To enhance the cloud security of Windows 365, Microsoft has added new upgrades to the product, such as blocking default redirections and providing extra security to newly provisioned cloud PCs and services.

Microsoft is working on the improvement of security in the cloud, where new Windows 365 defaults will be introduced in the middle of 2025. These adjustments will kick in on every new provisioning and provisioning of Cloud PC.

Unauthorized file transfers and malware risks can be avoided by default: the clipboard, drive, USB, and printer redirection options will be disabled. Critical peripherals such as webcams and keyboards are not impacted even as USB redirection is blocked. Azure Virtual Desktop host pools will also receive these security options.

In May 2025, the more secure option was made available on Cloud PCs with Windows 11 gallery images: advanced security capabilities, such as virtualization-based security, Credential Guardon, and hypervisor-protected code integrity (HVCI). Such updates build safe memory enclaves, enhancing security against kernel community attacks.

Notifications will be presented to administrators in the Intune Admin Center, and they will be allowed to override default settings using Group Policy or device configuration policies. Preconfigured groups originally have admin policies, which are carried over to cloud PCs as soon as the group is added.

Such cloud-related improvements indicate the overall approach to security at Microsoft. Later in July, Microsoft 365 will block legacy browser authentication in SharePoint and OneDrive, along with years-old office protocols. The other fixes concern the disabling of ActiveX in Office 2024 and preventing screenshot attachments in Teams meetings.

By overlaying such protections, Microsoft continues to enhance its cloud ecosystem and improve data security for its end users.