Skip to main content
InfraGap.com Logo
Home
Getting Started
Core Concept What is a CDE? How It Works Benefits CDE Assessment Getting Started Guide Inner Loop vs Outer Loop Environment Drift Local vs Cloud CDEs for Startups
AI & Automation
AI Coding Assistants Agentic AI AI-Native IDEs Agentic Engineering AI Agent Orchestration AI Governance AI-Assisted Architecture Shift-Left AI LLMOps Autonomous Development AI/ML Workloads CDEs for Data Science GPU Computing
Agent Infrastructure
Agent Experience (AX) Agent Egress Control Computer Use Agents Agent Evals Agent Runbooks Agent Client Protocol AGENTS.md MCP Servers Git Worktrees Kubernetes Agent Sandbox Agent Fleets Agent Identity Prompt Injection Defense Agent Observability Context Engineering AI Code Review Bottleneck Headless Agents in CI Spec-Driven Development Agent Readiness Code Provenance
Implementation
Architecture Patterns DevContainers Advanced DevContainers Language Quickstarts IDE Integration CI/CD Integration Platform Engineering Developer Portals Container Registry Multi-CDE Strategies Remote Dev Protocols Nix Environments Hermetic Builds OpenTofu for CDEs Kubernetes Development
Operations
Performance Optimization High Availability & DR Disaster Recovery Monitoring Capacity Planning Multi-Cluster Development Troubleshooting Runbooks Ephemeral Environments Sandbox Environments Workspace Snapshots Database Branching
Security
Security Deep Dive Zero Trust Architecture Secrets Management Vulnerability Management Network Security IAM Guide Supply Chain Security Air-Gapped Environments AI Agent Security MicroVM Isolation Compliance Guide EU AI Act Cyber Resilience Act Data Residency Governance
Planning
Pilot Program Design Stakeholder Communication Risk Management Migration Guide Cost Analysis FinOps GreenOps Vendor Evaluation Training Resources Developer Onboarding Team Structure Platform Maturity Model Open Source CDEs AI Productivity Paradox Build vs Buy DevEx Metrics Productivity Engineering Industry Guides CDEs for Healthcare CDEs for Financial Services CDEs for Government Edge Development WebAssembly in CDEs
Resources
Tools Comparison State of CDEs 2026 Isolation Decision Tool Template Library
Learning Paths
All Paths Platform Engineer Security and Compliance Engineering Manager
Vendor Reviews
GitHub Codespaces Coder Ona Google Workstations Microsoft Dev Box Okteto Eclipse Che DevPod Daytona E2B
Head to Head
Coder vs Codespaces Coder vs Ona Ona vs Codespaces Coder vs Okteto Self-Hosted vs Managed E2B vs Daytona CDE Market Guide CDE vs Alternatives Case Studies Lessons Learned Glossary FAQ Sources & Citations

Microsoft Dev Box

Full Windows workstations in Azure, with prerequisite licensing that usually dominates the true cost. Microsoft has now published a retirement date: Dev Box retires on 09-18-2028, and its closing-down period began on 09-14-2026.

What It Is

Managed cloud desktops for developers, running real Windows rather than a container

Read this before anything else on the page. This is no longer a maintenance-mode notice. Microsoft's own documentation now states that Microsoft Dev Box retires at 17:00 UTC on 09-18-2028, that the service began its closing-down period at 16:00 UTC on 09-14-2026, and that customers should transition their Dev Box workflows to Windows 365 or another appropriate solution by the retirement date. Microsoft's retirement guide adds that remaining customer workloads should be expected to be deleted after retirement, and advises against creating new long-lived dependencies on the service.

Verify it yourself before making a decision, because it changes the shape of the evaluation entirely: learn.microsoft.com - what is Microsoft Dev Box and the Microsoft Dev Box retirement guide. Checked September 2026.

Dev Box gives developers a managed, cloud-hosted Windows workstation - a complete desktop, not a browser IDE and not a Linux container. Platform teams define dev box definitions from Windows images, group them into pools attached to network connections, and developers self-serve machines from those pools. The machines join Microsoft Entra ID and enroll in Intune like any other corporate Windows device, so the management story is the one your endpoint team already runs.

That is a genuinely different product from the rest of this category, and the difference is the point. A Codespaces container cannot run a full Visual Studio installation, a Windows-only SDK, a desktop test harness, or a game engine editor. Dev Box can, because it is Windows all the way down. For .NET shops, desktop software vendors, and teams whose toolchain assumes a Windows GUI, that has been the only credible cloud development environment.

Two constraints follow from the design and neither is negotiable. It is Windows only - the documentation describes no Linux support, and the images are Windows 11 and Windows 10 Enterprise variants. And every user needs prerequisite licensing before Azure charges a single compute hour, which is the part budgets get wrong.

A real desktop

Anything that runs on Windows runs here, including GUI tooling that no container-based CDE can host.

Managed like an endpoint

Entra ID and Intune enrollment means compliance policy, conditional access, and patching use the tooling you already operate.

Hibernation, conditionally

Hibernated dev boxes accrue no compute charge, but hibernation is supported only on the 8 and 16 vCPU sizes - not on 32 vCPU.

