Blog Post

Education Blog
3 MIN READ

Managing Copilot Chat access for Faculty and Higher Education 18+ student

jseghersMSFT's avatar
jseghersMSFT
Icon for Microsoft rankMicrosoft
Dec 14, 2023

Note: this blog has been updated to reflect product and process changes

Copilot Chat is your free, secure AI chat powered by GPT-4o with enterprise data protection. It includes features like file and image upload, image generation, Copilot Pages, previous chats, summarization, code interpreter, and more. Plus, you can now access and use agents, priced on a metered basis. Learn more: aka.ms/CopilotChatEDU

 

Enterprise data protection means prompts and responses are protected by the same contractual terms and commitments widely trusted by our customers for their emails in Exchange and files in SharePoint. We secure your data, your data is private, your access controls and policies apply to Copilot, you’re protected against AI security and copyright risks, and your data isn’t used to train foundation models. Learn more: https://learn.microsoft.com/copilot/microsoft-365/enterprise-data-protection

 

Copilot Chat is available at no cost for users with a Microsoft 365 A1, A3, or A5 license when signed in with their school or work account. It is currently available to faculty, staff, and higher education students aged 18+. Get started today at M365Copilot.com.

Learn more:

 

In this blog, we will focus on options and recommendations for managing user access to Copilot Chat.

We recommend all Education customers take additional steps to manage appropriate deployment: 

  • Validate your school type as Higher education, Primary/Secondary/K-12, or Other (research institution, academic library, etc.) to help us tailor the search and chat experience for your users.
  • To do this, you will need a PowerShell script: ConfigureTenantEduType.ps1 that you can download here.
  • To run the script, open PowerShell in administrator mode. Also make sure you have the username and password available of a global administrator on your tenant. On your first run, the necessary packages will be installed, hence the administrator mode.
  • Usage:
    •  .\ConfigureTenantEduType.ps1 - When no parameter is used the actual setting of the tenant will be retrieved. 
    •  .\ConfigureTenantEduType.ps1 1 - This sets the tenant identifier to K-12
    •  .\ConfigureTenantEduType.ps1 2 - This sets the tenant identifier to HED.
    •  .\ConfigureTenantEduType.ps1 3 - This sets the tenant identifier to other.
  • Update Age group classifications and Consent provided for minor fields in the Microsoft Entra admin center. Higher education organizations can use these fields to indicate which students should or should not be eligible in their tenant, and all organizations can use these fields to prepare for future offers or to manage access to existing applications. There are multiple ways to update these fields including leveraging School Data Sync, PowerShell, the Graph API, or manually. Learn more: Elevating User Management with Age Group and Consent Provided Fields in Microsoft Entra - Microsoft Community Hub  

 

 

 

  •  Use Microsoft Entra terms of use for any desired additional or custom use policies. Organizations can use terms of use along with Conditional Access policies to require users or guests to accept your terms of use policy before getting access. These terms of use statements can be generalized or specific to groups or users and provided in multiple languages. Note: a working Microsoft Entra tenant with Microsoft Entra ID P1, or trial license, is required and currently available to Microsoft 365 A3 and A5 customers. Learn more: Terms of use in Microsoft Entra ID - Microsoft Entra ID | Microsoft Learn 

 

 

Updated Apr 15, 2025
Version 6.0

9 Comments

  • kidtrebor's avatar
    kidtrebor
    Copper Contributor

    Hi,

     

    From what I read here, Copilot should be disabled for students under the age of 18 in educational institutions provided that the school type is set to Primary/Secondary/K-12 and the student accounts' age group in Azure is set to "minor" or "Not an adult".

     

    I have validated these settings in my organisation, but having checked with a test student account I am still able to access Copilot, e.g., through copilot.microsoft.com. At the time of writing Copilot in the Edge browser is experiencing a service outage, but I am confident that it's still enabled there too.

     

    Have I misunderstood the instructions, or is this not working? jseghersMSFT would be very grateful for clarification.

     

    Regards,

    Robert

    • Pelle's avatar
      Pelle
      Copper Contributor

      We are a university in Sweden experiencing issues with Managing Copilot (formerly Bing Chat Enterprise) access for Faculty and Higher Education 18+ students. Our students do not have access despite being correctly licensed in our tenant. Should the setting "Select a school or work search experience" be set to "School search and Higher education"? Currently, it is set to "School search" and "Other"." Could this setting be related to the issue where our students, upon login, are redirected to a "coming soon" page? It works fine with workaccounts.

  • MaryHillSHU's avatar
    MaryHillSHU
    Brass Contributor

     jseghersMSFT  Please could Microsoft explain the rationale for the 18+ part?  What difference does being an adult or a child have when using Copilot?

  • MathiasR's avatar
    MathiasR
    Brass Contributor

    jseghersMSFT I have the same question as PeterForster about how to implement these CNAMEs as well as the question that chat/copilot seems to be available when I go directly to nochat.bing.com.

    Also asked at https://learn.microsoft.com/en-us/answers/questions/1513407/please-clarify-how-to-enforce-commercial-data-prot

     

    thanks!!

     

    M.

  • damckenzie's avatar
    damckenzie
    Copper Contributor

    Would also like to know ""Update Age group classifications  - So how will it work? What happens if Age Group is set to "None" OR Consent Provided for Minor is set to "None" and the license is enabled and assigned to a user"

     

    In the A3 and A5 SKUs will Copilot service plan suddenly appear and automatically enabled ? 

     

     

     

     

     

  • PeterForster's avatar
    PeterForster
    Iron Contributor

    jseghersMSFT thanks for you reply (which I received through the Community Hub Update E-Mail but is not visible here)

    Can you point out the exact configuration that is required to do on a Windows DNS?

    I've tested it myself with DNS but none of the approaches work. Some guys at the web even say that this cannot be done with a MSFT DNS. It would be great to have the article updated exactly with the steps required. From my point of view it is by RFC denied to create a CNAME record in a zone with the same name. Say we have the zone bing.com and I try to create a CNAME to nochat.bing.com with www as the host  DNS will refuse this. See RFC1912 section 2.4

  • "Update Age group classifications and Consent provided for minor fields in the Microsoft Entra admin center. Higher education organizations can use these fields to indicate which students should or should not be eligible in their tenant, and all organizations can use these fields to prepare for future offers or to manage access to existing applications. " So how will it work? What happens if Age Group is set to "None" OR Concent Provided for Minor is set to "None" and the license is enabled and assigned to a user?

  • PeterForster's avatar
    PeterForster
    Iron Contributor

    Has the CNAME change to nochat.bing.com been effectively tested? When I navigate to nochat.bing.com (which would be the result of the CNAME DNS change), I land on a site where I can simply click at the top of the button and return to Chat. Depending on the account I’m signed into, I’m either in Bing Chat Personal or, when I switch within the Bing Sign-In to my Work Account, I’m back in the old Bing Chat Enterprise. Could anyone clarify how this is supposed to work?

  • Florian Siegel's avatar
    Florian Siegel
    Copper Contributor

    Why is commercial data protection not available for primary/secondary schools?