Windows Copilot: What is it and how to block your end user from using it using Intune

Windows Copilot

Windows Copilot is an artificial intelligence (AI) assistant feature for Microsoft 365 applications and services. It is powered by OpenAI's ChatGPT and Bing plug-ins, and can help users with a variety of tasks, including:

• Writing code
• Creating documents
• Summarizing emails
• Answering questions
• Translating languages.. and more.

Windows Copilot works by observing what you are doing on your computer and using its knowledge of the world to suggest helpful text, code, or actions. For example, if you are writing a document and you type the word "table," Windows Copilot might suggest a table layout or a list of table styles.

Windows Copilot is still in beta and will come out with 23H2 in Windows 11 this fall. Microsoft 365 Copilot will be available for commercial customers for $30 per user per month for Microsoft 365 E3, E5, Business Standard and Business Premium customers when broadly available.

Read here for more information: Windows Copilot

But why should you block Copilot in Enterprise systems?

Introducing AI tools like Copilot into enterprise systems may seem tempting due to their potential benefits, but it is crucial to consider the potential downsides as well. Implementing AI in a business setting can lead to over-reliance on automation, reducing the need for human involvement and creativity. This can negatively impact employee morale and job satisfaction, as workers may feel their skills and expertise are undervalued or replaced by machines. Moreover, AI systems are not infallible and can make errors, leading to costly mistakes and damages to the company's reputation. By blocking AI tools in enterprise systems, businesses can strike a balance between technology and human capabilities, fostering a work environment where employees are encouraged to think critically and creatively, while still utilizing AI in specific areas where it complements human efforts rather than replacing them entirely.

How to block Windows Copilot in enterprise windows systems using Intune

Copilot can be blocked in Enterprise machines using Intune. You can follow the below steps to remove it:

1. Go to https://intune.microsoft.com
2. Go to Apps > Windows and Add a new application
3. Choose App type as Windows ap (Win32) under "Other"
4. Upload the intunewin package which is available at my GitHub here: https://github.com/skoul27/nocopilot
5. Enter the Name, Description and other information in "App information" page and hit "Next"
6. Under "Program" page, enter the following:
   

   a. Install command: RemoveCopilot.cmd
   b. Uninstall command: RemoveCopilot.cmd /Uninstall

   and hit "Next"
   
   
   
   
   
7. Under "Requirements" page, keep Operating system architecture as "64-bit" and Minimum operating system as "Windows 11 22H2" (copilot is coming with Windows 11 23H2, but you can also keep it as 22H2, just to be safe so no can use the preview as well) and hit "Next"
8. Under "Detection rules" page, keep Rules format as "Manually configure detection rules" and choose Type as "File" and give the following path: 

   C:\Windows\Temp\RemoveCopilot

   
   
   
   
   
   
9. Now you can Review and save this application and target it on Windows 11 machines or particularly machines with Windows 11 22H2 (or 23H2 once it is available) as "Required Install".

How does it work?

So this Win32 app will create a registry in users machines which will block the user from enabling the  Copilot.

User Experience

User will not see any Copilot icon in the taskbar (which is there by default) or under Windows Settings > Personalisation> Taskbar