What Is Windows 365 Link and Who Should Use It?

• Last updated: 23 September 2026
• Windows 365
• Written by Editorial Team

Windows 365 Link is a small, fanless desktop device from Microsoft that does one job: it connects a user straight to their Windows 365 Cloud PC. It runs no local apps and stores no local data, and nobody on it has local admin rights. Windows, apps, and files all live in the Microsoft cloud, while the Link handles sign-in, displays, peripherals, and Teams media at the desk. It suits shared desks, shift work, and any team that wants a desktop with nothing on it worth stealing.

That is the short answer. The longer one matters if you are the person who has to buy, deploy, and support these devices. Windows 365 Link has specific licensing, identity, and Intune requirements, and a couple of setup details can stop a rollout on day one if nobody catches them. This guide covers what the device is, how it works, what it needs, who it suits (and who it does not), what has changed in 2026, and how to deploy it without surprises.

Windows 365 Link at a Glance

• What it is: Microsoft’s first purpose-built Cloud PC device, generally available since April 2025.
• What it does: Boots to a sign-in screen and connects the user to their Windows 365 Cloud PC. Nothing runs or is saved locally.
• What it needs: A Windows 365 license, Microsoft Entra ID, Microsoft Intune, and single sign-on turned on for the Cloud PCs.
• Launch price: An MSRP of USD 349.99 in the United States, with the Windows 365 subscription billed separately per user.
• Best for: Shared desks, front-of-house roles, contact centers, and office staff who already work on Cloud PCs.
• Not for: Mobile or offline workers, and environments that rely only on Azure Virtual Desktop or Citrix.

What Is Windows 365 Link?

Windows 365 Link is a compact desktop box, 120 mm square and 30 mm tall, that sits behind a monitor or mounts to it. Microsoft describes it as the first Cloud PC device that lets users connect directly to their Cloud PC virtual machine. It is built end to end by Microsoft: the hardware, the locked-down operating system, and the connection experience all come from one vendor.

Microsoft announced the device in November 2024 and made it generally available in April 2025. At launch it sold in the United States, Canada, the United Kingdom, Germany, Australia, New Zealand, and Japan. Microsoft later said it would expand availability in February 2026 to Belgium, Finland, Ireland, Italy, Poland, Singapore, and Spain. You buy it through Microsoft or selected resellers, not off a retail shelf, so availability and pricing in your market are worth confirming before you plan a rollout.

The easiest way to think about Windows 365 Link is as a purpose-built endpoint for Windows 365. A laptop can reach a Cloud PC too, through Windows App or a browser, but a laptop is still a full Windows PC with its own apps, storage, patching, and attack surface. The Link removes all of that. When a user signs out, the device holds nothing of theirs. When the device breaks, you swap it and the user signs back into the same Cloud PC with everything where they left it.

How It Differs from a Traditional Thin Client

Thin clients have existed for decades, so the fair question is what makes this one different. Three things stand out. First, it is designed only for Windows 365, so there is no connection broker to configure, no protocol choice to make, and no third-party management console to learn. Second, it is managed in Microsoft Intune alongside every other Windows device you own, which means the same policies, reports, and admin roles. Third, Microsoft ships its firmware, drivers, and operating system updates directly, and has committed to supporting it for at least six years from its April 2, 2025 release.

The trade-off is flexibility. Many thin clients can connect to several virtual desktop platforms. Windows 365 Link is built for one, so it makes the most sense once you have decided that Windows 365 is where your desktops live.

How Does Windows 365 Link Work?

From the user’s side, the experience is short. They power on the device, sign in, and land on their Cloud PC desktop. Microsoft says the Link connects to Windows 365 in seconds. Behind that simple flow are four pieces working together.

1. The User Signs In

Windows 365 Link supports two sign-in methods: web sign-in and FIDO2 security keys. Web sign-in follows whatever authentication methods your Microsoft Entra tenant allows, which can include a username and password, phone sign-in with Microsoft Authenticator, a FIDO2 key, or a passkey on another device. A FIDO2 key can be plugged into a USB port or tapped on a compatible NFC reader. If your organization is moving toward passwordless sign-in, the Link is an easy place to start, because users never need a password typed at the desk.

