Privacy and Security Enable or Disable Apps Access to Generative AI in Windows 11


  • Staff
AI_banner.png

This tutorial will show you how to allow or deny apps access to generative AI for your account or all users in Windows 11.

Starting with Windows 11 build 26236 (Canary), Microsoft added a new Generative AI section to the Privacy & security settings page.

The new Generative AI section allows you to turn on or off whether apps can use generative AI features.


Contents

  • Option One: Turn On or Off Apps Access to Generative AI for All Users in Settings
  • Option Two: Turn On or Off Apps Access to Generative AI for All Users using REG file
  • Option Three: Turn On or Off Apps Access to Generative AI for Current User in Settings
  • Option Four: Turn On or Off Apps Access to Generative AI for Current User using REG file
  • Option Five: Turn On or Off Specific Apps Access to Generative AI for Current User in Settings
  • Option Six: Enable or Disable Apps Access to Generative AI for All Users in Local Group Policy Editor
  • Option Seven: Enable or Disable Apps Access to Generative AI for All Users using REG file




Option One

Turn On or Off Apps Access to Generative AI for All Users in Settings


You must be signed in as an administrator to use this option.


1 Open Settings (Win+I).

2 Click/tap on Privacy & security on the left side, and click/tap on Generative AI on the right side under "App permissions". (see screenshot below)


Generative_AI.png

3 Turn On (default) or Off Generative AI access for what you want. (see screenshot below)

This will enable (on) or disable (off) users ability to use Option Three, Option Four, and Option Five.


Generative_AI_access.png

4 You can now close Settings if you like.




Option Two

Turn On or Off Apps Access to Generative AI for All Users using REG file


You must be signed in as an administrator to use this option.

This is the same setting as Option One.


1 Do step 2 (on) or step 3 (off) below for what you want.


 2. Turn On Apps Access to Generative AI for All Users

This is the default setting to allow using Option Three, Option Four, and Option Five.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Turn_ON_generative_AI_access_for_all_users.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Allow"


 3. Turn Off Apps Access to Generative AI for All Users

This will disable and prevent using Option Three, Option Four, and Option Five.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Turn_OFF_generative_AI_access_for_all_users.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Deny"

4 Save the .reg file to your desktop.

5 Double click/tap on the downloaded .reg file to merge it.

6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7 You can now delete the downloaded .reg file if you like.




Option Three

Turn On or Off Apps Access to Generative AI for Current User in Settings


1 Open Settings (Win+I).

2 Click/tap on Privacy & security on the left side, and click/tap on Generative AI on the right side under "App permissions". (see screenshot below)


Generative_AI.png

3 Turn On (default) or Off Let apps use generative AI for what you want. (see screenshot below)

Turning off Let apps use generative AI, will disable and gray out Option Five.


Let_apps_use_generative_AI.png

4 You can now close Settings if you like.




Option Four

Turn On or Off Apps Access to Generative AI for Current User using REG file


This is the same setting as Option Three.


1 Do step 2 (on) or step 3 (off) below for what you want.


 2. Turn On Apps Access to Generative AI for Current User

This is the default setting to allow you to use Option Five.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Turn_ON_app_access_to_generative_AI_for_current_user.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Allow"


 3. Turn Off Apps Access to Generative AI for Current User

This will disable and prevent you from using Option Five.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Turn_OFF_app_access_to_generative_AI_for_current_user.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Deny"

4 Save the .reg file to your desktop.

5 Double click/tap on the downloaded .reg file to merge it.

6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7 You can now delete the downloaded .reg file if you like.




Option Five

Turn On or Off Specific Apps Access to Generative AI for Current User in Settings


1 Open Settings (Win+I).

2 Click/tap on Privacy & security on the left side, and click/tap on Generative AI on the right side under "App permissions". (see screenshot below)


Generative_AI.png

3 Click/tap on Let apps use generative AI to expand it open if able. (see screenshot below step 4)

4 Turn On (default) or Off any available apps you want. (see screenshot below)

Let_specific_apps_use_generative_AI.png

5 You can now close Settings if you like.




Option Six

Enable or Disable Apps Access to Generative AI for All Users in Local Group Policy Editor


You must be signed in as an administrator to use this option.

The Local Group Policy Editor is only available in the Windows 11 Pro, Enterprise, and Education editions.

All editions can use Option Seven to configure the same policy.


1 Open the Local Group Policy Editor (gpedit.msc).

2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)

Computer Configuration > Administrative Templates > Windows Components > App Privacy

Generative_AI_access_gpedit-1.png

3 In the right pane of App Privacy in the Local Group Policy Editor, double click/tap on the Let Windows apps make use of generative AI features of Windows policy to edit it. (see screenshot above)

4 Do step 5 (enable), step 6 (disable), or step 7 (default) below for what you want.

5 Always Enable Apps Access to Generative AI for All Users

This will turn on and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.


