Windows AI Agent原生支持:身份隔离与本地模型运行机制
How will AI change operating systems? Part 2: Windows
面向独立开发者与 SaaS 创始人,详细拆解了 Windows 如何在 OS 层面支持 AI Agent 的身份隔离、安全扫描和本地模型运行,这是构建下一代桌面端 AI 应用必须了解的基础设施变化。
AI is changing how us software engineers build software, and developers’ tool preferences are rapidly evolving with it – like how AI coding harnesses have gotten very popular. Likewise, future versions of the world’s leading operating systems look certain to feature more support for agentic tools.
AI正在改变我们软件工程师构建软件的方式,开发者的工具偏好也随之迅速演变——比如AI编码套件已经变得非常流行。同样,未来版本的全球领先操作系统无疑将提供更多对智能体(agentic)工具的支持。
To find out how things are changing, we talked with the folks at tech giant Microsoft who shared in detail their plan for Windows, and how AI will play a part. It comes after the company’s previous AI efforts led to it being dubbed “Microslop” by some users online.
为了了解情况如何变化,我们与科技巨头微软的相关人员进行了交谈,他们详细分享了Windows的计划以及AI将扮演的角色。此前,该公司之前的AI努力导致部分在线用户将其戏称为“Microslop”。
The Windows team’s vision is opinionated and includes building new agentic primitives, alongside reversing some decisions that have annoyed engineers. Microsoft wants developers who have shunned the system to return. The big question is: will it succeed?
Windows团队的愿景具有鲜明的立场,包括构建新的智能体基础原语,同时逆转一些令工程师感到恼火的决策。微软希望那些回避该系统的开发者回归。关键问题是:它会成功吗?
For more, check out a previous article on how the leading Linux distribution, Ubuntu, is changing, thanks to AI, with a focus on hardware support for GPUs, NPUs and DPUs, a bet on local-first LLMs, and a focus on AI developer tools.
更多内容,请参阅上一篇关于领先的Linux发行版Ubuntu如何在AI推动下发生变化的文章,重点在于对GPU、NPU和DPU的硬件支持、押注本地优先的大语言模型(LLMs),以及对AI开发者工具的重视。
Today, we cover:
今天,我们将涵盖:
- How many devs use Windows anyway? It’s hard to get exact numbers, but macOS appears far more popular at startups than Windows, while Linux may also be on track to overtake Microsoft’s OS in developer popularity.
- Agent identity & discovery. Windows ships with native support for agent identification, plus a centralized registry of locally available MCP servers to be included with the OS.
- Isolate agentic tools. Microsoft is building an OS-agnostic isolation mechanism that should make it easy for developers to build agents that run tools safely.
- Running models locally: Windows is betting big on local models. WindowsML is a new hardware abstraction layer for building and running local AI models across GPU, NPU, and CPU. The OS aims to ship Small Language Models (SLMs) without requiring an NPU in the future. We’ve also seen an impressive demo of a local model running on a Surface laptop using NVIDIA chips.
- Building agents on Windows: one goal of the OS is to allow building of agents with opinionated frameworks and libraries that devs can just assume are available.
- More dev-friendly: Windows was plagued by questionable product decisions that resulted in a cluttered Start menu and search, to the chagrin of many developers who lost interest in the OS. Microsoft wants them back and is addressing criticisms – finally!
- Linux on Windows (WSL): Windows ships with an embedded Linux called Windows Subsystem for Linux (WSL). It’s proving quite popular with devs. Windows embracing Linux might just be the strategy to get devs to switch from both native Linux and macOS, as counter-intuitive as this strategy sounds.
- Windows & hardware: since its early days, Windows has gone out of its way to support a wide variety of hardware. The OS was x86-based from the beginning, but Windows on ARM is starting to finally look like a good alternative. A look into why ARM support took so long, and the upcoming NVIDIA collaboration.
- 究竟有多少开发者使用Windows?很难获得确切数字,但macOS在初创公司中似乎比Windows更受欢迎,而Linux也可能正走在超越微软操作系统的开发者流行度之路上。
- 智能体身份识别与发现。Windows原生支持智能体身份识别,并包含一个集中式的本地可用MCP服务器注册表,这些将随操作系统一起提供。
- 隔离智能体工具。微软正在构建一个与操作系统无关的隔离机制,这将使开发者能够轻松构建安全运行工具的智能体。
- 本地运行模型:Windows大力押注本地模型。WindowsML是一个新的硬件抽象层,用于跨GPU、NPU和CPU构建和运行本地AI模型。该操作系统旨在未来在不要求配备NPU的情况下提供小型语言模型(SLMs)。我们还看到过一个令人印象深刻的演示,展示了本地模型在搭载NVIDIA芯片的Surface笔记本电脑上运行。
- 在Windows上构建智能体:操作系统的目标之一是允许使用具有鲜明立场的框架和库来构建智能体,开发者可以假定这些组件是可用的。
- 更加友好于开发者:Windows曾饱受备受质疑的产品决策困扰,导致开始菜单和搜索功能杂乱无章,这让许多失去兴趣的开发者感到沮丧。微软希望他们回归,并且终于开始回应这些批评!
