Remove Microsoft Copilot Consumer App from Managed Windows 11 Devices
The April 2026 Windows security update introduced the RemoveMicrosoftCopilotApp policy, giving IT administrators a supported native mechanism to remove the Copilot consumer app from managed Windows 11 endpoints. The policy can be enforced via Group Policy, Microsoft Intune Settings Catalog, or PowerShell, and should be included in baseline endpoint configurations to prevent the app from persisting after future Windows updates. This addresses compliance and software governance requirements for organisations that need to restrict consumer AI applications on corporate devices.
Indicators
- Microsoft Copilot consumer app is present on managed Windows 11 devices after Windows updates
- Organisation policy requires removal of consumer AI applications from corporate endpoints
- Copilot app reappears or is pre-installed across a fleet of Windows 11 machines
- No existing Group Policy or Intune control was previously available to block or remove the Copilot app natively
Likely causes
- Microsoft installs the Copilot consumer app by default as part of Windows 11 inbox app bundling
- No native Group Policy control existed prior to the April 2026 Windows security update to remove Copilot
- Copilot is packaged as a Microsoft Store or inbox app and may be reinstated by Windows Update cycles
Diagnostic steps
-
Verify the April 2026 Windows security update is installed on the target device by navigating to Settings > Windows Update > Update History, or by running 'Get-HotFix' in PowerShell and confirming the relevant KB is present.
-
Confirm the Copilot app is present on the device by running in PowerShell: 'Get-AppxPackage -Name *Microsoft.Copilot* -AllUsers'. Also check for the app in the Start menu as a secondary confirmation.
-
To remove via PowerShell immediately, run: 'Get-AppxPackage -Name *Microsoft.Copilot* -AllUsers | Remove-AppxPackage -AllUsers'. This removes the app for all user profiles on the device.
-
To remove via Group Policy, open the Group Policy Management Console (GPMC), navigate to Computer Configuration > Administrative Templates, locate the 'RemoveMicrosoftCopilotApp' policy setting, and set it to Enabled. Link the GPO to the appropriate Organisational Unit (OU) containing managed devices.
-
To deploy via Microsoft Intune, create a new Configuration Profile using the Settings Catalog. Search for 'RemoveMicrosoftCopilotApp', enable the setting, and assign the profile to the target device group. Allow time for policy sync to occur.
-
After applying the policy or running the PowerShell command, verify successful removal by re-running: 'Get-AppxPackage -Name *Microsoft.Copilot* -AllUsers'. Confirm no results are returned, and verify the app no longer appears in the Start menu.
Resolution path
- Confirm the April 2026 Windows security update is installed on all target devices before attempting policy-based removal
- Choose the appropriate removal method based on management tooling: Group Policy for on-premises-joined devices, Intune for cloud or hybrid-managed devices, or PowerShell for ad hoc or immediate removal
- If using Group Policy: enable the RemoveMicrosoftCopilotApp policy under Computer Configuration > Administrative Templates in GPMC and link the GPO to the relevant OU
- If using Microsoft Intune: create a Settings Catalog Configuration Profile with RemoveMicrosoftCopilotApp enabled and assign it to the target device group; allow policy sync to complete
- If using PowerShell: run 'Get-AppxPackage -Name *Microsoft.Copilot* -AllUsers | Remove-AppxPackage -AllUsers' on the target device or via a remote script deployment
- Verify removal by running 'Get-AppxPackage -Name *Microsoft.Copilot* -AllUsers' and confirming no results are returned, and checking the Start menu
Prevention
- Apply the RemoveMicrosoftCopilotApp Group Policy or Intune policy proactively as part of the standard baseline before deploying new Windows 11 devices
- Include the Copilot removal setting in the standard Intune Settings Catalog baseline profile assigned to all managed endpoint device groups
- Monitor Microsoft's monthly Patch Tuesday releases for new inbox app management policies and evaluate them for corporate software compliance requirements
- Implement Intune or Group Policy controls to prevent reinstallation of consumer apps following future Windows Update cycles
Tools
- Group Policy Management Console (GPMC)
- Microsoft Intune — Settings Catalog / Configuration Profiles
- PowerShell — Get-AppxPackage
- PowerShell — Remove-AppxPackage
- PowerShell — Get-HotFix
- Windows Settings > Windows Update > Update History