Security & Compliance
October 9, 2026Execution Containers GA on Windows 11: Intune comes later
Microsoft Execution Containers went GA on Windows 11 on 7 October 2026, alongside GitHub Copilot local sandboxing, so the OS now enforces which files and hosts an agent can reach. Intune policy and Entra agent attribution are still "coming soon" with no date, which leaves the agent developer drawing the boundary and the employee's name on every action; here is what to enforce now, what to defer, and the Cloud PC cost math.
Microsoft Execution Containers
MXC
Windows 11
GitHub Copilot
AI Agents
Intune
Microsoft Entra
Windows 365 for Agents
Agent Security
GDPR
By Falak Mahmood