2. The Device Hands Off to Windows 365

The Link runs the Windows CPC operating system, a locked-down build designed only to connect to Cloud PCs. It checks the user’s identity with Microsoft Entra ID, applies your Conditional Access policies, and opens a session to the Cloud PC through the Windows 365 service. If a user has more than one Cloud PC assigned, a Connection Center screen lets them pick one, troubleshoot a connection, or restart a Cloud PC.

3. The Cloud PC Does the Computing

Windows, business apps, and user files all run on the Cloud PC in Microsoft’s cloud. That is why the Link can get by with modest local hardware. If a user needs more power, you resize their Cloud PC. The device on the desk stays the same.

4. Some Work Stays Local on Purpose

Video is the exception to “nothing runs locally.” Microsoft Teams calls use the new VDI solution for Teams, which comes preinstalled on the Link, so audio and video are processed on the device instead of being streamed back and forth. The Link also supports local redirection of web multimedia content. The result is smoother meetings and video playback than a pure screen-streaming approach would deliver.

Windows 365 Link Specs and Ports

The hardware is modest by design, because the Cloud PC does the heavy lifting. What matters most for day-to-day use is display support, port count, and wireless options, and here the Link covers a typical desk setup well.

Component	Windows 365 Link Specification
Processor	Intel Processor N250
Memory	8 GB LPDDR5
Storage	64 GB UFS, used by the operating system only
Displays	Up to two 4K monitors over HDMI 2.0b, DisplayPort 1.4a, or USB-C. Touch monitors are not supported.
USB	One front USB-A, two rear USB-A, one rear USB-C with DisplayPort Alt Mode
Networking	Gigabit Ethernet, Wi-Fi 6E, Bluetooth 5.3
Audio	3.5 mm headset jack on the front panel
Size and weight	120 x 120 x 30 mm, 418 g
Power and cooling	65 W barrel power supply, no fan
Physical security	Kensington lock slot and VESA 100 mounting pattern

Keyboards, mice, headsets, cameras, and FIDO2 keys all work over USB or Bluetooth. Microsoft publishes a list of tested peripherals, and it is worth checking that list for anything specialized, such as receipt printers, card readers, or scanners, before you commit a whole site. Since August 2026 the Link also redirects local serial ports to the Cloud PC session, which helps teams that still rely on serial-connected equipment.

What Do You Need to Use Windows 365 Link?

Most failed pilots come down to requirements that were missed, not hardware problems. Here is what Microsoft requires, in plain terms.

• A supported Windows 365 license. Windows 365 Link works with Windows 365 Enterprise, Windows 365 Flex (formerly Windows 365 Frontline), Windows 365 Business, Windows 365 Government in GCC and GCC High, and Windows 365 Reserve.
• Microsoft Intune, even on Windows 365 Business. Windows 365 Business normally works without Intune, but the Link does not. Every Link device enrolls in Intune during first-time setup.
• Microsoft Entra join. The devices must be Entra joined. They can connect to Cloud PCs that are either Entra joined or Entra hybrid joined.
• Microsoft Entra ID P1 for automatic enrollment. The person who joins each device to Entra ID needs a Premium license so automatic Intune enrollment works.
• Single sign-on on the Cloud PCs. The Link can only connect to Cloud PCs with Entra ID single sign-on enabled. Without it, users see an error and cannot connect.
• Teams in scope for the new VDI solution. Link devices use only the new VDI solution for Teams for media optimization, so check that your Teams policy covers the users who will sign in on them.
• The right network access. Link devices have the same network requirements as Azure Virtual Desktop end-user devices, so firewalls and proxies need to allow the same endpoints.

If you are still deciding how staff will reach their Cloud PCs, it helps to compare the Link with the other client platforms Windows 365 supports, since many organizations end up using a mix of Link devices, laptops, and tablets.

How Secure Is Windows 365 Link?

