Microsoft Scout brings always-on agent autonomy to Windows 11 and macOS

Microsoft announced Scout at Build 2026, a new desktop agent for Windows 11 and macOS that operates continuously on a user's behalf without requiring repeated prompts. Scout belongs to Microsoft's "Autopilots" category—always-on agents with their own Entra identity that can execute complex, multi-step tasks autonomously. Scout is built on OpenClaw, an open-source agent framework that can read/write files, execute shell scripts, apply code patches, spawn parallel sub-agents, and automate browser sessions.

The critical engineering difference: Scout runs under individual Entra identities rather than shared service accounts, scoping credentials to specific tasks and binding operations to Microsoft Purview sensitivity labels and Data Loss Prevention policies. Task-specific credentials are redacted from logs, and highly sensitive operations require human sign-off before execution. Scout also integrates with Work IQ, Microsoft's enterprise knowledge layer that ingests data from SharePoint, Teams, Outlook, OneDrive, and Dataverse to understand team workflows and enforce fine-grained permissions at runtime.

For infrastructure and platform teams, Scout signals a shift from interactive Q&A chatbots to continuous, autonomous systems that hold user priorities and act on them. Early adoption requires GitHub Copilot Business/Enterprise licenses and Frontier preview enrollment, with IT admins explicitly pushing the desktop app via Intune policies. Security community concerns persist around OpenClaw's core isolation model, though Microsoft's identity-based scoping and policy enforcement represent enterprise-grade mitigations worth monitoring as this category matures.