Extend Windows 365 to contractors without requiring MDM enrollment
Ensure verifies unmanaged contractor and partner devices before they connect to Windows 365 Cloud PCs. External users get the same Cloud PC experience, while your team keeps the access controls already enforced through Entra Conditional Access.
Where Windows 365 rollouts usually stall for external users
Employees are easy. Contractors, vendors, and partners are where most Windows 365 migrations get stuck.
Keep VDI running for external users
You end up paying for both Windows 365 and legacy VDI, which undermines the migration economics.
Offer web-only workarounds
External users get a reduced experience instead of full Cloud PC access.
Skip device verification
Identity-only access leaves a gap because you cannot verify the security state of the device being used.
Verify devices before Windows 365 access
Ensure lets external users access the same Cloud PC experience while device posture is enforced through Entra Conditional Access.
How Ensure works with Windows 365
Ensure provides a compliance signal that your Conditional Access policies use when external users try to access Windows 365. No MDM enrollment for external users. No agent on the Cloud PC itself.
Ensure checks device posture on the external device
A lightweight agent verifies encryption, patch level, and core security controls on the contractor's endpoint.
Compliance status is sent to Entra Conditional Access
Ensure reports the result into Entra Conditional Access, similar to how Intune supplies posture context for managed devices.
Access is granted or blocked by policy
Your Conditional Access policies consume the signal and decide whether the external user can reach the Windows 365 Cloud PC.
CUSTOMER RESULTS
A regulated enterprise moved 2,000+ contractors off VDI while accelerating external-user access
Want to see the full verification flow?
See how the lightweight agent checks device posture, reports compliance into Entra Conditional Access, and fits into your existing access policies.
See How It WorksAlso replacing legacy VDI such as Citrix?
See how Ensure fits the broader migration from VDI to Microsoft 365 and Windows 365.
VDI ReplacementSee the Entra Conditional Access integration for Windows 365 live
We will walk through external-user device verification, policy enforcement, and the Windows 365 access flow.