Microsoft Windows Server - Defect ID: WI942673
Copilot app might get auto installed on managed devices

• No change history provided.

Impact: This behavior has been reported by IT administrators and the Copilot app can be removed by following the workaround. Originating KB URL: Originating Build: N/A Resolved KB URL: Date Resolved: 2024-12-11T17:02:11.0823738-08:00 All Updates: ------------------------------------------------------ December 12, 2024 01:02 AM After installing monthly quality updates, you might observe that Copilot app is automatically installed and displayed in the Start menu of work devices. IT administrators managing Windows updates in devices in enterprise and business environments are more likely to notice this behavior. You can remove the Copilot app from work devices in your environment by following the steps listed in the workaround section. Workaround: You can remove or uninstall the Copilot app from your device by using one of the following methods: 1. If you are an enterprise user you can uninstall the Copilot app by going to ‘Settings-Apps-Installed Apps’, click on the three dots appearing on the right side of the app and select uninstall from the dropdown list. 2. If you are an IT administrator, you can prevent installation of the app or remove the Copilot app using one of the following methods: a. Prevent installation of the Copilot app: - Configure AppLocker (https://learn.microsoft.com/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) policy before installing Windows update. AppLocker helps you control which apps and files users can run. Note: AppLocker policy should be used instead of the Turn off Windows Copilot (https://gpsearch.azurewebsites.net/Default.aspx?PolicyID=16645) legacy policy and its Intune equivalent, TurnOffWindowsCopilot (https://learn.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI?WT.mc_id=Portal-fx#turnoffwindowscopilot). Both policies are subject to near-term deprecation. For more information, see: Updated Windows and Microsoft Copilot experience (https://learn.microsoft.com/windows/client-management/manage-windows-copilot) - The Applocker policy can be configured by following one of the methods listed in Edit an AppLocker policy (https://learn.microsoft.com/windows/security/application-security/application-control/app-control-for-business/applocker/edit-an-applocker-policy) and adding the below text to the policy: Publisher: CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US Package name: MICROSOFT.COPILOT Package version: * (and above) b. Remove the Copilot app using PowerShell script: - Open a Windows PowerShell window. You can do this by opening the Start menu, typing "PowerShell," and selecting "Windows PowerShell" from the results. - Once the PowerShell window is open, enter the following commands: # Get the package full name of the Microsoft Copilot app $packageFullName = Get-AppxPackage -Name "Microsoft.Copilot" | Select-Object -ExpandProperty PackageFullName # Remove the Microsoft Copilot app Remove-AppxPackage -Package $packageFullName Resolution: We are continuously investigating these reports and examining any deviations from the expected behavior. Our current investigation indicates that the installation of Copilot app is intentional as previously announced (https://techcommunity.microsoft.com/blog/windows-itpro-blog/enhanced-data-protection-with-windows-and-microsoft-copilot/4246428) following the installation of monthly quality updates released late September 2024 and later. We are working to update all the documentation related to Copilot installation and controls for commercial customers to reduce any confusion. If you are an IT administrator and have enabled group policies such as Windows AI Policy CSP (https://learn.microsoft.com/windows/client-management/mdm/policy-csp-windowsai#turnoffwindowscopilot) to prevent the installation of Copilot, the Copilot app will not be installed on the configured devices. If you have not enabled a group policy, you can remove the Copilot app by following one of the steps in the workaround section or configure the AppLocker policy (https://learn.microsoft.com/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) before installing Windows updates. When the AppLocker policy for Copilot is enabled, it will: - Prevent the app from being installed if it is not already on the device. - Block the app from being launched if it is already installed. Affected versions: - Client: Windows 11, version 24H2; Windows 11, version 23H2; Windows 11, version 22H2; Windows 10, version 22H2 - Server: None Click here (https://admin.microsoft.com/Adminportal/Home?