Security is the strongest argument for the Link, and it comes from what the device leaves out as much as what it includes. Microsoft describes it as secure by design, with the following protections built in and switched on:

• A discrete TPM 2.0 chip, Secure Boot, virtualization-based security, and hypervisor-protected code integrity
• BitLocker drive encryption and a strict application control policy
• No local user with administrative rights, no local data storage, and no local apps
• Security baseline policies enabled by default and the Microsoft Defender for Endpoint sensor included

In practice, this changes a few everyday risks. A stolen Link holds no company files. A user cannot install unapproved software because there is nowhere to install it. Phishing a user’s password gets an attacker less if sign-in requires a FIDO2 key. And because every Link enrolls in Intune, you get the same compliance reporting you already use for laptops.

The device is only half of the picture, though. The Cloud PC is where your data actually lives, so its configuration matters just as much. Our guide on hardening the Cloud PCs themselves covers the policies that sit on the other side of the connection.

Who Should Use Windows 365 Link?

Windows 365 Link earns its place where people work at a fixed desk, often share that desk, and need a full Windows desktop without the upkeep of a full PC. These are the strongest fits.

• Shift Workers and Shared Desks

  This is the scenario the Link was built for. Several people use the same desk across a day, each signs in with their own identity, and each gets their own Cloud PC. With Windows 365 Flex in dedicated mode, one license covers up to three Cloud PCs used at different times, which pairs naturally with one shared device per desk.

• Reception, Front Desk, and Branch Counters

  Front-of-house desks are exposed. Visitors walk past them, and devices sometimes walk off. A Link on a Kensington lock with no local data is a far smaller risk than a desktop tower full of cached files, and tenant branding lets the sign-in screen show your company name, logo, and wallpaper.

• Contact Centers and Task-Based Roles

  Contact center agents need reliable calling, two screens, and a consistent desktop. The Link handles dual 4K monitors and processes Teams media locally, and agents can move between seats without losing their session setup because it lives on the Cloud PC.

• Office Staff Already on Cloud PCs

  If your people already work on Windows 365 from aging desktops, the Link is a natural replacement at refresh time. Instead of buying another round of full PCs and then connecting them to Cloud PCs anyway, you buy a device that does only the connecting part.

• Regulated and Government Teams

  Organizations that want zero company data on endpoints get that by default. Since May 2026 the Link also connects to Windows 365 Government Cloud PCs in GCC and GCC High, so public sector teams and their contractors can use it too.

• Business Continuity Seats

  The Link works with Windows 365 Reserve Cloud PCs, which gives you a ready backup when someone’s primary PC fails. A few Link devices kept in a cupboard can put a user back to work in minutes instead of waiting on a replacement laptop.

When Windows 365 Link Is Not the Right Fit

An honest assessment saves money. Windows 365 Link is the wrong choice in these situations:

• Mobile or offline work. The Link needs a network connection to do anything useful, and it has no screen or battery. Staff who travel still need laptops.
• Mixed virtual desktop platforms. Microsoft’s requirements list Windows 365 editions only. If some of your desktops run on Azure Virtual Desktop or Citrix, you will need other endpoints for those users. If you are weighing the two Microsoft services, here is how Windows 365 and AVD differ in cost, control, and management.
• Touchscreen workflows. Touch features on monitors are not supported, which rules out some point-of-sale and kiosk setups.
• Certificate-based sign-in. Microsoft Entra certificate-based authentication is not currently supported through web sign-in on the Link. Organizations that depend on smart card certificates should plan around FIDO2 keys instead.
• Local admin or local apps. Anything that must be installed on the physical device, such as certain hardware utilities, will not run on the Link.
• Weak connectivity. Sites with unreliable internet will feel every drop. Fix the network first, or keep full PCs there.

None of this rules out cloud desktops for those users. People who need a different platform can still work from a fully managed desktop service outside Windows 365, while the Link covers your fixed desks.

Windows 365 Link vs Laptops, Thin Clients, and BYOD

Most organizations reach Cloud PCs from more than one kind of device. This comparison shows where the Link sits among the common options.

