Windows 365 Link is admin-less and password-less, with security configurations enabled by default that cannot be turned off.

Judged as of 2024-11-19 (Ignite 2024 announcement). True if Microsoft's official Windows 365 Link documentation or announcement describes the device as having no local admin users (admin-less), using password-less sign-in, and having security settings enabled by default that cannot be turned off. Mostly true if all three are described with only minor nuance (e.g., some settings can be configured but core protections cannot be disabled). Mixed if roughly one or two of the three features are as described and the other(s) are not. Mostly false if most of the described features are not supported by the documentation, or are overstated. False if official documentation contradicts the claim (e.g., local admin accounts exist, passwords are used, and security features can be disabled).

Set before the research began.

1. E1 Microsoft Ignite 2024 Book of News Microsoft News (news.microsoft.com) · 20 November 2024 Own record

   “The device will not have any local data, local apps or admin-less users and corporate data will stay protected within the Microsoft Cloud. Security baseline policies will be enabled by default and security features cannot be turned off.”

2. E2 Windows 365 Link security Microsoft Learn · 23 October 2026 Own record

   “As a result, there are no local users with administrative rights, and no local applications are installed on the endpoint.”

3. E3 Windows 365 Link security Microsoft Learn · 23 October 2026 Own record

   “In conjunction with specific authentication methods and conditional access policies in place on your Entra tenant, these features mean that a user should never need to enter a password to use their Windows 365 Link hardware device.”

4. E4 Windows 365 Link sign-in methods Microsoft Learn · 16 October 2026 Own record

   “Username and password.”

Microsoft's Ignite 2024 Book of News (E1) says the device has no local admin users, and that security baseline policies are on by default and cannot be turned off. The Windows 365 Link security documentation (E2) confirms that there are no local users with administrative rights. On password-less sign-in, the documentation (E3) says a user should never need to enter a password, but only when specific authentication methods and conditional access policies are set up in the tenant. The sign-in methods page (E4) still lists username and password as an option, so the password-less description holds with some nuance, while the other two features are as described.