System Enable or Disable Reducing Protections for Agent Connectors in Windows 11


Agent_connectors_header.webp

This tutorial will show you how to turn on or off enable more agent connectors by reducing protections for all users in Windows 11.

Starting with Windows 11 build 26220.7344 (Dev and Beta), Windows now offers native support for the Model Context Protocol (MCP), an open standard that gives AI agents a universal way to connect with apps, tools, and services. Agents can discover and connect to these tools and other agents via a secure, manageable Windowson-device registry (ODR). By default, all agent connectors in the Windows on-device registry will be contained in a secure environment with their own identity and audit trail. With OS level integration, MCP on Windows delivers secure discoverability, consistent controls, and enterprise grade manageability—empowering developers, IT professionals, and end users to build and deploy agentic workflows at scale.

As part of this release, two agent connectors are built into Windows—File Explorer and Windows Settings.
  • File Explorer Connector
    Agents can use the File Explorer connector to manage, organize and retrieve local files on a user’s device with their consent. On Copilot+ PCs, the connector can also perform natural language search to retrieve the exact file based on descriptions, content, metadata, and, for images, enhanced search based on image classification.
  • Windows Settings Connector
    On Copilot+ PC devices, Windows Settings connector lets users check, change settings, or navigate directly to specific pages such as display, mouse, keyboard, and sound using natural language.
When Enable more agent connectors by reducing protections is turned on, agent connectors run with more access and privileges.

References:

You must be signed in as an administrator to enable or disable reducing protections for agent connectors.




Contents

  • Option One: Turn On or Off Reducing Protections for Agent Connectors in Settings
  • Option Two: Turn On or Off Reducing Protections for Agent Connectors using REG file




Option One

Turn On or Off Reducing Protections for Agent Connectors in Settings


1 Open Settings (Win+I).

2 Click/tap on System on the left side, and click/tap on Advanced on the right side. (see screenshot below)


AI_conponents_Settings-1.webp

3 Under AI components settings, turn On or Off (default) Enable more agent connectors by reducing protections for what you want. (see screenshot below)

AI_conponents_Settings-2.webp

4 You can now close Settings if you like.




Option Two

Turn On or Off Reducing Protections for Agent Connectors using REG file


1 Do step 2 (on) or step 3 (off) below for what you want.

2 Turn On "Enable more agent connectors by reducing protections"

A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Turn_ON_Enable_more_agent_connectors_by_reducing_protections.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Mcp\Agents]
"ConnectorEnvironmentPolicy"=dword:00000002

3 Turn Off "Enable more agent connectors by reducing protections"

This is the default setting.


A) Click/tap on the Download button below to download the file below, and go to step 4 below.​

Turn_OFF_Enable_more_agent_connectors_by_reducing_protections.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Mcp\Agents]
"ConnectorEnvironmentPolicy"=dword:00000001

4 Save the .reg file to your desktop.

5 If you have Smart App Control turned on, you will need to unblock the downloaded REG file.

6 Double click/tap on the downloaded .reg file to merge it.

7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

8 You can now delete the downloaded .reg file if you like.


That's it,
Shawn Brink


 

Attachments

Last edited:
Hello everyone,

Correct me if I am wrong, but this sounds like just one more way malicious programs can grab ahold of control of our PCs.

Kind regards,

tecknot

P.S. OP's not a deep thinker.
 

My Computer My Computer

At a glance

Windows 11 Pro 25H2 build 26200.8457Intel i7 8750H @ 2.2 GHz16 GB (all Samsung) DDR4-3200 SODIMM (non-ECC...Intel UHD Graphics 630 & NVIDIA Quadro P600
OS
Windows 11 Pro 25H2 build 26200.8457
Computer type
Laptop
Manufacturer/Model
Lenovo ThinkPad Workstation P72
CPU
Intel i7 8750H @ 2.2 GHz
Motherboard
Lenovo 01YU291
Memory
16 GB (all Samsung) DDR4-3200 SODIMM (non-ECC) PCIe 3
Graphics Card(s)
Intel UHD Graphics 630 & NVIDIA Quadro P600
Sound Card
Realtek ALC3286 & Focusrite Saffire 24 Pro DSP
Monitor(s) Displays
17.3"
Screen Resolution
3840x2160
Hard Drives
1TB SSD Samsung 860 EVO SATA 3
1TB SSD Samsung 970 EVO M.2 NVMe PCIe 3 x 4
2TB SSD Samsung 990 PRO M.2 NVMe PCIe 3 x 4
PSU
230W
Cooling
fan
Keyboard
UltraNav
Mouse
Kensington wireless Orbit
Internet Speed
640Mbps
Browser
DuckDuckGo and Firefox
Antivirus
Defender
Other Info
CM246 Chipset
Hello everyone,

Correct me if I am wrong, but this sounds like just one more way malicious programs can grab ahold of control of our PCs.

Kind regards,

tecknot

This is mostly aimed towards developers, but yeah best left turned off.

P.S. OP's not a deep thinker.

Care to elaborate?
 