Factor	Windows 365 Link	Business Laptop	Third-Party Thin Client	Personal Device (BYOD)
Company data on the device	None	Often cached or synced	Usually none	Depends on user behavior
Management	Microsoft Intune	Intune or other tools	Vendor console, sometimes Intune	Limited or none
Works offline	No	Yes	No	Yes, for personal use
Platforms it can reach	Windows 365 only	Any, through Windows App or browser	Often several VDI platforms	Any, through Windows App or browser
Patching burden	Automatic updates from Microsoft	Full Windows patching	Vendor firmware updates	Outside IT control
Best suited to	Fixed and shared desks	Mobile and hybrid staff	Multi-platform VDI estates	Contractors and occasional access

Organizations moving from Citrix to Windows 365 often have existing thin clients that still have life in them, and there is no rule that says every desk must switch at once. A common pattern is to keep working hardware until it ages out and use the Link as the standard replacement.

Thin clients also stay useful where part of the workforce runs on other platforms. If that describes your organization, compare multi-platform virtual desktop options before standardizing on one device.

How to Budget for Windows 365 Link

Budgeting has two parts, and teams sometimes forget the second one.

• The device. Microsoft launched the Link at an MSRP of USD 349.99 in the United States, with local prices in other launch markets. Reseller pricing and volume deals vary, so get a quote for your quantity.
• The Cloud PC subscription. Every user still needs a Windows 365 license, billed per user per month. The size of the Cloud PC (vCPU, memory, storage) drives most of the cost, and it is usually the larger number over the device’s life.
• Supporting licenses. Intune and Entra ID P1 are required. Many organizations already have them through Microsoft 365, but check before you assume.

A fair comparison looks at total cost over the device’s life, not the sticker price. Include the PCs you will not buy at the next refresh, the imaging and patching time you remove, device repairs and swaps, and the cost of a lost or stolen device that holds company data. Right-sizing matters here too. Shift teams on Windows 365 Flex share licenses across people, which changes the per-user math a great deal compared with one dedicated Cloud PC per person. You can review current Cloud PC plans and managed service options to model the subscription side.

How to Deploy Windows 365 Link Step by Step

The physical setup takes minutes. The preparation in your tenant is where the real work sits. Do these steps in order, and pilot with a handful of users before you order devices for a whole site.

• Step 1: License and Provision the Cloud PCs

  Assign a supported Windows 365 license to each user and make sure their Cloud PCs are provisioned and working from another device first. If a Cloud PC does not work from a browser, it will not work from a Link either.

• Step 2: Turn On Entra ID Single Sign-On

  Edit the provisioning policy to enable single sign-on and apply it to existing Cloud PCs, or provision new Cloud PCs from a policy with single sign-on already enabled. This is a hard requirement.

• Step 3: Handle the Single Sign-On Consent Prompt

  The first time a user connects to a Cloud PC with single sign-on, Windows asks for consent, and again every 30 days or after a reprovision. Newer Link builds can show this prompt, but Microsoft still recommends hiding it: create a dynamic device group for all Cloud PCs and add it to the target list on the single sign-on service principal. If you use Conditional Access, include the single sign-on app in the policy’s target resources.

• Step 4: Prepare Intune Enrollment

  Confirm the account that sets up each device can join devices to Entra ID and enroll them in Intune, and that it has an Entra ID P1 license. For tighter control, upload device serial numbers with Intune corporate identifiers so that only devices you own can enroll.

• Step 5: Scope Teams for the New VDI Solution

  Check the Teams policy for VDI optimization and make sure the users who will sign in on Link devices are in scope. Skipping this is a common reason for poor call quality in pilots.

• Step 6: Unbox, Connect, and Run Setup

  Connect monitors, keyboard, mouse, and network, then power on. The out-of-box setup joins the device to Entra ID and enrolls it in Intune automatically. Bluetooth keyboards and mice can be paired during setup. After that, users simply sign in.

• Step 7: Brand It and Plan for Updates

  Use the Personalization settings in Intune to show your company name, logo, and wallpaper on the sign-in screen. Then plan for updates: the Link installs operating system updates automatically outside working hours, but only when it is plugged in and powered on or asleep. Devices that are switched off at the wall every night will fall behind.

Rollout Mistakes to Avoid

• Skipping the single sign-on check. Users on Cloud PCs without single sign-on get an error and cannot connect at all.
• Forgetting Intune on Windows 365 Business. Smaller organizations on Business plans are the most likely to miss that the Link requires Intune.
• Ordering touch monitors. Touch is not supported, so standard monitors are the safer buy.
• Assuming smart card sign-in works. Plan FIDO2 keys or Authenticator sign-in if you rely on certificates today.
• Cutting power overnight. Automatic updates need the device plugged in and on or asleep.

