Windows 365 Link is aimed (currently) for commercial / business customers and provides a simple, fast, secure and fast way to connect directly to the Windows 365 cloud service provide access to a dedicated (or shared in the case of front line workers) Windows Cloud, a full persistent Windows desktop in the Cloud. The configuration of these desktop experiences is managed via Intune and the specification of each users Cloud PC is configurable subject to the license allocation for the user.
Windows 365 Link
The Windows 365 service itself as a service is not new however, with it being available through the browser and via the Windows App which is available on Windows, Mac, Android and Apple iOS.
The combination of dedicated device and Windows 365 Cloud Service should make for a simple and more easily manageable experience for IT departments than managing physical fleets of desktops and Laptops while also significantly reducing the needs of hands on support.
Is Windows 365 Link just a Thin Client?
No. But there is a definately similarity!
Many organisations have used Thin Client devices (such as igel thin clients) that run a virtual Windows desktop (shared or dedicated) from a local or data centre deployed server farm. They can also be used to access Virtual Desktop Infrastructure (VDI) services such as Citrix, VMware and Microsoft Azure Virtual Desktop.
Windows 365 Link is, essentially a modern version of the thin client, but designed especially to run full Cloud PCs from Microsoft’s Windows 365 infrastructure over the Internet. There is not support for VDI infratrautre and won’t even run desktops hosted on Azure Virtual Desktop. It just runs Windows 365 as the name suggests!
The device is small, weights just, and is vesa mountable as you’d expect. It’s also capable of driving multiple displays at 4K resolution.
Thin Client vs Windows 365 Link
Being a purpose built device (it’s not just a generic thin client device) it is built with Microsoft’s commitment to Security. It’s built by the same team that build Surface. It leverages Chip to Cloud security with features including Secure Boot and TPM and also includes Microsoft’s Pluton processor.
The device is designed to boot in seconds, which sounds like a better experience than the thin clients of the past and performance of Windows 365 experience and the office apps (including Teams) has been rigorously tested and performance tuned with the Windows and Microsoft 365 development team.
Windows 365 Link on Dual Screens at 4K
Windows 365 Link has been in a private preview program by over 100 organisation, Microsoft MVPs and internal employees to help refine and perfect the out of box experience, configuration and performance since November
Secure by Design
Windows 365 Link is a dedicated Cloud PC devices that has no local data, doesn’t allow boot to anything other than Windows 365, has no local admin users, and supports the strongest security including passwordless authentication using Microsoft Entra ID and passkeys. This significantly reduced the attack surface.
It also has security locks and vesa mounts for secure and concealed mounting.
Windows 365 Link promotes sustainable computing
Windows 365 Link is built using more than 63% recycled components and materials, has 100% paper-based packaging, is an ENERGY STAR-certified device, and is designed to be long-lasting and repairable. They are super low power too and because Microsoft Cloud is committed to being carbon negative by 2030, the cloud compute they consume is also green and sustainable.
Availability
Windows 365 Link is available now (from April 3rd) in the US, Canada, Australia, UK, Germany, Japan, and New Zealand.
I’ll be doing a hands on review next week when mine arrives!!
Microsoft has introduced Windows 365 Disaster Recovery Plus, an advanced add-on designed to drastically reduce downtime for Cloud PCs during unexpected outages. It’s currently available in preview and set for general availability later in the sprint 2025. It aims to minimise Recovery Time Objective (RTO) to just 30 minutes – down from the previous four-hour benchmark for large tenants.
Downtime is the ultimate disruptor for any business, especially when it comes to productivity-critical systems like Cloud Services and of course Cloud PCs. Recognising the demand for quicker recovery times, Microsoft has introduced Windows 365 Disaster Recovery Plus which is currently in preview and will be a paid-for / licensed add-on for Windows 365 Enterprise customers.
Disaster Recovery Plus will offers much faster recovery times to address the limitations of its predecessor “Windows 365 Cross-Region Disaster Recovery” which launched in July 2024. Disaster Recover Plus is due to generally available from during spring this year (2025).
This will be a cost option and is designed for users within organisation whose Cloud PC use demands the highest levels of disaster recovery performance and speed of recovery in the event on an outage.
Sharper Focus on Recovery Times
The original Windows 365 cross-region disaster recovery feature presented huge value, enabling business continuity for Cloud PCs during unforeseen events. This service worked by created snapshots of Cloud PCs, which were stored securely in a secondary region defined by the customer. In the case of the need to invoke recovery, users were able to access temporary replicas of their Cloud PCs, complete with all applications and settings based on the most recent restore point – it worked pretty well.
