Windows 365: Week of July 27, 2026

Default display settings for Cloud PCs (Public Preview)

IT administrators can now configure the default display setting for Windows 365 Cloud PCs as either a single display or all displays. Users can override the default with their own display preferences in Windows App. For more information, see Remote connection experience.

Autopilot Device Preparation for Citrix Cloud PCs is now available

Windows Autopilot Device Preparation (DPP) is now supported for Cloud PCs with Citrix integration. This brings the Citrix Cloud PC provisioning experience in line with other supported Windows 365 deployment scenarios and helps make sure the required applications and scripts are installed before users access their Cloud PCs. Administrators can now include device preparation policies for Citrix Cloud PCs in their provisioning workflow.

Bulk deprovision for Cloud PCs in grace period (Public Preview)

Bulk deprovision for Cloud PCs in grace period is now available in Public Preview for Windows 365 Enterprise and Windows 365 Frontline Dedicated. Administrators can deprovision multiple Cloud PCs at once from the Windows 365 admin experience instead of waiting for the seven-day grace period to expire or ending the grace period one Cloud PC at a time. This update streamlines Cloud PC lifecycle management and helps administrators quickly remove Cloud PCs that are no longer needed. For more information, see Deprovision or end grace period for Cloud PCs.

PowerShell execution policy hardening for Cloud PC provisioning

Windows 365 now sets the PowerShell execution policy to RemoteSigned at the LocalMachine scope during Cloud PC provisioning. This change improves security by requiring downloaded scripts to be digitally signed, while allowing locally created scripts and Custom Script Extension (CSE) scripts to run without signatures. This setting applies to all Cloud PC products.

If your organization sets the PowerShell execution policy to AllSigned through Intune or Group Policy, provisioning and other CSE-based operations can fail. For more information, see Automated provisioning steps and Known issues.

Android support for external identities is now generally available

External identity support is now generally available for the Windows App on Android. For more information on client versions and capabilities, see Compare Windows App features across platforms and devices.

For latest information on external identity support, see External identity.

Android preview support for in-session passwordless authentication

In-session passwordless authentication is in preview for the Windows App on Android. This allows users to complete in-session WebAuthn challenges using passkeys that are stored on the Android device through a (software-based) passkey provider like Microsoft Authenticator. Using passkeys from other devices (such as a physical security key or through QR code) is not supported.

For more information on client versions and capabilities, see Compare Windows App features across platforms and devices.