What isolation levels does MXC offer?

MXC supports several backends. These include process isolation via AppContainer, session containers, WSL containers (WSLc) on WSL, and MicroVM hardware-level isolation.

Which isolation level suits long-running agents?

Session-container isolation runs an agent under a separate account. Its desktop, clipboard, user interface, input, and active session are all separated from the human user, which suits long-running agents.

Can organizations set policies centrally?

Microsoft says organization-level policy settings through Windows Intune are planned.

Large Language ModelsAI Safety & AlignmentAI Business & IndustryPublickey1d agoOct 15, 2026, 01:00 JST

Microsoft Execution Containers hits GA on Windows 11

Send on LINE

3 Key Points

What happened
Microsoft released Microsoft Execution Containers (MXC), an isolation environment for AI agents, as generally available on Windows 11. Users can define which files and networks agents may access, with policies enforced at runtime.
Why it matters
MXC limits what an autonomous agent can reach, separates agent actions from a person's own, and allows monitoring of agent activity, which may ease concerns about agents deleting important files or making unauthorized communications.

WHO IT HITSIT teams that let autonomous agents run on employee Windows PCs are the ones this lands on, along with developers and security staff who must decide which files and networks each agent may touch. Choosing among isolation levels may shape how much trust they place in always-on agents.

Not sure about something? Ask the AI

Questions and answers are published on this page.

Summaries like this, in your inbox every morning.

Get news like this every morning, free

Context & Analysis

MXC arrives as autonomous AI agents on Windows become practical enough to answer email, adjust schedules, and tidy files on a person's behalf. The company frames the release as part of building Windows into what it calls the most secure platform for agents.

The design distinguishes three things: limiting an agent's actions and reachable scope, keeping human and agent operations apart, and monitoring agent activity. Users can place an entire agent, its plugins, tools, agent harness, and generated output inside MXC.

Beyond Windows' AppContainer, MXC offers session containers, WSL containers (WSLc) on WSL, and MicroVM hardware-level isolation. Each backend lets policies be set, such as whether file or network access is allowed. Microsoft says OpenClaw, Anthropic Claude Code, and many other partners have announced support for MXC.

FAQ

What isolation levels does MXC offer?: MXC supports several backends. These include process isolation via AppContainer, session containers, WSL containers (WSLc) on WSL, and MicroVM hardware-level isolation.
Which isolation level suits long-running agents?: Session-container isolation runs an agent under a separate account. Its desktop, clipboard, user interface, input, and active session are all separated from the human user, which suits long-running agents.
Can organizations set policies centrally?: Microsoft says organization-level policy settings through Windows Intune are planned.

PublickeyRead Original Article

Send on LINE

AI news that matters for your work, delivered every morning.

Pick your industry and the AI tools you use, and get news related to your work every day.

Get it free

Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →

Ask AI

Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.