What’s New in Windows 365 Link in 2026

Microsoft ships Link updates roughly every month, and 2026 has added features that matter for real deployments. Microsoft’s official release notes list every build; these are the changes most worth knowing:

• Bare metal recovery (March 2026). IT can reimage a device from external recovery media when remote management and in-device reset are not available.
• Move to 25H2 and tenant branding (April 2026). All devices moved to the 25H2 platform, and organizations can show their company name and logo on managed devices.
• Government cloud support (May 2026). Connectivity to Windows 365 Government Cloud PCs in GCC and GCC High, along with more keyboard layouts and disk space reporting in Intune.
• Windows 365 Frontline renamed Windows 365 Flex (May 2026). The name changed, while the licensing and features stayed the same. The Link works with Flex Cloud PCs.
• Device reset from setup (July 2026). A full device reset can be started from the quick settings menu during setup.
• Serial device support and wallpaper branding (August 2026). Local serial ports now redirect to the Cloud PC session, the sign-in screen can show your wallpaper, and the power button shows when an update is waiting.

These build on late-2025 additions such as broader Conditional Access compatibility through interactive Web Account Manager sign-in, support for Windows 365 Reserve Cloud PCs, and cross-region disaster recovery for Cloud PCs.

The Bottom Line

Windows 365 Link is not a replacement for every PC. It is a focused device for a focused job: putting a secure, low-maintenance Windows desktop on a fixed desk, especially one that several people share. If your organization already runs on Windows 365, or plans to, it removes a whole category of endpoint work. If your staff travel, work offline, or depend on other virtual desktop platforms, the laptop is still the better tool. Start with a small pilot on shared or front-of-house desks, get single sign-on and Intune right first, and scale from there.

Frequently Asked Questions

1. What is Windows 365 Link used for?

   Windows 365 Link is used to connect a user directly to their Windows 365 Cloud PC from a fixed desk. It suits shared desks, shift work, reception areas, contact centers, and office staff who already work on Cloud PCs, because it stores no data and runs no local apps.

2. How much does Windows 365 Link cost?

   Microsoft launched Windows 365 Link at an MSRP of USD 349.99 in the United States. Each user also needs a Windows 365 license billed per user per month, and reseller pricing for devices can vary by market and quantity.

3. Which Windows 365 plans work with Windows 365 Link?

   Windows 365 Link works with Windows 365 Enterprise, Windows 365 Flex, Windows 365 Business, Windows 365 Government in GCC and GCC High, and Windows 365 Reserve. Every Link device must be managed with Microsoft Intune, including on Windows 365 Business.

4. Does Windows 365 Link work with Azure Virtual Desktop?

   Microsoft’s requirements for Windows 365 Link list Windows 365 editions only. Organizations that also run Azure Virtual Desktop or Citrix desktops should plan other endpoints for those users.

5. Can Windows 365 Link work without an internet connection?

   No. Windows 365 Link has no local apps or local data, so it needs a network connection to reach the Cloud PC. Staff who need to work offline should use a laptop instead.

6. Can several people share one Windows 365 Link?

   Yes. Each person signs in with their own Microsoft Entra ID account and connects to their own Cloud PC, and nothing is stored on the device between users. This makes the Link a good match for shared desks and Windows 365 Flex licensing.

7. How do users sign in to Windows 365 Link?

   Users sign in with web sign-in or a FIDO2 security key. Web sign-in follows the methods enabled in your Microsoft Entra tenant, such as a password, phone sign-in with Microsoft Authenticator, or a passkey. Certificate-based authentication is not currently supported through web sign-in.

8. How many monitors does Windows 365 Link support?

   Windows 365 Link supports up to two 4K monitors through HDMI, DisplayPort, or USB-C. Touch features on monitors are not supported.

9. How long will Windows 365 Link receive updates?

   Microsoft will provide driver, firmware, and operating system updates for at least six years from the device’s release on April 2, 2025. The operating system also moves to the next version once a year, in line with the annual Windows release.