There were however, some limitations. You see, while applications and settings were restored, unsaved work was irretrievable, making OneDrive or SharePoint essential for active file management (which of course most us use right!). Additionally, the recovery process could take up to four hours for larger tenants – which is longer than it takes most physcial devices to be reprovisioned.
Microsoft’s new Disaster Recovery Plus addresses the Recovery Time Objective (RTO) issue reducing recovery time down to around 30 minutes.
Configuring Disaster Recovery Plus
Configuration of Windows 365 Disaster Recovery Plus is configured in the Windows 365 configuration section within Intune under Devices > Windows 365 > User Settings > Optional Business Continuity and Disaster Recovery.
These disaster recovery add-ons are designed to be used in case of a large outage and not individual or groups of users since this invokes the full disaster recovery process. During this outage (or of course when running a test) the Windows 365 Disaster Recovery Plus service will move selected users to their temporary Cloud PCs
Microsoft say that Windows 365 Disaster Recovery Plus may be applied to a set of individual users or user groups to provide fast and simple activation or deactivation.
Previews and Pricing
As is typical with Microsoft previews, IT admins will have the opportunity to try out this service free of charge. I have not yet seen pricing for the final service and how this will work, but I expect this to ROI based and of course optional for customers that need these higher level of RTO.
Conclusion and Thoughts
For customers for whom any loss of service costs money, the value proposition should be clear. Windows 365 Disaster Recovery Plus bridges a critical gap in the speed of recovery enabling businesses to restore operations significantly (around 8 times faster) in these high-stakes scenarios. The the ability to bring Cloud PCs back online within 30 minutes is a substantial improvement over the four-hour window that currently exists.
The question I guess remains, should this be a chargable extra or do customers just expect this level of performance as services like Windows 365 evolve.
You can read the full Microsoft article <– here —> :
Copilot was very much front and center at Microsoft Ignite last month. However, the Windows ecosystem also had lots of coverage. This includes Windows 11, new devices, Windows 365, and Windows 365 Link. Along with this, Microsoft talked in depth about the importance of the new Windows Security Initiative.
This forms part of the Secure Futures Initiative , a wider efforts to ensure everything access the Microsoft eco-system is secure by design and secure by default.
The Windows Security Intuitive is a comprehensive effort to ensure that Windows remains the most reliable and secure platform on earth. This blog summarise the key Windows and Devices announcements from Ignite 2024.
The Windows Keynote session at Ignite was delivered Pavan Davuluri, Aidan Marcuss, Navjot Virk and David Weston and can be viewed here on demand from Microsoft.
Windows 11 – The Most Secure Windows Ever
Windows 10 is end of life in October 2025, but Windows 11 has been mainstream now since 2021. Windows has always been the platform for innovation, meeting the needs of over a billion customers across enterprise, public sector, education, creators, developers and engineers. With this comes Microsoft’s responsibility to deliver the most reliable and secure platform.
The “CrowdStrike incident” back in July 2024, which impacted 8.5 million devices, was a stark reminder of the need for vigilance and innovation and the need to have better controls in place to protect the core of the Windows OS. “EU policy prevents Microsoft restricting access to its kernel”, but Microsoft have, following the global incident, announced the Windows Resiliency Initiative. This initiative aims at making Windows more reliable and secure for all customers, including those with mission-critical workloads but introducing changes to how both Microsoft and third-parties manage critical workloads and updates within Windows 11.
Changes After the Crowdstrike Incident
In the key note, David Weston shared insights from conversations with hundreds of customers, including CISOs, CIOs, and incident responders. The feedback highlighted the need for easier recovery, stronger resilience of critical security tools, and overall platform security. Microsoft is addressing these needs through the Windows Resilient Security Platform, which allows security product developers to build products outside of kernel mode, reducing complexity and improving recovery.
“In addition to the work we are doing with CISA as part of Microsoft’s Secure Future Initiative, we are heavily investing in safe languages to enhance the safety of our code. This commitment also aligns with CISA’s secure by design pledge. We’re applying this new approach to our security platform and other key areas like Microsoft Surface’s firmware and the Pluton security processor firmware. Part of becoming resilient is also increasing the prevention of attacks, so more security has been built into the operating system and not bolted on later. This reduces complexity and ensures you deploy less software that could become the next failure point. This is why we are targeting the most critical elements of Windows 11.”
