Microsoft is taking a significant step in its AI strategy for Windows 11 with a new experimental capability called Agent Workspace. This feature is designed to let AI agents operate quietly in the background, with controlled access to key personal folders so they can carry out tasks while users continue working normally.
Agent Workspace also introduces dedicated runtimes, desktops and user accounts for these agents, allowing them to run continuously if the user decides to switch the feature on. It can be enabled through Settings > System > AI Components > Experimental Agentic Features.
“These experiences are designed to be opt-in; we want customers to have full control over when and how they engage with Copilot and these agents,” Navjot Virk, corporate vice president of Windows experiences, told The Verge.
The system ties into the new Ask Copilot experience in the taskbar, which blends local file search with Copilot’s AI functions. Microsoft has added taskbar indicators so users can see what agents are doing in real time.
Instead of opening a full application, a floating window appears for interactions with agents or Microsoft 365 Copilot. If an agent finishes a task or needs attention, alerts appear along with visual badges on the taskbar icon, such as a yellow exclamation mark when help is needed and a green tick when the task is complete.
How the agents work
The AI agents need access to local files and apps in order to perform tasks effectively. By relying on Windows’ Known Folders — Documents, Desktop, Downloads, Pictures, Music and Videos — they can find and manage files even if users have moved these folders elsewhere.
Agent Workspace gives them read-and-write abilities in these locations, which makes it possible to automate repetitive tasks such as organising files, preparing presentations or updating media libraries.
Each agent is given its own set of permissions, ensuring that access granted to one agent does not automatically extend to others.
Security concerns
Because these agents require access to sensitive folders, the feature naturally raises security and privacy questions. As testing continues, Microsoft and developers are reviewing how agents handle personal information, the risks of misuse and the importance of clear, transparent permissions so users remain fully aware of what each agent can do.
Agent Workspace also introduces dedicated runtimes, desktops and user accounts for these agents, allowing them to run continuously if the user decides to switch the feature on. It can be enabled through Settings > System > AI Components > Experimental Agentic Features.
“These experiences are designed to be opt-in; we want customers to have full control over when and how they engage with Copilot and these agents,” Navjot Virk, corporate vice president of Windows experiences, told The Verge.
The system ties into the new Ask Copilot experience in the taskbar, which blends local file search with Copilot’s AI functions. Microsoft has added taskbar indicators so users can see what agents are doing in real time.
Instead of opening a full application, a floating window appears for interactions with agents or Microsoft 365 Copilot. If an agent finishes a task or needs attention, alerts appear along with visual badges on the taskbar icon, such as a yellow exclamation mark when help is needed and a green tick when the task is complete.
How the agents work
The AI agents need access to local files and apps in order to perform tasks effectively. By relying on Windows’ Known Folders — Documents, Desktop, Downloads, Pictures, Music and Videos — they can find and manage files even if users have moved these folders elsewhere.
Agent Workspace gives them read-and-write abilities in these locations, which makes it possible to automate repetitive tasks such as organising files, preparing presentations or updating media libraries.
Each agent is given its own set of permissions, ensuring that access granted to one agent does not automatically extend to others.
Security concerns
Because these agents require access to sensitive folders, the feature naturally raises security and privacy questions. As testing continues, Microsoft and developers are reviewing how agents handle personal information, the risks of misuse and the importance of clear, transparent permissions so users remain fully aware of what each agent can do.
