Microsoft is adding the raw ability (think: cgroups and namespaces ala Linux) in to the Windows Kernel to enable strict process isolation/sandboxing/etc.

Docker will sit on top of that and provide the same client API you're accustomed to, but run Windows based images natively.