David Weston | VP Enterprise and OS Security | Microsoft
Changes in Windows coming…
Improving Windows Reliability – with new capabilities to enable security product developers to build their products outside of kernel mode. This is known as the Windows Resilient Security Platform, which provides a flexible security API set and data collection points that can be used to build endpoint security products like detection and response or antivirus outside of the kernel. This change will help end-user protection and antivirus products provide a high level of security and easier recovery, with less impact on Windows in the event of a crash or mistake
Quick Machine Recovery – This solution can execute targeted fixes from Windows Update on machines, even when Windows is unable to boot. This will allow for quick deployment of fixes that address files, drivers, or any other operation needed to recover a non-bootable machine.
Strengthening Security Tools and Drivers – Microsoft are working with industry-leading security partners and the US Cybersecurity and Infrastructure Security Agency (CISA) to define new ways to increase resilience across the ecosystem. This includes adopting safe deployment practices, conducting additional security and compatibility testing for components like security kernel drivers, and developing strengthened incident response processes for streamlined coordination.
Enhancing Identity Protection – To combat the increasing risk and success in cases of sophisticated phishing attacks, Microsoft has hardened Windows Hello, the built-in industry leading multi-factor authentication (MFA) solution. Windows Hello now supports passkeys, which means much of the web can be protected with MFA seamlessly. This enhancement ensures that users no longer need to choose between a simple sign-in and a safe one. This is one step further to help customers remove passwords from their environment.
Local Administrator Protection – Microsoft is introducing administrator protection to address the challenge of over-privileged users and applications. With admin protection, everyone (even admins) will have standard user permissions by default and can make Windows system changes, including app installation, only when necessary and after authorising the change using Windows Hello. This reduces the risk of attacks by ensuring that employees, not malware, remain in control of Windows.
Deep Collaboration with CISA – Microsoft and the CISA are providing a framework for the IT industry as a whole to ensure that all partners, customers, and organisations can stay ahead of evolving security threats. This collaboration aims to deliver software that is safe, secure, and resilient through secure by design, secure by default, and secure through delivery practices.
These changes and improvements are part of Microsoft’s commitment to making Windows reliable and secure for all customers, including mission-critical workloads. The Windows Resiliency Initiative represents a significant step forward in ensuring that Windows remains the most secure and reliable platform on earth.
Windows 11 – Ease of Migration, Management and Updates
Windows 11 builds on Windows 10 technologies and further simplifies the management and migration process to Windows 11. Windows 11 can be managed with the same tools and processes used for Windows 10, ensuring minimal disruption to the workforce. The compatibility with App Assure guarantees that all apps will work seamlessly on Windows 11.
In contrast, Windows 11 updates are 40% smaller in size, making it easier to stay up to date and reducing impact on users/employees as well as on network bandwidth, disk-space and time.
Windows 10 to Windows 11 – Compatibility with App Assure
App Assure is a key component of the Windows 11 upgrade experience as it was in the Windows 7 to Windows 10 experience. App Assure ensures that all apps are compatible with the new operating system through millions of real life feedback, crash reports and user feedback. This application compatibility is backed by Microsoft’s promise to address any app issues that may arise, providing peace of mind for businesses transitioning to Windows 11. The App Assure portal provides guidance, assurance and clarity of application and application version compatibility.
Updates, Hotfixes, and Autopatch
Windows 11 is introducing several new features to streamline updates and hotfixes.
Quick Machine Recovery allows targeted fixes from Windows Update on machines that are unable to boot, ensuring quick recovery during incidents.
Windows Hotpatch, available through Autopatch settings in Intune, delivers Patch Tuesday security updates directly to employees seamlessly in the background without requiring a restart, reducing interruptions and speeding up the deployment of security updates.
Windows Hotpatch is one that is super important. By using Windows Hotpatch through Autopatch settings in Intune, Microsoft say that 65% of Patch Tuesday security updates are delivered directly without requiring a restart. This significantly reduces restarts and interruptions, allowing security updates to be deployed 60% faster.
According to Forrester research, moving to Windows 11 delivers an impressive 250% return on investment over three years compared to Windows 10.
Windows Backup for Entra ID
Another exciting new feature announced at Microsoft Ignite is Windows Backup for Entra ID. This feature, available in public preview in early 2025, will help organisations ensure a seamless transition of use settings and preferences when setting up a new PC or performing a traditional reinstall which is typical with OS upgrades in larger enterprises.
With Windows Backup, employees can easily transfer their desktop background, icon size, and other preferences to a new device, ensuring a consistent and familiar experience. This reduces the time spent on setup, allowing employees to be productive faster and significantly reducing IT overhead and help desk calls.
