CoPilot

[aac]

Hi all, does anyone know if there is a way to mark students as minors in bulk using Powershell. I have had a case open with Microsoft for over a week now and am getting nowhere. Essentially I want to disable Copilot for students urgently and it seems that to do this we need to mark them as minors in AzureAD but cannot find any way of doing this in bulk, security group would be the ideal way...

[TechMonkey]

Haven't tried it yet but what about update-AzADUser? https://learn.microsoft.com/en-us/powershell/module/az.resources/update-azaduser?view=azps-13.2.0

[notalot]

Hi, I haven't done it using PowerShell but I know that Schools Data Sync does this as part of the sync so I would assume there is a mechanism.

[Millgate_Victoria]

Heya, I must have mis-understood here , why would you buy co-pilot for students if you did not want them using it? as i thought co-pilot was a billable license that was a bolt on ?

[aac]

Heya, I must have mis-understood here , why would you buy co-pilot for students if you did not want them using it? as i thought co-pilot was a billable license that was a bolt on ?

 

Hi Victoria

 

The basic version of CoPilot is free even with A1 licenses now. I am still struggling to work out exactly how to disable this for students but my understanding is that students need to be marked as minors in Azure however I have found this breaks access to other apps they need...

[aac]

 

This is what I am trying to disable for our students (see the image) we have A1 licenses for all staff/students.

[Millgate_Victoria]

I was asking Shaun and he said It might be easier to bulk disable the co-pilot license in the user accounts, but there may not be a quick or easy way to do this. I am doubting this fixes your query though which is how to run a script etc

[aac]

Hi Victoria, unfortunately it is more difficult then this as there is no license to disable for it.

[Millgate_Victoria]

Heya AAC

 

would this work through the A1 license ?

 

To block Copilot usage on your school domain, you can use your school's Microsoft 365 admin center to manage Copilot access by disabling the feature for all users, or by applying specific policies to restrict its use based on user roles or groups; this can be done through settings related to "Microsoft 365 Copilot" or "Commercial Data Protection" depending on your Microsoft plan.

Key steps:

Access the Microsoft 365 Admin Center:

Log in as an administrator with the necessary permissions to manage policies.

Navigate to Copilot settings:

 

• Go to "Settings" > "Permissions" and then find the "Microsoft 365 Copilot" option.
  

Disable Copilot access:

 

• Select the appropriate option to restrict Copilot usage, such as setting it to "Off" for all users or configuring specific user groups with limited access.
  

 

Important considerations:

Commercial Data Protection:

If your school has a commercial Microsoft 365 plan, you might need to leverage "Commercial Data Protection" settings to enforce stricter Copilot usage controls.

Group Policy (for Windows devices):

For managing Copilot access on Windows devices within your domain, you can also use Group Policy to disable the "Windows Copilot" feature.

Web filtering (for browser access):

If needed, you can configure web filters on your network to block specific URLs associated with Copilot access.

[Rob_D]

[ATTACH=CONFIG]73159[/ATTACH]

This is what I am trying to disable for our students (see the image) we have A1 licenses for all staff/students.

 

Is this the Gen-AI CoPilot or just the 365 Homepage that MS have renamed CoPilot for some reason?

[mikes]

it's the gen AI co-pilot on ours - but just the basic version - it allows writing text prompts but if you ask it to make an image or video it asks you to buy credits.

 

We have A1 license, but it actually loads not signed in - if you try and sign in with your o365 credentials it just asks if you want home or enterprise - enterprise takes you to a page (copilot.cloud.microsoft) that says "coming soon". It seems the signed out version is just a preview.

 

Seems to me like this is part of an AppX app - can you not try

 

Get-AppXPackage *pilot* | Remove-AppXPackage -AllUsers

 

to remove it? Not sure if this would break any other part of Windows though so use caution!

I haven't been asked to remove it from our build here

[TechMonkey]

Just seen this on ours. It isn't an app, it is in the Waffle of M365 and just takes you to the old O365 page where you can see your recent files and search your tenant. Stupidly labelled as Copilot bu I can't find anything AI about it.

EDIT: Just clicked on the Learn More link and it tells you that it is the M365 Office app is now named Copilot.

Edited February 20, 2025 by TechMonkey

[Rob_D]

Yeah there's 2 CoPilot apps now The AI one and the 365 homepage which has the a M365 label.

[Millgate_Victoria]

I cannot do a cut and paste of the images as it says too many characters , but yes when logging on I am seeing a box saying

 

The Microsoft 365 (Office) app is now the Microsoft 365 Copilot app. Enjoy the same app with access to AI-powered features.

 

a renaming as occurred ,

[Publisher2519]

We have managed to disable the Copilot App on Landing page

# Connect with the appropriate scopes to create service principals
Connect-MgGraph -Scopes "Application.ReadWrite.All"

# Create service principal for the service Enterprise Copilot Platform (Microsoft 365 Copilot)
New-MgServicePrincipal -AppId fb8d773d-7ef8-4ec0-a117-179f88add510

# Create service principal for the service Security Copilot (Microsoft Security Copilot) 
New-MgServicePrincipal -AppId bb5ffd56-39eb-458c-a53a-775ba21277da

# Create service principal for the service M365ChatClient (Copilot on landing page https://m365.cloud.microsoft/) 

New-MgServicePrincipal -AppId "c0ab8ce9-e9a0-42e7-b064-33d422df41f1" #(this App ID might be different in your tenant)

 

if you apply the above two only it will give you no access message when accessing the landing page from it you can get the exact App ID for M365ChatClient

 

Then create a Conditional Access policies selecting the above Apps and Users\Groups per requirements to block them access to those Apps.

 

https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-all-users-copilot-ai-security

 

Edited October 20, 2025 by Publisher2519