How do I create a Domain group policy to uninstall Copilot

OHPRS Admin 316 Reputation points
2026-05-31T17:05:26.3133333+00:00

How do I create a Domain group policy to uninstall Copilot

Microsoft Copilot | Microsoft 365 Copilot | Development
0 comments No comments

1 answer

Sort by: Most helpful
  1. AI answer

    2026-05-31T17:05:41.01+00:00

    To uninstall or prevent the Microsoft Copilot app using domain Group Policy, configure a GPO that targets the Copilot MSIX package or uses the supported removal policies for Windows 11, version 24H2.

    1. Install and open Group Policy Management
      1. On a management server, install Group Policy Management via Server Manager > Add Roles and Features > Features > Group Policy Management.
      2. Open Group Policy Management from Administrative Tools.
    2. Create a domain GPO for app removal
      1. In Group Policy Management, right-click the target domain or OU and select Create a GPO in this domain, and Link it here….
      2. Name it, for example, Remove Copilot App and select OK.
      3. Right-click the new GPO and select Edit….
    3. Use policy-based in-box app removal (Windows 11 24H2) For Windows 11, version 24H2 Enterprise/Education devices, configure the built-in policy that removes default Store apps and extend it to Copilot:
      1. In the GPO editor, go to: Computer Configuration > Administrative Templates > Windows Components > App Package Deployment.
      2. Enable Remove Default Microsoft Store packages from the system.
      3. In the same policy, under Specify additional package family names to remove, add the Copilot app’s package family name (PFN).
        • To find the PFN on a reference machine, run in PowerShell:
                  Get-AppxPackage *Copilot* | Select-Object PackageFamilyName
          
        • Copy the PackageFamilyName value into the multi-line list, one PFN per line.
      4. Close the editor; the GPO will apply to targeted computers when Group Policy refreshes.
    4. Use the dedicated Copilot removal policy via MDM (if managing with Intune/MDM) If devices are managed by MDM (e.g., Intune) and are on Windows 11, version 24H2, use the RemoveMicrosoftCopilotApp CSP policy instead of (or in addition to) GPO:
      • Configure:
        • ./Device/Vendor/MSFT/Policy/Config/WindowsAI/RemoveMicrosoftCopilotApp = 1 (Removal Enabled), or
        • ./User/Vendor/MSFT/Policy/Config/WindowsAI/RemoveMicrosoftCopilotApp = 1.
      • This will uninstall the Microsoft Copilot app when:
        • Microsoft 365 Copilot and Microsoft Copilot are both installed,
        • the Copilot app was not user-installed, and
        • the app has not been launched in the last 28 days.
    5. (Alternative) Block Copilot installation with AppLocker To prevent Copilot from being installed or run at all:
      1. Create or edit an AppLocker policy in a GPO (per Edit an AppLocker policy).
      2. Add a Publisher rule with:
        • Publisher: CN=MICROSOFT CORPORATION, O=MICROSOFT CORPORATION, L=REDMOND, S=WASHINGTON, C=US
        • Package name: MICROSOFT.COPILOT
        • Package version: *
      3. Deploy this GPO to the target OU/domain.
    6. Link and scope the GPO
      • Ensure the GPO is linked to the OU(s) containing the target Windows 11 devices.
      • Optionally use security group filtering or WMI filters (for example, to target only Windows 11, version 24H2 Enterprise/Education) as described for policy-based app removal.

    After deployment, allow time for Group Policy refresh (or run gpupdate /force on clients). The Copilot app will be removed or blocked according to the configured policies.


    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.