Windows 11 – New devices and un-paralleled performance
Speed and Performance
Windows 11 is designed to deliver superior speed and performance. Bear in mind WIndows 10 is 10 years old and was designed for a pre-pandemic world and a world where AI didn’t touch the end-point.
Newer Windows 11 devices offer double the battery life and more than three times the performance of older Windows 10 devices.
Microsoft’s introduction of Copilot+ PCs and AI-PCs, built for AI workloads, is setting a new new standard for productivity, combining advanced AI inferencing capabilities with top-notch security and performance. Satya said in his key note that all applications will be rebuilt as AI apps and Windows is no different. Microsoft are re-writing their apps and OS for the AI era and simple examples include simple in-box tools like Notepad and Paint that have advanced AI capability.
Leading vendors like Adobe are adding new capabilities in their applications that leverage local NPUs found in new Windows 11 Copillot+ and AI PCs
The New Generation of Devices in Copilot+ PCs
The new generation of devices in Copilot+ PCs is designed to harness the full potential of AI. These devices (again bvery centre stateg at Ignite) come equipped with advanced AI inferencing capabilities, enabling them to handle complex workloads with ease. Their Neural Processors (NPUs) can operate at more than 45 Trillion Operations a Second (TOPS) providing the fastes edge AI processing in the world. The integration of AI into these devices not only enhances productivity but also ensures that security measures are robust and effective.
With features like real-time threat detection and automated responses, Copilot+ PCs provide a secure and efficient environment for businesses and consumers.
The day after Ignite, Microsoft also released Recall and Click-To-Do into public preview for users enrolled on the Windows Insider Programme.
Windows 11 – Sustainability and Windows 365
Modernising isn’t just about cost savings; it’s about the collective responsibility and impact on the global economy, our business and the environment. Microsoft has committed to advancing sustainability, and adopting Windows 11 helps in achieving your company’s sustainability goals.
Microsoft boldly shared that Windows 11 reduces energy use as the “world’s first carbon-aware OS” and offers Energy Saver, increasing energy efficiency by up to 22%.
Microsoft talked about their own devices, Surface which are manufactured using recycled materials and more renewable energy. As an example, Surface enclosures use 100% recycled aluminum alloy and 100% recycled rare earth materials. They also used this time to share existing and new programs to help organisations reduce e-waste with the recycling and refurbishment opportunities available across our ecosystem partners such as Cisilion. There’s a dedicated sustainability site for Surface -> here <-
Microsoft also shared several examples of how organisations can extend the life of (and even breath new life into) older hardware with Windows 365 without sacrificing security protection or experience.
Windows 365 and Windows 365 Link
Microsoft shared how Windows 365 plays can not only play a crucial role in this sustainability effort but also used the opportunity to announce their new dedicated “thin client” device called Windows 365 Link.
Priced at $349 and available from Spring 2025, these dedicated low power, sustainability built devices can provide local compute power but with no IT footprint to securely streams employees full personal Windows 11 desktop with all their apps, content, and settings directly from the Microsoft Cloud.
Windows 365 can run on any device include Web, dedicated devices like Windows 365 Link, and even mobile devices on iOS and Android as well of course as legacy Windows 10 devices and even Windows 11.
The flexibility of Windows 365 allows businesses in any sector and any size to reduce their IT infrastructure and management complexity while providing a consistent and secure experience for employees. Windows 365 is designed to complement your Windows 11 end user computing estate, enabling more endpoints and form factors, and unlocking more value and options for businesses.
Windows 365 is also great for contractors, testing migrations to Windows 11 and also for running secure workloads as well as for education and front line workers.
What have I missed?
There were lots of announcement around Windows and Devices at Ignite. The Windows Security Initiative clearly represents a significant step forward in ensuring that Windows remains the most secure and reliable platform.
With new enhanced security measures, simplified management and migration, seamless compatibility with App Assure, and innovative update mechanisms, Windows 11 is promising to deliver unparalleled speed, performance, security, agility and management.
Using Cloud PCs, like Windows 365, could be a strategic move as you plan and migrate from Windows 10 to Windows 11 (which you need to do by October 14th, 2025, if you want to avoid paying for Extended Support Updates (ESU).
Here I discuss a use of Windows 365 as a way to delay the migration to Windows 11, whilst also. Enhancing the migration readienaa, testing and user experience in the Shift to Windows 11 as well as, of course the other benefits that Cloud technology can bring to businesses of all sizes, geographies and sectors.