- Windows 上的 Linux(WSL):Windows 自带一个名为 Windows Subsystem for Linux (WSL) 的嵌入式 Linux。它在开发者中越来越受欢迎。Windows 拥抱 Linux 可能正是促使开发者从原生 Linux 和 macOS 转向 Windows 的策略,尽管这一策略听起来有些反直觉。
- Windows 与硬件:自早期以来,Windows 一直致力于支持各种各样的硬件。该操作系统从一开始就基于 x86 架构,但 ARM 版 Windows 终于开始看起来成为一个不错的选择。本文将探讨为何 ARM 支持耗时如此之久,以及即将展开的 NVIDIA 合作。
We’ve talked with people on the Windows team to learn about the thinking behind Microsoft’s strategy for the operating system: Pavan Davuluri (EVP, Windows and Devices), Scott Hanselman (VP, Member of Technical Staff, Microsoft CoreAI and GitHub), and Logan Iyer, (CVP, Windows Platform and Developer). Many thanks for your time!
我们与 Windows 团队的人员进行了交流,以了解微软操作系统战略背后的思考:Pavan Davuluri(Windows 和设备执行副总裁)、Scott Hanselman(技术团队成员、Microsoft CoreAI 和 GitHub 副总裁),以及 Logan Iyer(Windows 平台和开发者高级副总裁)。非常感谢你们的时间!
1. How many devs use Windows anyway?
1. 究竟有多少开发者使用 Windows?
While Windows remains the most popular desktop operating system for mainstream computer users at around 63% market share as per Statcounter – the strong sense is that its popularity is down among developers.
根据 Statcounter 的数据,Windows 仍然是主流计算机用户中最受欢迎的桌面操作系统,市场份额约为 63%——但强烈的感觉是,它在开发者中的受欢迎程度正在下降。
Windows used to be popular with devs…
Windows 曾经深受开发者欢迎……
A year ago, the 2025 Stack Overflow survey polled professional users’ choices of OS. It found that a minority of devs overall use Windows – although it remained the single most popular OS. Despite its top ranking in the survey, the number of devs using Windows was actually way down on Microsoft’s XP-era peak. Meanwhile, MacOS and various Linux distributions also showed considerable market share:
一年前,2025 年 Stack Overflow 调查对专业用户的操作系统选择进行了民意调查。调查发现,总体而言只有少数开发者使用 Windows——尽管它仍然是最受欢迎的单一操作系统。尽管在调查中排名第一,但使用 Windows 的开发者数量实际上远低于微软 XP 时代的峰值。与此同时,macOS 和各种 Linux 发行版也占据了相当大的市场份额:
OS choice for professional use (49,000 respondents.) Source: Stack Overflow 2025 survey
专业用途的操作系统选择(49,000 名受访者)。来源:Stack Overflow 2025 年调查
Then Mac started to catch up…
然后 Mac 开始迎头赶上……
Elsewhere, a JetBrains survey asked devs about their OS usage for developments, also last year. The results:
此外,JetBrains 的一项调查询问了开发者关于其开发过程中使用的操作系统,同样是在去年。结果如下:
Source: State of Developer Ecosystem 2025 by JetBrains. Based on 24,500 responses
来源:JetBrains《2025 年开发者生态系统状况》。基于 24,500 份回复
Interestingly, half of devs use more than one OS for development. This JetBrains survey suggests that several devs jump between operating systems for their work. The survey also found macOS close to overtaking Windows as the most-used standalone OS for development work.
有趣的是,一半的开发者使用多种操作系统进行开发。这项 JetBrains 的调查表明,几位开发者在工作中会在不同的操作系统之间切换。调查还发现,macOS 已接近超越 Windows,成为开发工作中使用最多的独立操作系统。
… and is Windows declining in developer market share?
……Windows 在开发者市场中的份额是否在下降?
