A conceptual reference architecture for deploying Windows 365 Cloud PCs in an enterprise environment.
This repository contains a comprehensive reference design document for Windows 365 Cloud PC deployments. The architecture guide, authored by Microsoft MVP Kevin Kaminski, provides IT professionals and architects with the technical guidance needed to plan and implement a successful Cloud PC environment.
Download the Reference Architecture (PDF)
A full-color hardcover edition of this document is also available at Lulu.com.
For interactive guidance, try the Windows 365 Design Advisor ChatGPT companion.
The reference architecture document (98 pages) covers:
- Cloud-Native Identity - Entra ID (Azure AD) join with no on-premises dependencies
- Automated Provisioning - Windows 365 Provisioning Policies based on user group membership
- Unified Management - Microsoft Intune for configuration, application delivery, and security
- Zero Trust Security - Conditional Access policies and device compliance enforcement
| Section | Description |
|---|---|
| User Personas | Information Worker persona with technical requirements |
| Cloud & Identity | Entra ID integration, user/device identity, access security |
| Provisioning | Cloud PC specifications, gallery images, automated deployment |
| Management | Intune as the management authority, policy enforcement |
| Security & Access | Device hardening, security baselines, least privilege |
| Monitoring | Built-in reports, Azure Monitor integration |
| Application Management | Modern app delivery, Win32 packaging, Company Portal |
| Servicing | Windows Autopatch, Microsoft 365 Apps updates, Edge servicing |
The reference design includes a baseline application configuration:
- Microsoft 365 Apps - Word, Excel, PowerPoint, Outlook, Teams
- Microsoft Edge - Enterprise browser with SSO and security policies
- 7-Zip - File compression utility
- Company Portal - Self-service application store
- Remote Help - Zero Trust IT support solution
- VLC (UWP) - Optional media player
The Source folder contains the source materials for this document:
- Graphics - Subfolder containing the diagram and illustration image files used throughout the document
- Word Document - Moved to OneDrive due to size. W365Doc
- IT Professionals and System Administrators
- Cloud Architects and Solution Designers
- Technical Managers planning Windows 365 deployments
- Review the PDF document to understand the design principles and architecture decisions
- Adapt the reference design to your organisation's specific requirements
- Use the technical recommendations as a foundation for your Windows 365 pilot deployment
This reference architecture was developed by Kevin Kaminski (Microsoft MVP) Big Hat Group Inc. - https://www.bighatgroup.com
This work is licensed under the Creative Commons Attribution 4.0 International License (CC BY 4.0). You are free to share and adapt this content for any purpose, including commercial use, with appropriate attribution.
Attribution example:
"Based on work by Kevin Kaminski (kevin.kaminski@bighatgroup.com), https://www.bighatgroup.com, licensed under CC BY 4.0."