Why Windows 365?
Windows 365 is a cloud-based service that brings the power and security of a Windows operating system to any device including mobile devices and some modern smart TVs.
Windows 365 streams a full (dedicated) Windows desktop from the cloud, providing highest levels of security, application compatibility and bandwidth optimisation.
It allows users to access their desktop and personalised settings, apps, and data from anywhere with an internet connection and without the need for VPN (though access over VPN or secure remote access is supported).
Image (c) Microsoft
This flexibility makes it an alternative choice for using legacy or older hardware. It is also ideal for bring your own device scenarios and contractors.
Additionally, it supports testing and dual running different operating systems. Benefits around flexibility and accessibility are huge for both users and IT.
Flexibility and Accessibility
Device Independence: Windows 365 lets users access your Windows environment from any device. This includes a PC, tablet, smartphone, and even some smart TVs. This means helps support you can continue using older hardware while still benefiting from the latest Windows 11 features. BYOPC (Bring Your Own PC) is also a key use case.
SecureRemote Work Enablement: Windows 365, helps support hybrid and remote work models. Employees can access their Cloud PCs from anywhere, ensuring productivity and continuity and secure remote access which levergage key Microsoft zero trust security principles include password less, MFA and risk based conditional access.
Management is also super simple with Cloud PC with everything managed from Intune. This includes.
Simplified Management and deployment.
Centralised Management: Windows 365 integrates with Microsoft’s Endpoint Management service (Intune). IT administrators can manage all devices and Cloud PCs from a single console. This simplifies updates, security policies, and compliance management. Cloud PCs can also leverage update technologies such as Windows AutoPatch. For more complex deployments or mixed AVD, Citrix and Windows365 you can also use third party tools such as Nerdio.
Fast Onboarding: Employees (new and existing) can be onboarded quickly by provisioning Cloud PCs within minutes. This reduces the time and effort needed to set up new devices. They can also be accessed across multiple devices for maximum flexibility and agility…
Seamless OS Switching – Windows 365 includes Windows 365 Switch. This feature allows users to easily switch between a local PC and a Cloud PC. Users can be assigned multiple Cloud PCs, for example Windows 10 and Windows 11. This setup is great for testing and learning a new OS like Windows 11.
As you’d imagine, Security is paramount and there’s no shortage of enhanced security for Cloud PCs.
Enhanced Security
Built-in Security Features: Windows 365 includes advanced security features like multi-factor authentication, conditional access, password-less authentication and advanced data encryption. These features help protect sensitive information and reduce the risk of security breaches.
Always Up to Date: Cloud PCs are automatically updated with the latest security patches and updates. This ensures that your systems are always protected against the latest threats. Cloud PCs also support full cloud management technologies include Auto Pilot and Windows Auto Patch.
What about pricing… after all, Cloud PCs require a license subscription to use with pricing for Windows 365 varying based on the specification of the Cloud PC needed.
Costs efficiencies and advoidance
Reduced Hardware Costs: Leverage Windows 365 can help can extend the life of existing hardware (for example hardware that cannot run Windows 11) and reduce the need for frequent hardware upgrades since they can be upgraded with just a change of license key!
Frontline worker efficiencies. Windows 365 Frontline provides the same feature stack and benefits of Windows 365 with the added flexibility to provide Cloud PCs for up to three users with the purchase of a single Windows 365 license, making it ideal for frontline and shift workers as well as seasonal staff.
Scalable and Upgradable: Windows 365 offers flexible subscription plans. These plans can be scaled up or down based on your organization’s needs. This enables businesses to manage costs more effectively. You can choose the right sized Cloud PC for the right task and the right user.
Device Management: Since there is no physical device to manage, management of devices is available remotely around the globe with employee devices being able to be provisioned, updated and recovered 100% remotely.
Support for Windows 10 Extended Security updates are also included with the Windows 365 license which not only helps extend the life of older (but perfectly working devices) and is also great to sustainability!
Smooth Migration: Migrating to Windows 365 can be straightforward. Tools and support are available. They help transfer user profiles, documents, and settings seamlessly.
Conclusion
Windows 365 can not only be a physical device alternative for any organisation, but also be used to help ensure a smooth transition from Windows 10 to Windows 11. Windows 365 can help organisations maintain productivity. It enhances security and breathes more life into legacy or older hardware.
It also supports Windows 10 Operating Systems, with Windows 10 Extended Security Updates included at no additional cost helping to extend the life of older devices that can’t run Windows 11 for up to another three years!
