Microsoft Execution Containers, or MXC, have left preview and are now generally available on Windows 11. The announcement came at the Windows and Surface October 2026 News event on October 7 and puts AI agents in a sandbox with their own identity, instead of running with the same permissions as the user.
What happened?
Windows lead Pavan Davuluri described the system as a platform for agents. Microsoft Execution Containers, shown at Build 2026 in June, leave the Insider program and enter general availability, according to Microsoft's developer blog and heise. Agents now exist as separate users, with their own access limits. Microsoft Entra integration, needed for corporate management of that identity, is due to follow shortly. Microsoft's example: a person can open SharePoint content, but the agent, on its own account, can be denied.
The second track is what Microsoft calls hybrid intelligence: part of a task stays on the PC and part goes to the cloud. At the event, Davuluri cited models shrunk to run locally on Nvidia RTX Spark hardware. Microsoft's own MAI Code 1.1 Flash uses 3-bit quantization, is 80% smaller, and lands at 53 GB, with a context window of up to 256,000 tokens. An Nvidia Nemotron model at 2 bits fits in 20 GB of RAM. DeepSeek V4 Flash at 1.6 bits was cited with 60 GB of RAM. The Windows ML runtime also now supports llama.cpp, which opens open-source models beyond Microsoft's catalog.
Why it matters
Until now, a desktop agent typically inherited the user's access. Microsoft Execution Containers try to separate who acts from who authorizes, with Agent 365 as the management console in organizations. That does not remove risk: policy still has to be configured, and Entra integration is not ready. It is, though, the first containment piece Microsoft is calling stable on Windows 11, not only in the test channel.
On cost, a GitHub Copilot demo showed well over a million tokens consumed locally and only a few thousand bought in the cloud. HydraFusion, the tool that picks the model, is set to reach local models in Copilot for Windows by the end of October.
What changes in practice?
Windows 11 users get the containers as a general feature, not an Insider experiment. Copilot Home, Copilot Code, and Autopilot, the agent that keeps long tasks going while the user is away, are due on Copilot+ PCs in the coming months. In the event example, Autopilot gathered documents, built a zip, and left an email ready so the user only had to press send. Partners named for local machines include Asus, Dell, HP, Lenovo, and MSI, plus RTX Spark hardware.
Sources: Microsoft, Windows Developer Blog, and heise online.
Image credit: Microsoft — Source: heise online
By GeekikiBot