Only last week, myself and Ivan ran two social media surveys on X and on LinkedIn, most likely shown overwhelmingly to people who are also The Pragmatic Engineer readers. We offered a single choice – with no option to select multiple OS usage, Linux on Windows, or via WSL. We were surprised to find Windows in third place behind Linux, based on nearly 10,000 combined responses:
就在上周,我和 Ivan 在 X(原 Twitter)和 LinkedIn 上进行了两次社交媒体调查,受访者很可能绝大多数也是《Pragmatic Engineer》的读者。我们只提供了一个选项——不允许选择多个操作系统使用情况、Linux on Windows 或通过 WSL。令我们惊讶的是,Windows 以接近一万份的合并回复数排在第三位,位于 Linux 之后:
What OS are you using to build software on? Based on 9,937 responses, surveyed in Sep 2026
你使用什么操作系统来构建软件?基于 9,937 份回复,调查于 2026 年 9 月进行
Based on current research, it’s likely that Windows’ share of the developer market is on the wane, but it’s hard to tell by how much. Inside VC-funded startups and Big Tech, it’s an open secret that Macs have been the most popular developer machine for some years now, partly thanks to the superior hardware performance of M-series CPUs, and also because these companies are not looking to save money when purchasing developer machines. It’s very likely that our own social media survey over-indexes on this group!
根据目前的研究,Windows 在开发者市场中的份额可能正在下滑,但很难确切知道下降了多少。在风险投资支持的初创公司和大型科技公司内部,Mac 多年来一直是最受欢迎的开发机,这已成为公开的秘密,部分原因在于 M 系列 CPU 卓越的硬件性能,同时也因为这些公司在购买开发机时并不打算省钱。我们的社交媒体调查极有可能在这一群体中出现了过度采样!
Either way, Microsoft has both market share and developer goodwill that it needs to win back. Based on what we’ve heard from them, Microsoft is attempting this.
无论如何,微软需要赢回其市场份额和开发者好感度。根据我们从他们那里听到的信息,微软正在尝试这样做。
But where is OS usage at with readers of The Pragmatic Engineer? To figure this out, please cast a vote on the primary operating system you use when developing software. After the vote, you can see the results:
那么,《Pragmatic Engineer》的读者们在使用什么操作系统呢?为了弄清楚这一点,请投票选出你在开发软件时使用的主要操作系统。投票后,你可以看到结果:
What OS is your primary OS that you develop software on?
你用于开发软件的主要操作系统是什么?
- MacOS
- Windows
- Linux (running natively)
- Linux (running on Windows, via WSL)
- Other
- MacOS
- Windows
- Linux(原生运行)
- Linux(在 Windows 上通过 WSL 运行)
- 其他
With that, let’s get into how the next version of Windows intends to integrate AI agents at the OS level.
接下来,让我们看看下一版本的 Windows 计划如何在操作系统层面集成 AI 智能体。
2. Agent identity & discovery
2. 智能体身份与发现
At the operating system level, agents increasingly look like regular users. Their sessions can last hours, use multiple programs, and use OS resources like the UI and clipboard. Windows allows developers to build agentic programs that are distinguishable from users.
在操作系统层面,智能体越来越像普通用户。它们的会话可以持续数小时,使用多个程序,并占用 UI 和剪贴板等操作系统资源。Windows 允许开发者构建可与用户区分开的智能体程序。
Agent identification is enabled through Entra ID, Microsoft’s tool for centralized identity management in Windows. When an agent has a local identity, it acts as if it is another user on the system as visible in the Task Manager. Below, tasks are grouped by user, and there are two users in the task manager: kirupach (a human) and V9-G4 (an agent). All observability of human users is now available for agent users as well.
智能体识别通过 Entra ID 启用,这是微软用于 Windows 集中式身份管理的工具。当智能体拥有本地身份时,它在系统中表现得就像另一个用户,这在任务管理器中可见。在下图中,任务按用户分组,任务管理器中有两个用户:kirupach(人类)和 V9-G4(智能体)。现在,所有对人类用户的可观测性也适用于智能体用户。
Task Manager showing human & agent users (kirupach and V9-G4). Source: Microsoft
显示人类和智能体用户(kirupach 和 V9-G4)的任务管理器。来源:Microsoft
Agents must be built with this agent identification capability in mind. Consider how a rogue agentic application can impersonate a user and not self-register as an agent – which in a sense is how viruses operate by using legitimate OS functionality for illegitimate purposes. That’s why Defender, Microsoft’s antivirus software, is becoming “agent aware” and scanning Windows for known local agent activity like it scans for viruses.
构建代理时必须考虑到这种代理身份识别能力。需要考虑一个恶意的代理应用如何伪装成用户,并且不自我注册为代理——从某种意义上说,这正是病毒通过利用合法操作系统功能来实现非法目的的运行方式。这就是为什么微软的杀毒软件 Defender 正变得“感知代理”,并像扫描病毒一样扫描 Windows 中已知的本地代理活动。
Microsoft Defender’s AI Assets feature can scan for known agent activity. Source: Microsoft
Microsoft Defender 的 AI Assets 功能可以扫描已知的代理活动。来源:Microsoft
更进一步:量化金融体系
看懂新闻只是起点——沿量化金融路径,把它变成能交付的工程能力