On October 7, Microsoft made Microsoft Execution Containers (MXC) generally available — an operating-system-level containment layer built specifically for AI agents (Windows Developer Blog). It runs on Windows 11, macOS and Linux, and it is managed through tools most businesses already own: Intune and Entra.
Why it matters: an AI agent is not a chatbot waiting for your next sentence. It is software that acts — reading files, sending email, moving data, calling other systems. Microsoft's own framing is that agents should be treated as untrusted code. MXC wraps each agent in a boundary that defines which files and networks it can reach, and enforces that at runtime, so an agent cannot quietly grant itself more access.
For a small business, that is the difference between "our AI assistant did something we didn't expect" and "our AI assistant deleted the wrong folder."
Large enterprises have security teams to review what every agent can touch. A 20-person firm usually has one person who "handles IT" on top of another job. As agents move from writing drafts to taking actions — replying to customers, updating records, scheduling — the blast radius of a mistake grows. Containment is a technical backstop for the fact that no small team can watch every agent action by hand.
You don't need all four. The principle is to give each agent the least isolation that still protects you, and to raise it when the agent touches money, customer data or production systems.
Two or more "no" answers means your agents have more access than your oversight.
Containment tools help, but they assume you already know what your agents are allowed to do. That decision — who may use which AI, on what data, with what limits — is governance, and it is the part most small businesses skip. It is also the part that protects you when a tool's defaults don't match your business.
This is the work DAOVA does with BC small and mid-sized businesses: practical AI governance, secure deployment of agents, and team training so people use them correctly. Eligible AI training for BC employers can be reimbursed up to 80% through the B.C. Employer Training Grant (up to $10,000 per participant).
Agents are becoming coworkers with credentials. Microsoft just made it easier to keep them on a leash — but only if you decide the rules first. Containment without governance is just a locked room with no idea what's inside it.
Your action this week: list every AI agent or automation connected to your business, note what each one can reach, and mark the one that worries you most. That one goes on a leash first.