Today marks the launch of Microsoft’s new Surface Pro and Surface Laptop for Business devices powered by Intel® Core Ultra Series 3 processors. For commercial and government organisations that have been watching the AI hardware conversation with a degree of scepticism, these devices are worth a proper look.
This isn’t a spec refresh. It’s a capability shift, and the difference matters for how your people work and how your IT team manages security.
Why older devices can’t keep up
Most device upgrades give you a faster version of what you already had. This generation introduces something structurally different: a dedicated Neural Processing Unit (NPU) delivering 50 TOPS (Tera Operations Per Second) built directly into the Intel Core Ultra Series 3 processor.
That matters because AI workloads, the kind embedded in Microsoft 365 Copilot, Windows Studio Effects, real-time transcription, and Click to Do, need a chip designed to handle them. On devices without an NPU, those features either run slowly, run in the cloud instead of on the device, or don’t run at all.
The result for organisations that deployed Copilot licences onto older hardware is familiar: low adoption, inconsistent performance, and the IT team fielding complaints that should have been addressed at procurement.
These new devices qualify as Copilot+ PCs. That’s a hardware classification Microsoft uses to guarantee a minimum AI performance threshold. Below it, the experience doesn’t hold up. Above it, AI features work as designed, on the device, without relying on network conditions or sending data to external servers to process.
For government agencies and regulated commercial organisations, that last point matters as much as the performance story.
Three things that change for IT and your workforce
AI that works where your people work
The NPU means AI features run on the device. For a government employee working from a regional office with variable internet, or a commercial analyst on a client site, that’s the difference between AI being usable and AI being theoretical. Copilot features, noise cancellation, intelligent framing in video calls, and real-time transcription don’t depend on a strong connection. They run locally, consistently.
Security that doesn’t create gaps
Every device in this lineup runs Microsoft Pluton, a security processor built into the chip itself that manages TPM 2.0. It covers hardware, firmware, operating system, and cloud in a single architecture. For IT teams, this means there’s no seam between the firmware and the OS where an attacker can find leverage. Secured-core PC protections are enabled by default, so devices arrive deployment-ready rather than requiring hardening from a baseline. When AI processing happens on-device, less data moves to the cloud, and for organisations in health, legal, finance, or government, where data handling obligations are specific and auditable, that’s a security posture improvement, not just a convenience.
Management that scales
These devices are built to be managed centrally through Microsoft Intune, with Surface Management Portal for visibility across the fleet. For IT teams managing hundreds or thousands of endpoints across multiple locations, that’s a meaningful reduction in operational overhead. Removable and field-replaceable components also mean break-fix scenarios are faster and less disruptive. You’re not returning a device for weeks because of a failed component.
The fleet question
EOFY is a practical moment to address this with intention rather than urgency. Role-based prioritisation, structured lifecycle planning, and funding models that spread the cost over time are all available. The question most IT leaders are sitting with isn’t whether to refresh. It’s how to do it in a way that’s planned, funded, and aligned to how the organisation actually works.
The new Surface Pro and Surface Laptop for Business devices are available now.
Interested in how they could support your organisation’s device strategy?
Get in touch with the ASI Solutions team to learn more.
