Overview
- Agent Workspace and Agent Connectors debut in preview to let AI access apps and data via the Model Context Protocol, with Copilot Actions now testable in Insider channels and unavailable in the European Economic Area for now.
- Each agent runs in its own Windows session with a separate account and desktop, working in parallel to the user within an isolated environment.
- With explicit permission, agents can read and write in key folders such as Documents, Downloads, Desktop, Music, Pictures, and Videos, and they can use apps installed for all users.
- Microsoft adds a cloud and management stack with Windows 365 for Agents, an Agent Factory to build custom agents, and Agent 365 for oversight in the Microsoft 365 admin center via the Frontier early-access program, with third‑party model options including OpenAI and Anthropic.
- The company emphasizes observability, consent prompts, action logs, and CPU/RAM limits to mitigate risks, and Windows warns of potential performance hits and security threats such as prompt-injection.