A) Select (dot) Enabled. (see screenshot below)​

B) Select Force Allow in the "Default for all apps" drop menu in Options.​

C) Click/tap on OK, and go to step 8 below.​

Generative_AI_access_gpedit-3.png

6 Disable Apps Access to Generative AI for All Users

This will turn off and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.


A) Select (dot) Enabled. (see screenshot below)​

B) Select Force Deny in the "Default for all apps" drop menu in Options.​

C) Click/tap on OK, and go to step 8 below.​

Generative_AI_access_gpedit-4.png

7 Default User-choice Apps Access to Generative AI

This is the default setting to allow using Option One, Option Two, Option Three, Option Four, and Option Five.


A) Select (dot) Not Configured. (see screenshot below)​

B) Click/tap on OK, and go to step 8 below.​

Generative_AI_access_gpedit-2.png

8 You can now close the Local Group Policy Editor if you like.




Option Seven

Enable or Disable Apps Access to Generative AI for All Users using REG file


You must be signed in as an administrator to use this option.

This is the same setting as Option Six.


1 Do step 2 (enable), step 3 (disable), or step 4 (default) below for what you want.


 2. Always Enable Apps Access to Generative AI for All Users

This will turn on and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.


A) Click/tap on the Download button below to download the file below, and go to step 5 below.​

Force_allow_app_access_to_generative_AI_for_all_users.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsAccessGenerativeAI"=dword:00000001
"LetAppsAccessGenerativeAI_UserInControlOfTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceAllowTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceDenyTheseApps"=hex(7):00,00


 3. Disable Apps Access to Generative AI for All Users

This will turn off and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.


A) Click/tap on the Download button below to download the file below, and go to step 5 below.​

Disable_app_access_to_generative_AI_for_all_users.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsAccessGenerativeAI"=dword:00000002
"LetAppsAccessGenerativeAI_UserInControlOfTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceAllowTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceDenyTheseApps"=hex(7):00,00


 4. Default User-choice Apps Access to Generative AI

This is the default setting to allow using Option One, Option Two, Option Three, Option Four, and Option Five.


A) Click/tap on the Download button below to download the file below, and go to step 5 below.​

Default_user-choice_app_access_to_generative_AI.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsAccessGenerativeAI"=-
"LetAppsAccessGenerativeAI_UserInControlOfTheseApps"=-
"LetAppsAccessGenerativeAI_ForceAllowTheseApps"=-
"LetAppsAccessGenerativeAI_ForceDenyTheseApps"=-

5 Save the .reg file to your desktop.

6 Double click/tap on the downloaded .reg file to merge it.

7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

8 You can now delete the downloaded .reg file if you like.


That's it,
Shawn Brink
 

Attachments

  • Turn_OFF_generative_AI_access_for_all_users.reg
    676 bytes · Views: 70
  • Turn_ON_generative_AI_access_for_all_users.reg
    686 bytes · Views: 59
  • Turn_OFF_app_access_to_generative_AI_for_current_user.reg
    682 bytes · Views: 39
  • Turn_ON_app_access_to_generative_AI_for_current_user.reg
    684 bytes · Views: 37
  • Default_user-choice_app_access_to_generative_AI.reg
    938 bytes · Views: 36
  • Disable_app_access_to_generative_AI_for_all_users.reg
    1 KB · Views: 57
  • Force_allow_app_access_to_generative_AI_for_all_users.reg
    1 KB · Views: 40
Last edited:
I don't have Generative AI in windows 11 Home.23H2
 

My Computer

System One

  • OS
    Windows 11 Home 23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP
    Memory
    8GB
    Monitor(s) Displays
    1
    Hard Drives
    1
    Browser
    Firefox
    Antivirus
    Avast
I don't have Generative AI in windows 11 Home.23H2
Hello, :alien:

Currently it's only available in Windows 11 build 26236 (Canary).
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender
Hello, :alien:

Currently it's only available in Windows 11 build 26236 (Canary).
These 2 options were on by default after 26236 build updates.
Since it is unclear what those AI apps do, I just turned those off. 😵‍💫
1718421191392.png
 

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo Yoga 920
    CPU
    Intel I7-8550U
    Motherboard
    n/a
    Memory
    16GB
    Graphics Card(s)
    Intel Graphics UHD 620
    Sound Card
    Realtek High Definition Audio (SST)
    Monitor(s) Displays
    4k Touch screen
    Screen Resolution
    3480 x 2160
    Hard Drives
    512GB NVMe
Thanks for your reply Brink.Have a good night.
 

My Computer

System One

  • OS
    Windows 11 Home 23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP
    Memory
    8GB
    Monitor(s) Displays
    1
    Hard Drives
    1
    Browser
    Firefox
    Antivirus
    Avast

Latest Tutorials

Back
Top Bottom