How to license Windows 11 in a virtual desktop environment
Windows desktop virtualization licensing has changed significantly since the Windows 10 era. In 2026, most organizations should plan around Windows 11 Enterprise, Azure Virtual Desktop, Windows 365 Cloud PC, and Microsoft 365 subscription licensing rather than legacy Windows Virtual Desktop or Open License guidance.
Start with the virtualization model
Before choosing licenses, define where the Windows desktop will run and who will manage it. The most common options are: Azure Virtual Desktop for flexible VDI on Azure; Windows 365 for managed Cloud PCs; local virtual machines on a user device; and third-party hosted or outsourced VDI. Each model has different licensing, infrastructure, and management implications. Microsoft licensing terms can change, so final decisions should always be validated against the current Microsoft Product Terms and your Microsoft agreement.
Quick comparison: AVD, Windows 365, local VMs, and hosted VDI
| Scenario | Infrastructure owner | Typical licensing approach | Best fit |
|---|---|---|---|
| Azure Virtual Desktop | Customer controls Azure subscription and session host design; Microsoft provides the AVD control plane | Eligible Microsoft 365 or Windows Enterprise/VDA user licenses plus Azure consumption for compute, storage, and networking | Organizations that need flexible scaling, pooled desktops, app virtualization, or Windows 11 Enterprise multi-session |
| Windows 365 Cloud PC | Microsoft-managed Cloud PC service with customer administration through Microsoft 365, Intune, and Entra ID | Windows 365 license assigned per user; compute and storage are included in the Cloud PC plan | Organizations that want predictable per-user pricing and simpler desktop delivery |
| Local VM on a licensed device | Customer-owned endpoint runs the VM locally | Depends on the Windows edition and license assigned to that device or user; OEM and retail rights are limited and device-specific | Developers, testing, isolated workloads, or a local secondary desktop on the same device |
| Third-party hosted or outsourced VDI | Hosting provider or outsourcer operates the platform | Requires explicit hosting/outsourcing rights, an eligible Windows/Microsoft 365 subscription, Windows VDA where applicable, and a compliant provider model | Organizations using a managed VDI provider or non-Azure hosted desktop platform |
What changed since the Windows 10 licensing model
Windows 10 reached end of support on October 14, 2025. It should now be treated as a legacy exception, not the planning baseline. Some organizations may use Windows 10 Extended Security Updates for transition scenarios, but new virtual desktop projects should normally be based on Windows 11 Enterprise. Microsoft also renamed Windows Virtual Desktop to Azure Virtual Desktop, introduced Windows 365 Cloud PC as a major alternative, and moved many commercial purchases to CSP New Commerce Experience under the Microsoft Customer Agreement. Open License has been retired; Open Value, Enterprise Agreement, MPSA, CSP/NCE, and other current programs may still be relevant depending on organization size and purchasing strategy.
OEM and retail Windows: useful, but not enough for most VDI
OEM Windows is tied to the device on which it was originally installed. Retail or full packaged product licenses may allow Windows to be installed and used on a licensed device according to the license terms, but they generally do not provide broad rights for users to remotely access a Windows client desktop hosted on a server, in Azure, or by a third-party provider. For centralized virtual desktops, use current Microsoft 365, Windows Enterprise, or Windows VDA licensing rather than relying on OEM or retail licenses.
Eligible licenses for Azure Virtual Desktop
For Windows client desktops in Azure Virtual Desktop, users generally need an eligible per-user license such as Microsoft 365 Business Premium, Microsoft 365 E3/E5, Microsoft 365 F3, Windows 11 Enterprise E3/E5, or Windows VDA E3/E5. Education and government equivalents may also qualify. These subscriptions can often be purchased through CSP/NCE, while some organizations still use Enterprise Agreement, Open Value, or other commercial licensing programs. Azure Virtual Desktop also requires Azure resources for session hosts, storage, networking, identity integration, monitoring, and backup. Windows 11 Enterprise multi-session is a key AVD capability and is designed for Azure Virtual Desktop scenarios.
Windows 365 licensing: Cloud PCs instead of VDI infrastructure
Windows 365 provides a dedicated Cloud PC assigned to a user. Instead of designing host pools and scaling rules, you choose Cloud PC sizes and assign Windows 365 Business, Enterprise, or Frontline licenses as appropriate. Windows 365 is often a better fit when the organization wants predictable per-user licensing and simplified operations. Windows 365 Enterprise integrates with Microsoft Intune, Microsoft Entra ID, Conditional Access, Microsoft Defender for Endpoint, and other Microsoft 365 security and management capabilities.
Windows VDA and Software Assurance in 2026
Windows Virtual Desktop Access remains relevant for users or devices that are not otherwise covered by an eligible Windows Enterprise or Microsoft 365 subscription, such as thin clients, contractor-owned devices, or certain hosted desktop use cases. Windows Software Assurance still exists in volume licensing programs, but many customers now obtain equivalent or related Windows Enterprise virtualization access through per-user subscriptions such as Microsoft 365 E3/E5, Microsoft 365 Business Premium, Windows Enterprise E3/E5, or Windows VDA E3/E5. The right answer depends on user type, device ownership, purchasing program, and where the virtual desktop is hosted.
Security and management should be part of the licensing decision
Modern virtual desktop projects should not stop at the Windows license. Plan for Microsoft Intune endpoint management, Microsoft Entra ID identity and Conditional Access, Microsoft Defender for Endpoint, Windows Autopatch where applicable, device compliance policies, data protection, and privileged access controls. These capabilities are often included in Microsoft 365 Business Premium, Microsoft 365 E3/E5, or add-on security plans, and they can materially affect which subscription is the best fit.
Buyer checklist before you purchase
Confirm the following before ordering licenses: number of named users and shared users; employee, contractor, and frontline worker profiles; corporate-owned versus personal devices; need for pooled desktops or one-to-one Cloud PCs; requirement for Windows 11 Enterprise multi-session; Azure consumption expectations; geographic location and data residency needs; third-party hosting or outsourcing requirements; Intune and Defender coverage; identity and Conditional Access design; and whether you prefer CSP/NCE subscriptions, an Enterprise Agreement, or another licensing program.
Key takeaways
- Use Windows 11 Enterprise as the default planning baseline; Windows 10 is now a legacy/ESU transition scenario.
- Azure Virtual Desktop and Windows 365 solve different problems: AVD offers flexible Azure-based VDI, while Windows 365 provides simpler per-user Cloud PCs.
- OEM and retail Windows licenses do not usually provide the rights needed for centralized or cloud-hosted Windows virtual desktops.
- Eligible Microsoft 365, Windows Enterprise, and Windows VDA subscriptions are the modern path for most virtual desktop access rights.
- Validate final licensing against the current Microsoft Product Terms, especially for third-party hosted or outsourced VDI.
If you are comparing Azure Virtual Desktop, Windows 365, or Microsoft 365 licensing options, IT Partner can review your user scenarios, device ownership, security requirements, and CSP/NCE licensing path to recommend a compliant, cost-aware design.
Questions this article didn’t answer?
Thirty minutes with Mike — our CEO, not a sales rep. Bring the hard version of the question.