#/windowsreleasehealth/:/wrhpreferences) to manage email notifications for Windows known issues. ------------------------------------------------------ December 10, 2024 01:48 AM Microsoft has received some reports of Copilot app being automatically installed and displayed in the Start menu of work devices. These reports are from IT administrators managing Windows updates in devices in enterprise and business environments. You can remove the Copilot app from work devices in your environment by following the steps listed in the workaround section. Workaround: You can remove or uninstall the Copilot app from your device by using one of the following methods: 1. If you are an enterprise user you can uninstall the Copilot app by going to ‘Settings-Apps-Installed Apps’, click on the three dots appearing on the right side of the app and select uninstall from the dropdown list. 2. If you are an IT administrator, you can prevent installation of the app or remove the Copilot app using one of the following methods: a. Prevent installation of the Copilot app: - Configure AppLocker (https://learn.microsoft.com/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) policy before installing Windows update. AppLocker helps you control which apps and files users can run. Note: AppLocker policy should be used instead of the Turn off Windows Copilot (https://gpsearch.azurewebsites.net/Default.aspx?PolicyID=16645) legacy policy and its Intune equivalent, TurnOffWindowsCopilot (https://learn.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI?WT.mc_id=Portal-fx#turnoffwindowscopilot). Both policies are subject to near-term deprecation. For more information, see: Updated Windows and Microsoft Copilot experience (https://learn.microsoft.com/windows/client-management/manage-windows-copilot) - The Applocker policy can be configured by following one of the methods listed in Edit an AppLocker policy (https://learn.microsoft.com/windows/security/application-security/application-control/app-control-for-business/applocker/edit-an-applocker-policy) and adding the below text to the policy: Publisher: CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US Package name: MICROSOFT.COPILOT Package version: * (and above) b. Remove the Copilot app using PowerShell script: - Open a Windows PowerShell window. You can do this by opening the Start menu, typing "PowerShell," and selecting "Windows PowerShell" from the results. - Once the PowerShell window is open, enter the following commands: # Get the package full name of the Microsoft Copilot app $packageFullName = Get-AppxPackage -Name "Microsoft.Copilot" | Select-Object -ExpandProperty PackageFullName # Remove the Microsoft Copilot app Remove-AppxPackage -Package $packageFullName Resolution: We are continuously investigating these reports and examining any deviations from the expected behavior. Our current investigation indicates that the installation of Copilot app is intentional as previously announced (https://techcommunity.microsoft.com/blog/windows-itpro-blog/enhanced-data-protection-with-windows-and-microsoft-copilot/4246428) following the installation of Windows updates released late September 2024 and later. We are working to update all the documentation related to Copilot installation and controls for commercial customers to reduce any confusion. If you are an IT administrator and have enabled group policies such as Windows AI Policy CSP (https://learn.microsoft.com/windows/client-management/mdm/policy-csp-windowsai#turnoffwindowscopilot) to prevent the installation of Copilot, the Copilot app will not be installed on the configured devices. If you have not enabled a group policy, you can remove the Copilot app by following one of the steps in the workaround section or configure the AppLocker policy (https://learn.microsoft.com/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) before installing Windows updates. When the AppLocker policy for Copilot is enabled, it will: - Prevent the app from being installed if it is not already on the device. - Block the app from being launched if it is already installed. Affected versions: - Client: Windows 11, version 24H2; Windows 11, version 23H2; Windows 11, version 22H2; Windows 10, version 22H2 - Server: None Click here (https://admin.microsoft.com/Adminportal/Home?#/windowsreleasehealth/:/wrhpreferences) to manage email notifications for Windows known issues. ------------------------------------------------------ November 27, 2024 18:49 PM Microsoft has received some reports of Copilot app being automatically installed and displayed in the Start menu of work devices. These reports are from IT administrators managing Windows updates in devices in enterprise and business environments. You can remove the Copilot app from work devices in your environment by following the steps listed in the workaround section. Workaround: You can remove or uninstall the Copilot app from your device by using one of the following methods: 1. If you are an enterprise user you can uninstall the Copilot app by going to ‘Settings-Apps-Installed Apps’, click on the three dots appearing on the right side of the app and select uninstall from the dropdown list. 2. If you are an IT administrator, you can prevent installation of the app or remove the Copilot app using one of the following methods: a. Prevent installation of the Copilot app: - Configure AppLocker (https://learn.microsoft.com/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) policy before installing Windows update. AppLocker helps you control which apps and files users can run. Note: AppLocker policy should be used instead of the Turn off Windows Copilot (https://gpsearch.azurewebsites.net/Default.aspx?PolicyID=16645) legacy policy and its Intune equivalent, TurnOffWindowsCopilot (https://learn.