pop-out button and you should be able to see the chat appear in a separate window.

Multiple windows for Meetings

Teams allows you to separate a meeting that is within a channel. For that, you start by opening Microsoft Teams and then joining the meeting. The latter will then open in a separate window. And if you want to join or start a meeting in a different channel then it will also open in its own window.

Multiple windows for channel tabs

There are some tabs in Channels that can be separated into windows of their own. Generally speaking, the tabs that can be separated do not include default tabs such as the Wiki, Posts, and Files tab.

However, some other tabs such as the Planner tab can be separated into a window. In a similar manner to the previous cases, start by navigating to Microsoft Teams and then going to the Teams tab.

Next, you’ll need to select a channel and then go to the tab that you intend to separate. With that done, click the pop-out button and you’ll see the tab separate into its own window.

Communication in Teams

If you want to start a conversation, you can do so in the appropriate chat or channel by typing a message in the conversation field at the bottom of the screen. And as soon as you post a message in the channel all the other team members will be able to see it. Anyone within a channel can post messages.

Teams also allows you to have several conversations going on simultaneously in different channels. A conversation thread can easily develop because of how simple it is to reply to messages and how all topic-related replies are linked together.

You also get the ability to direct messages to specific team members. And that individual will receive an alert. This is a great way of ensuring that messages that are of significant importance to certain team members reach them.

Communication in Microsoft Teams can also facilitate via audio or video calls. These features, built into the service, are referred to as meetings. For the convenience of users, these meetings can be on demand or you can schedule them at a time that is convenient for everyone.

Starting a meeting is pretty simple with you only needing to go to the relevant channel and click on the camera icon that you’ll find at the bottom. Once a meeting has begun, you’ll be able to see your other team members in the sidebar. Additionally, by looking in the team’s conversation thread, others may see that there is a meeting in progress and can thus choose to join in.

Benefits of multi-window support

Having multi-window support can be of immense benefit to the way organizations carry out their various projects. For starters, when you have the option to open up multiple separate windows, it makes handling several different tasks simultaneously a far easier and significantly faster process.

Rather than having to go through the cumbersome process of constantly switching back and forth and checking where you left off, multi-window support gives you a more streamlined experience.

This is something that those who work in fast-paced environments will be extremely grateful for. As a result of this capability, users can experience greater flexibility when using Microsoft Teams and this can potentially increase an organization’s productivity.

Setting up Microsoft Teams

Those interested in using Microsoft Teams for their organizations will find it easy to set up. Microsoft includes Teams in the Windows 11 and Windows 10 images optimized for Microsoft 365 apps.

These optimized images, available in the Windows 365 image gallery, intend to support Teams chat, meeting optimizations, presence, and calling. In addition, the images in the gallery come pre-configured with the required optimization components. So when you install Teams on your Cloud PC you’ll be getting an optimized experience.

Because of the optimization components, users can do peer-to-peer audio and video calls from their devices to those of their colleagues. Therefore, this should give users the same experience as that of using Microsoft Teams on a physical endpoint. Below are some of the major benefits of the optimizations:

  • You get quality peer-to-peer streaming facilitated by WebRTC and rendered directly on the endpoint.
  • You also get enhanced hardware redirection support because devices will redirect as the same hardware device.
  • Endpoints running Windows 10/11 as well as macOS will benefit from all the advantages of the modern media stack. And that includes HW video decoding.

Availability of user support

Although the Microsoft Teams multi-window support may offer plenty to help users streamline their work, organizations still need additional support to simplify the process of adopting Microsoft Teams.

The availability of Teams may be a fantastic way for organizations to rearrange the way they work, but the platform needs to be easy to use. As with all technology, people need to be able to use it with relative ease otherwise it ends up being another ‘great’ product that no one uses.

Microsoft wants to make sure that does not happen. So they provide comprehensive training material for end-users, which includes a training channel on YouTube, live online training, and a start guide that provides you with the basics. With all of this, Microsoft Teams will provide end-users with more than adequate resources to learn how to use their application. And everyone can expect to leverage every aspect and get the most out of it.

High-level security

With all that Windows 365 multi-window support can offer clients, it’s still extremely important to have good security in place. When we look at Teams we realize it is built on the Microsoft 365 and Office 365 hyper-scale, enterprise-grade cloud.

Therefore, users will get the advanced security and compliance capabilities that we know this platform provides. Enterprises will get team-wide and organization-wide two-factor authentication, single sign-on through Active Directory, and encryption of data in transit and at rest. These features are invaluable, particularly for organizations with staff working remotely.

This is because account security isn’t linked to password or device security. It means remote workers using personal devices can maintain high levels of security. Given the levels of cybercrime in recent years, Microsoft has ensured that Teams gets a variety of built-in security features. And because of Active Directory, admins can configure these features to cater specifically to the needs of their organizations.

Wrap up about multi-window support

As an increasing number of organizations look to partially transition to remote workforces, communication platforms like Microsoft Teams are a hot item. And with features like multi-window support being added to Windows 365, users of the Cloud PC can better communicate and collaborate with their colleagues.

No one likes the cumbersome process that you are faced with when there is no multi-window support as this can adversely affect how efficiently you can work. The ability to leverage multi-window features allows you to multitask with greater ease.

By doing so, users can streamline their workflow and potentially boost productivity. So with all these great features and more in development, Windows 365 users can continue to get the best of what Microsoft has to offer.