Copilot in Windows must be disabled for Windows 11

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-268317	WN11-00-000125	SV-268317r1016371_rule		Medium

Description

Some features may communicate with the vendor, sending system information or downloading data or components for the feature. Turning off this capability will prevent potentially sensitive information from being sent outside the enterprise and uncontrolled updates to the system.

STIG	Date
Microsoft Windows 11 Security Technical Implementation Guide	2024-09-12

Details

Check Text (C-72338r1016369_chk)

If the following local computer policy is not configured as specified, this is a finding:
User Configuration >> Administrative Templates >> Windows Components >> Windows Copilot >> "Turn off Windows Copilot" to "Enabled”.

Fix Text (F-72241r1016370_fix)

Configure the policy value for User Configuration >> Administrative Templates >> Windows Components >> Windows Copilot >> "Turn off Windows Copilot" to "Enabled".