Who It Suits, and Who It Does Not

The published retirement date narrows this considerably, and it should

Still defensible

  • Existing Dev Box customers with working deployments. Microsoft states that existing deployments remain supported during the transition period, which runs until 09-18-2028.
  • Teams whose entire justification is Windows GUI tooling, and who have already confirmed Windows 365 does not cover the scenario.
  • Organizations already holding the prerequisite Microsoft 365 licensing, where the marginal cost is compute rather than a licensing program.
  • Short-horizon needs that finish well inside the retirement window, such as contractor onboarding, and only where the alternative has already been evaluated. Microsoft's own guidance is to avoid expanding long-lived dependencies, and it declines to say whether new resource creation remains available - it tells you to check your own subscription experience.

A poor fit

  • Anyone starting a new multi-year standardization. Adopting a product whose vendor recommends a different product is a hard position to defend later.
  • Linux or macOS development. There is no Linux support, and containers are not the unit here.
  • Organizations without the prerequisite licensing, who would be buying a Microsoft 365 program to unlock a product with a published retirement date.
  • Teams needing self-hosting, another cloud, or an air-gapped deployment. Dev Box is Azure-only with no alternative.
  • Buyers who need a public price to build a business case. The pricing page does not show figures without signing in.

The recommendation, stated plainly

If you are evaluating Dev Box today and you are not already running it, do not. Microsoft has told you the product retires on 09-18-2028 and advised against new long-lived dependencies on it; a procurement process that ends in a platform with a published end date is a process with a known answer. If you already run Dev Box, there is no emergency - it remains supported through the transition period - but the deadline has now appeared, so the migration belongs in a roadmap this year rather than in a conversation. Budget for the fact that Windows 365 is not, by Microsoft's own account, a one-to-one replacement.

Deployment Model

Fully managed Azure service, with the image and identity work left to you

ConcernYou operateMicrosoft operates
Control planeNothing. No self-hosted or bring-your-own-cloud option exists.Provisioning, scaling, availability, the whole service
Images and definitionsDev box definitions, custom images, preinstalled toolchains, image maintenanceMarketplace base images and the runtime that boots them
Identity and device managementEntra ID configuration, Intune policy, conditional access, compliance rulesEnrollment plumbing and enforcement
NetworkingNetwork connections, virtual network design, on-premises connectivityThe remote desktop path to the machine
LicensingAcquiring and maintaining the per-user prerequisites, in fullNothing. This is entirely your obligation.

Read the last row as a cost line rather than an administrative note. Unlike every other product covered here, Dev Box has an entry requirement that is billed per user, per month, by a different part of the same vendor, and it applies whether or not anyone starts a machine. The Pricing section below treats it as the primary number rather than a footnote.

License and Open Source Reality

Proprietary throughout, and here that extends to the operating system itself

Nothing here is open

Dev Box is a proprietary Azure service. There is no source, no community edition, and no self-hosted distribution. This is the least ambiguous entry in this directory: there is nothing to evaluate on open source grounds because nothing is offered.

The licensing goes deeper than the service

Elsewhere in this category, a proprietary control plane still runs your portable Linux image. Here the environment is Windows Enterprise, which is itself licensed per user. Even a perfectly executed exit leaves you re-solving how developers get a licensed Windows desktop, which is a procurement problem rather than a packaging one.

The practical consequence is that portability advice which works elsewhere does not transfer. Keeping a dev container definition is excellent hygiene and buys you very little if the reason you are here is that your toolchain needs a Windows GUI. Where automation is possible, put image builds and pool configuration in declarative infrastructure code so the setup is reproducible against whatever succeeds it.

Pricing

The compute rates are not public. The licensing prerequisites are, and they usually matter more.

No SKU rates are published here, deliberately. Fetched without signing in, every price cell on the Azure Dev Box pricing page renders as the literal placeholder $-. Max monthly price, hourly compute, and monthly storage are all blank until you sign in and select a region. Any article quoting exact Dev Box SKU rates as a public figure is reporting something that page does not show. Get your numbers from the signed-in Azure pricing calculator for your own region and agreement: azure.microsoft.com - Dev Box pricing. Checked July 2026.

The prerequisite licensing, which is the number that usually decides it

Microsoft's documentation is explicit that each user needs a license for Windows 11 Enterprise or Windows 10 Enterprise, Microsoft Intune, and Microsoft Entra ID P1. Those are included in Microsoft 365 E3, E5, A3, A5, Business Premium, and the Microsoft 365 Education Student Use Benefit.

The F3 asterisk matters and is frequently dropped. Microsoft 365 F3 appears in the list of qualifying editions, but the documentation's own footnote states that F3 does not include a Windows Enterprise license, only limited Entra ID and Intune capabilities. A frontline-worker plan is therefore not sufficient on its own. Confirm the exact entitlement per user group before budgeting: learn.microsoft.com - configure the Dev Box service.

