Microsoft Execution Containers (MXC) Is Now Generally Available on Windows 11

At today’s Surface Laptop Ultra and Windows event, Microsoft announced that Microsoft Execution Containers (MXC) is now generally available on Windows 11, giving organizations a new way to control what AI agents can access while they run on a PC.

Microsoft Wants AI Agents to Stay Inside the Lines

Traditional sandboxing was not designed for AI agents, where the resources an agent needs can change with every prompt and tool call. MXC addresses that problem by allowing organizations to define which files and networks an agent can access, with those policies enforced at runtime.

Microsoft says MXC can provide different levels of containment, ranging from process and session isolation to WSL, virtual machines and Windows 365 for Agents. While the technology works across operating systems, its deeper Windows integration gives organizations more options for controlling agent activity.

AI agents are moving from simple chat interfaces toward tools that can actually interact with files, applications and development environments. And giving those agents more capabilities also increases the need to control what they can access.

OpenAI, GitHub and NVIDIA Already Support MXC

Microsoft says several leading AI tools already support Execution Containers, including OpenAI Codex, GitHub Copilot, OpenClaw, Replit, LM Studio, NVIDIA OpenShell and Unsloth AI. More companies are also expected to add support, including Anthropic Claude Code, Box, Egnyte, Manus, Perplexity, Raycast and Simular, among others.

Microsoft is also bringing Meta’s Muse to Windows as a native app with MXC integration. The move gives Windows users another AI agent option while adding Microsoft’s containment technology directly to the experience.

For organizations deploying AI agents at scale, the bigger question is no longer simply what an agent can do. It is how much access it should have while doing it. Microsoft Execution Containers are clearly aimed at solving that second problem.