My Computers My Computers

  • At a glance

    Windows 11 Pro for WorkstationsIntel i7-8700K 5 GHz64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600...ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GD...
    OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    TerraMaster F8 SSD Plus NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Amazon Basics Wired Full Keyboard MD005
    Mouse
    Logitech MX Master 4
    Internet Speed
    2 Gbps Download and 100 Mbps Upload
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • At a glance

    Windows 11 ProSnapdragon X Elite (12 core) 3.42 GHz16 GB LPDDR5x-7467 MHz
    Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender

My Computer My Computer

At a glance

Windows 11 Pro 25H2 build 26200.8457Intel i7 8750H @ 2.2 GHz16 GB (all Samsung) DDR4-3200 SODIMM (non-ECC...Intel UHD Graphics 630 & NVIDIA Quadro P600
OS
Windows 11 Pro 25H2 build 26200.8457
Computer type
Laptop
Manufacturer/Model
Lenovo ThinkPad Workstation P72
CPU
Intel i7 8750H @ 2.2 GHz
Motherboard
Lenovo 01YU291
Memory
16 GB (all Samsung) DDR4-3200 SODIMM (non-ECC) PCIe 3
Graphics Card(s)
Intel UHD Graphics 630 & NVIDIA Quadro P600
Sound Card
Realtek ALC3286 & Focusrite Saffire 24 Pro DSP
Monitor(s) Displays
17.3"
Screen Resolution
3840x2160
Hard Drives
1TB SSD Samsung 860 EVO SATA 3
1TB SSD Samsung 970 EVO M.2 NVMe PCIe 3 x 4
2TB SSD Samsung 990 PRO M.2 NVMe PCIe 3 x 4
PSU
230W
Cooling
fan
Keyboard
UltraNav
Mouse
Kensington wireless Orbit
Internet Speed
640Mbps
Browser
DuckDuckGo and Firefox
Antivirus
Defender
Other Info
CM246 Chipset
@Brink
There is a copy/paste error for the title of option 2:

Turn On or Off Modern Run Dialog using REG file
should be
Turn On or Off Reducing Protections for Agent Connectors using REG file
 

My Computer My Computer

At a glance

.
OS
.
@Brink
There is a copy/paste error for the title of option 2:

Turn On or Off Modern Run Dialog using REG file
should be
Turn On or Off Reducing Protections for Agent Connectors using REG file

Thank you. Fixed. :oops:
 

My Computers My Computers

  • At a glance

    Windows 11 Pro for WorkstationsIntel i7-8700K 5 GHz64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600...ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GD...
    OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    TerraMaster F8 SSD Plus NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Amazon Basics Wired Full Keyboard MD005
    Mouse
    Logitech MX Master 4
    Internet Speed
    2 Gbps Download and 100 Mbps Upload
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • At a glance

    Windows 11 ProSnapdragon X Elite (12 core) 3.42 GHz16 GB LPDDR5x-7467 MHz
    Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Microsoft Defender
For the record, the default value seems to be 0. Just wondering, does disabling Agent service prevent it altogether? :think:
Code:
rem Agent Activation Runtime
sc config AarSvc start= disabled
 

My Computer My Computer

At a glance

Home26H2CanAMD Ryzen 5 8600G (07/24)2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200...ASROCK Radeon RX 6600 Challenger D 8G @48FPS ...
OS
Home26H2Can
Computer type
PC/Desktop
CPU
AMD Ryzen 5 8600G (07/24)
Motherboard
ASROCK B650M-HDV/M.2 (07/24) BIOS 4.21 AGESA ComboAM5 1.3.0.1 (04/26)
Memory
2x32GB Kingston FURY DDR5 5600 MHz CL36 @5200 CL36 (07/24)
Graphics Card(s)
ASROCK Radeon RX 6600 Challenger D 8G @48FPS (08/24)
Sound Card
Creative Sound BlasterX AE-5 Plus (05/24)
Monitor(s) Displays
24" Philips 24M1N3200ZS/00 (05/24)
Screen Resolution
1920×1080@165Hz via DP1.4
Hard Drives
Kingston KC3000 NVMe 2TB (05/24)
ADATA XPG GAMMIX S11 Pro 512GB (07/19)
PSU
Seasonic Core GM 550 Gold (04/24)
Case
Fractal Design Define 7 Mini with 3x Noctua NF-P14s/12@555rpm (04/24)
Cooling
Noctua NH-U12S with Noctua NF-P12 (04/24)
Keyboard
HP Pavilion Wired Keyboard 300 (07/24) + Rabalux 76017 Parker (01/24)
Mouse
Logitech M330 Silent Plus (01/26)
Internet Speed
500/100 Mbps via RouterOS (05/21) & TCP Optimizer
Browser
Edge, Brave for YouTube, LibreWolf for FB
Antivirus
NextDNS blocking 1/3 Traffic
Other Info
Phone: Motorola Moto G86 (02/26)
Backup: Hasleo Backup Suite (PreOS)
Headphones: Sennheiser RS170 (09/10)
Chair: Huzaro Force 4.4 Grey Mesh (05/24)
Notifier: Xiaomi Mi Band 9 Milanese (10/24)
FlexCore USB-C 3.2 Gen 1 (M) to LAN (F) (08/25)

Latest Support Threads

Back
Top Bottom