Windows containers have different isolation modes, which lets you optimize for density or for greater security. The enhanced isolation option runs containers inside a minimal virtual machine, which also lets you run containers based on a different OS version from the host machine. See how it all works in this episode of Elton's Container Show.