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI?WT.mc_id=Portal-fx#turnoffwindowscopilot). Both policies are subject to near-term deprecation. For more information, see: Updated Windows and Microsoft Copilot experience (https://learn.microsoft.com/windows/client-management/manage-windows-copilot) - The Applocker policy can be configured by following one of the methods listed in Edit an AppLocker policy (https://learn.microsoft.com/windows/security/application-security/application-control/app-control-for-business/applocker/edit-an-applocker-policy) and adding the below text to the policy: Publisher: CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US Package name: MICROSOFT.COPILOT Package version: * (and above) b. Remove the Copilot app using PowerShell script: - Open a Windows PowerShell window. You can do this by opening the Start menu, typing "PowerShell," and selecting "Windows PowerShell" from the results. - Once the PowerShell window is open, enter the following commands: # Get the package full name of the Microsoft Copilot app $packageFullName = Get-AppxPackage -Name "Microsoft.Copilot" | Select-Object -ExpandProperty PackageFullName # Remove the Microsoft Copilot app Remove-AppxPackage -Package $packageFullName Next Steps: We are investigating these reports and will provide more information when it is available. Affected versions: - Client: Windows 11, version 24H2; Windows 11, version 23H2; Windows 11, version 22H2; Windows 10, version 22H2 - Server: None Click here (https://admin.microsoft.com/Adminportal/Home?#/windowsreleasehealth/:/wrhpreferences) to manage email notifications for Windows known issues ------------------------------------------------------ November 26, 2024 19:56 PM Microsoft has received some reports of Copilot app being automatically installed and displayed in the Start menu of work devices. These reports are from IT administrators managing Windows updates in devices in enterprise and business environments. You can remove the Copilot app from work devices in your environment by following the steps listed in the workaround section. Workaround: You can remove or uninstall the Copilot app from your device by using one of the following methods: 1. If you are an enterprise user you can uninstall the Copilot app by going to ‘Settings-Apps-Installed Apps’, click on the three dots appearing on the right side of the app and select uninstall from the dropdown list. 2. If you are an IT administrator, you can prevent installation of the app or remove the Copilot app using one of the following methods: a. Prevent installation of the Copilot app: - Configure AppLocker (https://learn.microsoft.com/windows/security/application-security/application-control/app-control-for-business/applocker/applocker-overview) policy before installing Windows update. AppLocker helps you control which apps and files users can run. Note: AppLocker policy should be used instead of the Turn off Windows Copilot (https://gpsearch.azurewebsites.net/Default.aspx?PolicyID=16645) legacy policy and its Intune equivalent, TurnOffWindowsCopilot (https://learn.microsoft.com/windows/client-management/mdm/policy-csp-WindowsAI?WT.mc_id=Portal-fx#turnoffwindowscopilot). Both policies are subject to near-term deprecation. For more information, see: Updated Windows and Microsoft Copilot experience (https://learn.microsoft.com/windows/client-management/manage-windows-copilot) - The Applocker policy can be configured by following one of the methods listed in Edit an AppLocker policy (https://learn.microsoft.com/windows/security/application-security/application-control/app-control-for-business/applocker/edit-an-applocker-policy) and adding the below text to the policy: Publisher: CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US Package name: MICROSOFT.COPILOT Package version: * (and above) b. Remove the Copilot app using PowerShell script: - Open a Windows PowerShell window. You can do this by opening the Start menu, typing "PowerShell," and selecting "Windows PowerShell" from the results. - Once the PowerShell window is open, enter the following commands: # Get the package full name of the Microsoft Copilot app $packageFullName = Get-AppxPackage -Name "Microsoft.Copilot" | Select-Object -ExpandProperty PackageFullName # Remove the Microsoft Copilot app Remove-AppxPackage -Package $packageFullName Next Steps: We are investigating these reports and will provide more information when it is available. Affected versions: - Client: Windows 11, version 24H2; Windows 11, version 23H2; Windows 11, version 22H2; Windows 10, version 22H2 - Server: None Click here (https://admin.microsoft.com/Adminportal/Home?#/windowsreleasehealth/:/wrhpreferences) to manage email notifications for Windows known issues