Security & Infrastructure Tools

Microsoft now lets admins uninstall Copilot on enterprise devices

Microsoft has introduced a new policy, Remove Microsoft Copilot App, that lets IT admins uninstall the Copilot assistant from managed Windows devices. The policy, available as a Policy CSP and via Group Policy after the April 2026 Patch Tuesday, targets Windows 11 25H2 devices where the Microsoft 365 Copilot and Copilot are installed, the user did not install the Copilot app themselves, and Copilot hasn’t been launched in the prior 28 days; it is deployable through Intune or SCCM and uninstalls Copilot non-disruptively, though users can reinstall if they choose.

TechLogHub

April 24, 2026

Keep Reading

Security & Infrastructure ToolsJun 8, 2026

Reducing security operations complexity with Wazuh Cloud

The article explains how Wazuh Cloud reduces security operations complexity by offering a fully managed, cloud-native SIEM/XDR. It highlights modern SOC challenges—extended onboarding, ongoing maintenance, high alert volumes, scaling constraints, inflexible licensing, and reactive support—across hybrid environments. It then shows how Wazuh Cloud addresses these issues with rapid time-to-value, zero-maintenance backend, an AI-powered Security Analyst, automatic scalability, flexible tiering, and proactive support. The piece describes the agent-server architecture, indexing and data pipeline, the detection engine, and the AI analyst layer, and concludes that Wazuh Cloud lowers MTTD/MTTR, reduces costs, and improves visibility, with an invitation to start a free trial.

Check Point links VPN zero-day attacks to Qilin ransomware gang

Security & Infrastructure Tools

More from the Blog

View all

Security & Infrastructure Tools

Microsoft Adds Copilot Data Controls to All Storage Locations

Microsoft is expanding its data‑loss prevention controls to block the Microsoft 365 Copilot AI assistant from processing confidential Word, Excel and PowerPoint documents regardless of where they are stored—whether on local devices or in SharePoint/OneDrive. The update will be deployed through the Augmentation Loop (AugLoop) Office component between late March and late April 2026, automatically enabling the restriction for organizations that already have DLP policies set to block Copilot from handling sensitivity‑labeled content. This change follows a bug that had allowed Copilot to summarize confidential emails in users’ Sent Items and Drafts folders despite active DLP protections.

Feb 25, 2026

Security & Infrastructure Tools

Previously harmless Google API keys now expose Gemini AI data

Stay Updated

Get the next deep dive in your inbox

Subscribe for product analysis, engineering explainers, and practical guides published on TechLogHub.

Stay Updated

Get weekly insights, product updates, and launches straight to your inbox.

Overview

A new policy now enables IT administrators to uninstall the Copilot AI assistant from enterprise Windows devices.
The capability becomes broadly available following the April 2026 Patch Tuesday updates and is distributed as a Policy CSP and Group Policy option.
This policy is designed for devices managed through Microsoft Intune or System Center Configuration Manager (SCCM) and targets Windows 11 25H2 installations where Copilot is present.

Policy Details

Policy name: RemoveMicrosoftCopilotApp. When enabled, Copilot is uninstalled in a non-disruptive manner; users may reinstall the app if they choose to do so later.
Applicability: Applies to Enterprise, Professional, and Education SKUs of Windows, on devices where both Microsoft 365 Copilot and Copilot are installed, the user did not manually install Copilot, and Copilot has not been launched in the last 28 days.
Deployment context: Requires the latest Windows security updates and a managed endpoint environment (Intune or SCCM) to take effect.

How to Enable the Policy

Step-by-step: Open Group Policy Editor.
Navigate to: User Configuration > Administrative Templates > Windows AI > Remove Microsoft Copilot App.
Effect: Activates the uninstall process for Copilot on affected devices; reinstall remains an available option for users at a later time.

Rollout History and Timing

Early rollout: The RemoveMicrosoftCopilotApp policy first appeared for Windows Insiders in the Dev and Beta channels with Insider Preview Build 26220.7535 (KB5072046).
Later developments: Microsoft paused automatic installation of the Microsoft 365 Copilot app on Windows devices that run the Microsoft 365 desktop client apps, a move not accompanied by an explicit public rationale at the time.
Additional shifts: Reports indicated that several Copilot-powered features planned to integrate Copilot into Windows 11 system notifications, the Settings app, and File Explorer were being canceled as part of efforts to reduce AI-related bloat in the OS.

Practical Implications for Admins and Users

Uninstall mechanism: Enabling the policy removes Copilot from devices in a controlled, non-disruptive manner.
Reinstallation: Users retain the option to reinstall Copilot if they later decide to use it.
Scope considerations: The policy is specifically targeted at Windows 11 25H2 devices with the Copilot components installed and meeting the eligibility criteria described above.

Security and Compliance Context

Known issues: In February, Microsoft disclosed a Copilot bug that could cause the AI assistant to summarize confidential emails, potentially bypassing data loss prevention (DLP) policies designed to protect sensitive information.
Risk management: The uninstall option provides organizations with a practical tool to reduce exposure by removing Copilot from devices where it is not required or where policy compliance and data protection concerns are paramount.

Related Developments and Observations

Automatic installation policies: There has been a broader shift away from automatic Copilot deployment on certain Windows ecosystems, aligning with ongoing evaluation of AI features within enterprise environments.
Feature culling: Microsoft reportedly scaled back plans to integrate Copilot more deeply into system-level experiences, signaling a measured approach to AI integration in Windows 11.

Summary of What This Means for Enterprises

The RemoveMicrosoftCopilotApp policy offers a sanctioned, centralized method to remove Copilot from eligible devices without broad user disruption.
It complements existing management strategies for Windows 11 deployments and aligns with security and compliance considerations important to many organizations.
The reinstatement option ensures that users retain control over Copilot availability, should organizational needs or policies change in the future.

Microsoft now lets admins uninstall Copilot on enterprise devices

Related Posts

Reducing security operations complexity with Wazuh Cloud

More from the Blog

Microsoft Adds Copilot Data Controls to All Storage Locations

Previously harmless Google API keys now expose Gemini AI data

Get the next deep dive in your inbox

Stay Updated

Check Point links VPN zero-day attacks to Qilin ransomware gang

Oxford University discloses data breach after careers platform hack

Microsoft says bug in classic Outlook hides the mouse pointer

Product

Learn

Company

Legal

Stay Updated

Browse by Category

Stay Updated