Forum Discussion
Disable CoPilot on Kiosk (Multi App)
I am wondering if there is a easy way to disable copilot on a Windows 11 23h2 Multi App Kiosk. We are using these kiosks as testing computers for students, so they need to be locked down. We currently have the kiosk set up to as Auto logon so they create a local profile which will not get targeted by the Intune configuration policies I have found online. I have tried the following:
OMA-URI: ./User/Vendor/MSFT/Policy/Config/WindowsAI/TurnOffWindowsCopilot
Data Type: Integer
Value: 1
Is there a simple way to get this disabled that I seem to be missing?
Hello MagicTurtle1
Welcome to the Microsoft community, my name is Recep I'll be happy to help you today.
I can provide some guidance on disabling CoPilot on a Windows 11 kiosk using Microsoft Intune.
Here are the general steps you can follow:
- Open the Microsoft Endpoint Manager admin center.
Navigate to "Devices" > "Configuration profiles."
Create a new profile or edit an existing one.
- Select "Windows 10 and later" as the platform.
- Choose a profile type that is appropriate for your scenario. For a kiosk device, you might use a "Device restrictions" profile.
- Look for a setting related to CoPilot or Windows AutoPilot.
- If you can't find a specific setting for CoPilot, you may need to look for more general settings related to Windows Autopilot or device setup.
If you need more, please follow the below link.
https://learn.microsoft.com/en-us/mem/intune/configuration/kiosk-settings
If I have answered your question, please mark your post as Solved
If you like my response, please give it a Like
Appreciate your Kudos! Proud to contribute! 🙂
Hi Deleted
I am able to get the policy that I created work on normal accounts, the issue that I am running into is that the Kiosk User is a local user and the policy doesn't seem to target local users and I cannot find anything that will target devices. Any ideas?
Hello MagicTurtle1
Welcome to the Microsoft community, my name is Recep I'll be happy to help you today.
- Instead of targeting users, you might try creating a device configuration profile. In the "Assignments" section, you can target specific devices or groups of devices.
- Create a PowerShell script to apply the specific settings you need. You can then deploy this script using Intune.
Example PowerShell script:
$registryPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection"
$name = "AllowTelemetry"
$value = 0
if (-not (Test-Path $registryPath)) {
New-Item -Path $registryPath -Force
}
Set-ItemProperty -Path $registryPath -Name $name -Value $value
- This script sets the "AllowTelemetry" registry key to 0, which is an example of a setting that CoPilot might be using.
- Deploy the PowerShell script using an Intune PowerShell script deployment.
- Consider using Intune Administrative Templates. This feature allows you to configure Group Policy settings using Intune.
- Go to "Endpoint security" in the Microsoft Endpoint Manager admin center.
- Select "Configuration profiles."
- Choose "Create profile" and select "Administrative Templates."
- Configure the necessary settings and deploy the profile.
- Check if there are any custom Configuration Service Providers (CSPs) available for configuring local user settings.
Example:
OMA-URI: ./Device/Vendor/MSFT/Policy/Config/WindowsAI/TurnOffWindowsCopilot
Data Type: Integer
Value: 1
If I have answered your question, please mark your post as Solved
If you like my response, please give it a Like
Appreciate your Kudos! Proud to contribute! 🙂