For an organization already standardized on E3 or E5, this is a non-event and the real cost is Azure compute. For an organization on lighter licensing, unlocking Dev Box means moving users onto a heavier Microsoft 365 plan, and that per-user, per-month delta - multiplied across an engineering organization, twelve months a year, whether or not anyone starts a machine - routinely exceeds the compute bill. This is what "true cost" means for this product, and it is the reason a comparison against an hourly Linux CDE that quotes only Azure rates is not a comparison at all.

How the Azure charges are structured

Two billing models

A predictable monthly price per dev box instance covering unlimited use of that instance for the billing month, or hourly pay-as-you-go. The two meet at the same ceiling.

The cap is automatic

When a dev box's total for the month - hourly compute plus its monthly storage - reaches that instance's max monthly price, billing stops for the rest of the month. Hourly usage cannot overshoot the monthly figure.

Storage runs regardless

Storage is billed from creation until the dev box is removed, prorated hourly. Hibernating stops compute charges but not storage, and only deletion ends it.

The sizes available run from 8 vCPU with 32 GB RAM up to 32 vCPU with 128 GB RAM, with storage tiers of 256, 512, 1,024, and 2,048 GB on premium SSD. There is no small, cheap size: the floor is a substantial machine, which is consistent with a product intended to replace a developer laptop rather than host a lightweight container.

One planning trap sits inside the hibernation feature. Hibernation is the main lever for keeping hourly costs down, and it is supported on the 8 and 16 vCPU sizes but not on 32 vCPU. The largest machines - exactly the ones where idle waste costs most - cannot use it. Build cost models on the size you will actually deploy, and see cost analysis and FinOps for development environments for the wider framework.

Architecture and Isolation

One virtual machine per developer, managed as a corporate endpoint

A dev box is a dedicated Windows virtual machine assigned to one developer, backed by premium SSD storage, joined to Entra ID and enrolled in Intune. The isolation boundary is therefore the strongest in this directory by default - a full VM per person, not a container sharing a kernel - and the management model is identical to a physical corporate laptop, which is why endpoint and security teams tend to approve it quickly.

Endpoint controls apply

Conditional access, compliance policy, disk encryption, and patch management come from Intune and Entra ID rather than from a separate CDE-specific control surface.

Network placement is yours

Network connections attach dev boxes to your virtual network, which is how access to on-premises or private Azure resources is arranged. Design that deliberately rather than accepting a default.

Heavy units, slow cycles

A full Windows VM does not start in seconds and is not disposable. Ephemeral, per-branch environments are not the workflow this product is built around.

Strong isolation, wrong economics for agent workloads

A dedicated Windows VM is a robust place to run untrusted code and an absurd one to run thousands of short agent tasks in. The unit is too large, too slow to provision, and too expensive per invocation. If that is the workload, look at sandbox environments, microVM isolation, and the E2B and Daytona reviews rather than at a desktop product.

Status and Durability

Retiring 09-18-2028, with Windows 365 named as the path forward

This is the section that should drive the decision, and for once the vendor has removed the guesswork entirely. Microsoft's Dev Box documentation states that the product retires at 17:00 UTC on 09-18-2028, that its closing-down period began at 16:00 UTC on 09-14-2026, and that Windows 365 is the recommended path forward for virtualized developer environments. Microsoft has published a dedicated retirement guide rather than the open-ended transition guidance it previously promised.

Be precise about what that does and does not mean, because the distinction matters commercially. Existing deployments remain supported through the transition period, so nothing breaks this quarter. But the question this page asked at the last review - whether the earlier maintenance-mode notice would become a shutdown - is now answered, and the answer is yes with a date attached. Microsoft's retirement guide says plainly that Dev Box will not be available after retirement and that remaining customer workloads should be expected to be deleted, and it advises against creating new long-lived dependencies on the service. Two years is enough runway for a planned migration and not enough to defer one.

One detail deserves weight before you assume the replacement is a swap. Microsoft states that its proposed alternatives "aren't one-to-one replacements", that each developer scenario should be validated before migrating, and that there is no automated migration tool. Windows 365 gives you persistent Cloud PCs managed through Intune and Entra ID, including 16-vCPU, 32-vCPU and GPU configurations and support for the Windows 11 developer configuration image - but the developer-workflow parity is yours to establish, not Microsoft's to guarantee.

If you are evaluating

Evaluate Windows 365 instead, and use Dev Box only if a specific capability gap forces it. Then document why, because that reasoning is what a future review will ask for.

If you already run it

Do not panic-migrate, but do start. Microsoft's retirement guide is published; it names the Azure Advisor service retirement workbook as the way to inventory affected resources. Plan migration waves, and get support commitments in writing at your next renewal.

The pattern to notice

AWS closed Cloud9, then CodeCatalyst. Microsoft has now set a retirement date for Dev Box. That is three first-party cloud developer environments out of three, and it makes the pattern hard to call a coincidence: cloud-provider developer environments have proven notably less durable than their marketing implied.

There is a broader lesson worth carrying into any CDE decision. A product being generally available, actively documented, and sold by a large vendor tells you very little about whether it will still be receiving investment in two years. The durability question has to be asked deliberately, re-asked periodically, and asked of the vendor's documentation rather than its marketing pages - which is exactly where this notice appears and its pricing page does not mention it. See vendor evaluation, risk management, and the CDE market guide.