<div id="readability-page-1">[Editor’s Note: Agents of Transformation is an independent GeekWire series and 2026 event, underwritten by Accenture, exploring the people, companies, and ideas behind the rise of AI agents.] It was “like bringing a Porsche into a world of Model Ts.” That’s what Microsoft said in its 1990 annual report about the shift from MS-DOS to Windows. But the bigger breakthrough for the company wasn’t the graphical interface. It was Windows’ ability to serve as a platform for applications made by others. Windows 3.0, released that year, made third-party software easier to find and launch, and offered developers a clear bargain: build to Microsoft’s specs, and your software would become a first-class citizen on the computers that were arriving “on every desk and in every home,” as the company’s original mission statement put it. Thirty-five years later, AI feels less like a car and more like a rocket ship. But Microsoft is hoping that Windows can once again serve as the platform where it all takes off. A new framework called Agent Launchers, introduced earlier this month as a preview in the latest Windows Insider build, lets developers register agents directly with the operating system. They can describe an agent through what’s known as a manifest, which then lets the agent show up in the Windows taskbar, inside Microsoft Copilot, and across other apps. The long-term promise for Windows users is autonomous assistants that operate on their behalf, directly on their machines. Beyond routine tasks like assembling a PDF or organizing files, agents could monitor email and calendars to resolve scheduling conflicts, or scan documents across multiple apps to pull together a briefing for an upcoming meeting. Achieving that level of autonomy requires more than just a clever interface. It will take deep, persistent memory that operates more like the human brain. “We are now entering a phase where we build rich scaffolds that orchestrate multiple models and agents; account for memory and entitlements; enable rich and safe tools use,” Microsoft CEO Satya Nadella wrote in a blog post this week looking ahead to 2026. “This is the engineering sophistication we must continue to build to get value out of AI in the real world.” Elements of this are already emerging elsewhere. <ul> <li>Google’s Gemini and Anthropic’s Claude offer desktop-style agents through browsers and native apps, with extensions that can read pages, fill forms, and take limited actions on a user’s behalf.</li> <li>Amazon is developing “frontier agents” aimed at automating business processes in the cloud. </li> <li>Startups like Seattle-based Vercept are building standalone agentic apps that coordinate work across tools. </li> </ul> But Microsoft’s Windows team is betting that agents tightly linked to the operating system will win out over ones that merely run on top of it, just as a new class of Windows apps replaced a patchwork of DOS programs in the early days of the graphical operating system. Microsoft 365 Copilot is using the Agent Launchers framework for first-party agents like Analyst, which helps users dig into data, and Researcher, which builds detailed reports. Software developers will be able to register their own agents when an app is installed, or on the fly based on things like whether a user is signed in or paying for a subscription. <h4>The risks posed by PC agents</h4> The parallels to the past only go so far. Traditional PC applications ran in their own windows, worked with their own files, and didn’t touch the rest of the system for the most part. “Agents are going to need to be able to scratchpad their work,” Microsoft CTO Kevin Scott said recently on the South Park Commons Minus 1 podcast, explaining that agents will need to retain a history of user interactions and tap into the necessary context to solve problems. Agents are meant to maintain this context across apps, ask follow-up questions, and take actions on a user’s behalf. That requires a different level of trust than Windows has ever had to manage, which is already raising difficult questions for the company. Microsoft acknowledges that agents introduce unique security risks. In a support document, the company warned that malicious content embedded in files or interface elements could override an agent’s instructions — potentially leading to stolen data or malware installation. To address this, Microsoft says it has built a security framework that runs agents in their own contained workspace, with a dedicated user account that has limited access to user folders. The idea is to create a boundary between the agent and what the rest of the system can access. The agentic features are off by default, and Microsoft is advising users to “understand the security implications of enabling an agent on your computer” before turning them on. <h4>A different competitive landscape</h4> Even if Microsoft executes perfectly, the landscape is different now. In the early 1990s, Windows became dominant because developers flocked to the platform, which attracted more users, which attracted more developers. It was a virtuous cycle, and Microsoft was at the heart of it. But Windows isn’t the center of the computing world anymore. Smartphones, browsers, and cloud platforms have fragmented the landscape in ways that didn’t exist back then. Microsoft missed the mobile era almost entirely, and the PC is now one screen among many. In the enterprise, Microsoft has better footing. Azure, Microsoft 365 Copilot, and a growing ecosystem of business-focused agents give the company a strong position, competing against Google, Amazon, OpenAI and others for cloud-based AI agents and services. Agent Launchers is a different bet — an attempt to make Windows the home for agents that serve individual users on their own machines. That’s a harder sell when the PC is competing with phones, browsers, and cloud apps for people’s attention. Microsoft can build the platform, but it can’t guarantee that developers will show up the way they did 35 years ago. And unlike in the 1990s, Microsoft can’t count on users to embrace what it’s building. There’s a growing sentiment that these AI capabilities are being pushed into Windows not because users want them, but because Microsoft needs to justify its massive AI investments. In October, for example, Microsoft announced new features including “Hey Copilot” voice activation, a redesigned taskbar with Copilot built in, and the expansion of “Copilot Actions” agentic capabilities beyond the browser to the PC itself. “They’re thinking about revenue first and foremost,” longtime tech journalist and Microsoft observer Ed Bott said on the GeekWire Podcast at the time. The more users rely on these AI features, he explained, the easier it becomes for the company to upsell them on premium services. There is a business reality driving all of this. In Microsoft’s most recent fiscal year, Windows and Devices generated $17.3 billion in revenue — essentially flat for the past three years. That’s less than Gaming ($23.5 billion) and LinkedIn ($17.8 billion), and a fraction of the $98 billion in revenue from Azure and cloud services or the nearly $88 billion from Microsoft 365 commercial. By comparison, in fiscal 1995, five years after the launch of Windows 3.0, Microsoft’s platforms group (which included MS-DOS and Windows) represented about 40% of its total revenue of $5.9 billion. Windows was the growth engine for the company. Windows is unlikely to play that kind of outsized role again. But AI integration is the company’s best bet to return the OS to growth. Whether that ultimately looks like a restored Porsche or a rocket ship on the launchpad probably doesn’t matter as much as keeping it out of the junkyard.</div>

Microsoft is reintroducing AI agents in Windows, reminiscent of its past success with the transition from MS-DOS to Windows. The new Agent Launchers framework allows developers to create agents that can operate autonomously on users' machines, handling tasks like scheduling and document management. Microsoft aims to integrate these agents deeply into the operating system, enhancing user experience while addressing security risks associated with their operation. The company is focused on building a secure environment for these agents, which are currently off by default, urging users to consider security implications before enabling them.

How Microsoft is betting on AI agents in Windows, dusting off a winning playbook from the past