Blog Post

Education Blog
3 MIN READ

Managing Copilot (formerly Bing Chat Enterprise) access for Faculty and Higher Education 18+ student

jseghersMSFT's avatar
jseghersMSFT
Icon for Microsoft rankMicrosoft
Dec 14, 2023

Today, we were thrilled to announce availability updates to education audiences for Microsoft Copilot and Copilot for Microsoft 365.  

Learn more about:  

 

In this blog, we will focus on options and recommendations for managing user access to Copilot with commercial data protection. We launched Copilot to M365 A3 and A5 faculty in August, and starting in early February 2024 we are expanding eligibility to:  

  • Microsoft 365 A1 and Office 365 A1/A3/A5 for faculty 
  • Microsoft 365 A1/A3/A5 and Office 365 A1/A3/A5 for higher education students 18+ 

 

If you aren’t a Microsoft customer today, you can learn more about our educational plans including Office 365 A1, a simple and free option for students and educators at eligible institutions.  

 

Commercial data protection means user and organizational data are protected, prompts and responses are not saved, Microsoft has no eyes-on access, and chat data isn't used to train the underlying large language models. It also provides seamless, managed access to Copilot using Microsoft Entra ID. Unlike Copilot for Microsoft 365, Copilot has no access to organizational data in the Microsoft 365 Graph. Commercial data protection applies to users with eligible work or school accounts wherever Copilot is available. It is available at no additional cost. Learn more: https://aka.ms/Copilot/Docs  

 

Administrators have the ability to enable or disable commercial data protection for all or select users with the Copilot service plan. Learn more here: Manage Copilot | Microsoft Learn 

 

To block access to Copilot entirely on your network: 

  1. Disable the Copilot service plan for your eligible users 
  2. Update your DNS configuration by setting the DNS entry for www.bing.com to be a CNAME for nochat.bing.com 

 

In late January: the Copilot service plan (part name: Bing_Chat_Enterprise) will be available for you to manage this experience for all eligible licenses indicated above.  

 

In early February: commercial data protection will be available in Copilot for eligible users and turned on by default unless you have disabled the service plan.  

 

We recommend all Education customers take additional steps to manage appropriate deployment: 

  • Validate your school type as Higher education, Primary/Secondary/K-12, or Other (research institution, academic library, etc.) to help us tailor the search and chat experience for your users. To do this, open the Microsoft 365 admin center and navigate to Search & intelligence, Configurations and then Microsoft Search in Bing for work or school. Learn more: Select a school or work search experience | Microsoft Learn 

 

 

 

 

  • Update Age group classifications and Consent provided for minor fields in the Microsoft Entra admin center. Higher education organizations can use these fields to indicate which students should or should not be eligible in their tenant, and all organizations can use these fields to prepare for future offers or to manage access to existing applications. There are multiple ways to update these fields including leveraging School Data Sync, PowerShell, the Graph API, or manually. Learn more: Elevating User Management with Age Group and Consent Provided Fields in Microsoft Entra - Microsoft Community Hub  

 

 

 

 

 

  •  Use Microsoft Entra terms of use for any desired additional or custom use policies. Organizations can use terms of use along with Conditional Access policies to require users or guests to accept your terms of use policy before getting access. These terms of use statements can be generalized or specific to groups or users and provided in multiple languages. Note: a working Microsoft Entra tenant with Microsoft Entra ID P1, or trial license, is required and currently available to Microsoft 365 A3 and A5 customers. Learn more: Terms of use in Microsoft Entra ID - Microsoft Entra ID | Microsoft Learn 
Updated Dec 14, 2023
Version 2.0
  • Florian Siegel's avatar
    Florian Siegel
    Copper Contributor

    Why is commercial data protection not available for primary/secondary schools?

  • PeterForster's avatar
    PeterForster
    Iron Contributor

    Has the CNAME change to nochat.bing.com been effectively tested? When I navigate to nochat.bing.com (which would be the result of the CNAME DNS change), I land on a site where I can simply click at the top of the button and return to Chat. Depending on the account I’m signed into, I’m either in Bing Chat Personal or, when I switch within the Bing Sign-In to my Work Account, I’m back in the old Bing Chat Enterprise. Could anyone clarify how this is supposed to work?

  • MaryHillSHU's avatar
    MaryHillSHU
    Brass Contributor

     jseghersMSFT  Please could Microsoft explain the rationale for the 18+ part?  What difference does being an adult or a child have when using Copilot?

  • "Update Age group classifications and Consent provided for minor fields in the Microsoft Entra admin center. Higher education organizations can use these fields to indicate which students should or should not be eligible in their tenant, and all organizations can use these fields to prepare for future offers or to manage access to existing applications. " So how will it work? What happens if Age Group is set to "None" OR Concent Provided for Minor is set to "None" and the license is enabled and assigned to a user?

  • PeterForster's avatar
    PeterForster
    Iron Contributor

    jseghersMSFT thanks for you reply (which I received through the Community Hub Update E-Mail but is not visible here)

    Can you point out the exact configuration that is required to do on a Windows DNS?

    I've tested it myself with DNS but none of the approaches work. Some guys at the web even say that this cannot be done with a MSFT DNS. It would be great to have the article updated exactly with the steps required. From my point of view it is by RFC denied to create a CNAME record in a zone with the same name. Say we have the zone bing.com and I try to create a CNAME to nochat.bing.com with www as the host  DNS will refuse this. See RFC1912 section 2.4

  • damckenzie's avatar
    damckenzie
    Copper Contributor

    Would also like to know ""Update Age group classifications  - So how will it work? What happens if Age Group is set to "None" OR Consent Provided for Minor is set to "None" and the license is enabled and assigned to a user"

     

    In the A3 and A5 SKUs will Copilot service plan suddenly appear and automatically enabled ? 

     

     

     

     

     

  • kidtrebor's avatar
    kidtrebor
    Copper Contributor

    Hi,

     

    From what I read here, Copilot should be disabled for students under the age of 18 in educational institutions provided that the school type is set to Primary/Secondary/K-12 and the student accounts' age group in Azure is set to "minor" or "Not an adult".

     

    I have validated these settings in my organisation, but having checked with a test student account I am still able to access Copilot, e.g., through copilot.microsoft.com. At the time of writing Copilot in the Edge browser is experiencing a service outage, but I am confident that it's still enabled there too.

     

    Have I misunderstood the instructions, or is this not working? jseghersMSFT would be very grateful for clarification.

     

    Regards,

    Robert