This tutorial will show you how to enable or disable letting apps access voice activation when the device is locked for your account or all users in Windows 11.
Voice activation lets supported apps respond to spoken keywords. Each app must request permission before listening for voice keywords or accessing the microphone.
When an app is listening, a microphone indicator appears on the taskbar.
Microsoft does not collect voice recordings on behalf of third‑party apps. Each app manages voice data according to its own privacy policy.
Reference:
Speech, voice activation, inking, typing, and privacy | Microsoft Support
Learn more about the privacy settings for speech, voice activation, inking, and typing in Windows.
support.microsoft.com
Turning off or disabling Let apps access voice activation services will also disable Let apps use voice activation when device is locked.
Contents
- Option One: Turn On or Off Voice Activation when Device is Locked Access by Apps for Current User in Settings
- Option Two: Turn On or Off Voice Activation when Device is Locked Access by Apps for Current User using REG file
- Option Three: Enable or Disable Voice Activation when Device is Locked Access by Apps for All Users in Local Group Policy Editor
- Option Four: Enable or Disable Voice Activation when Device is Locked Access by Apps for All Users using REG file
Turn On or Off Voice Activation when Device is Locked Access by Apps for Current User in Settings
1 Open Settings (Win+I).
2 Click/tap on Privacy & security on the left side, and click/tap on Voice activation on the right side under "Communication". (see screenshot below)
3 Turn On (default) or Off Let apps access voice activation when device is locked for what you want. (see screenshot below)
This Let apps access voice activation when device is locked setting will be grayed out if Let apps access voice activation services is turned off.
4 You can now close Settings if you like.
Turn On or Off Voice Activation when Device is Locked Access by Apps for Current User using REG file
1 Do step 2 (on) or step 3 (off) below for what you want.
2. Turn On Voice Activation when Device is Locked Access by Apps for Current User
This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Turn_ON_let_apps_access_voice_activation_when_device_is_locked_for_current_user.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps]
"AgentActivationEnabled"=dword:00000001
"AgentActivationOnLockScreenEnabled"=dword:00000001 3. Turn Off Voice Activation when Device is Locked Access by Apps for Current User
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Turn_OFF_let_apps_access_voice_activation_when_device_is_locked_for_current_user.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps]
"AgentActivationOnLockScreenEnabled"=dword:000000004 Save the .reg file to your desktop.
5 If you have Smart App Control turned on, you will need to unblock the downloaded REG file.
6 Double click/tap on the downloaded .reg file to merge it.
7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
8 You can now delete the downloaded .reg file if you like.
Enable or Disable Voice Activation when Device is Locked Access by Apps for All Users in Local Group Policy Editor
You must be signed in as an administrator to use this option.
The Local Group Policy Editor is only available in the Windows 11 Pro, Enterprise, and Education editions.
All editions can use Option Four to configure the same policy.
1 Open the Local Group Policy Editor (gpedit.msc).
2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below step 3)
Computer Configuration > Administrative Templates > Windows Components > App Privacy
3 In the right pane of App Privacy in the Local Group Policy Editor, double click/tap on the Let Windows apps activate with voice while the system is locked policy to edit it. (see screenshot below)
4 Do step 5 (force enable), step 6 (disable), or step 7 (default) below for what you want.
5 Force Enable Voice Activation when Device is Locked Access by Apps for All Users
This will prevent using Option One and Option Two.
A) Select (dot) Enabled. (see screenshot below)
B) Under "Options", select Force Allow in the "Default for all apps" drop menu.
C) Click/tap on OK, and go to step 8 below.
6 Disable Voice Activation when Device is Locked Access by Apps for All Users
This will prevent using Option One and Option Two.
A) Select (dot) Enabled. (see screenshot below)
B) Under "Options", select Force Deny in the "Default for all apps" drop menu.
C) Click/tap on OK, and go to step 8 below.
7 Default User-Choice Voice Activation when Device is Locked Access by Apps
This is the default setting to allow using Option One and Option Two.
A) Select (dot) Not Configured, click/tap on OK, and go to step 8 below. (see screenshot below)
8 You can now close the Local Group Policy Editor if you like.
Enable or Disable Voice Activation when Device is Locked Access by Apps for All Users using REG file
You must be signed in as an administrator to use this option.
1 Do step 2 (force enable), step 3 (disable), or step 4 (disable) below for what you want.
2 Force Enable Voice Activation when Device is Locked Access by Apps for All Users
This will prevent using Option One and Option Two.
A) Click/tap on the Download button below to download the file below, and go to step 5 below.
Always_enable_let_apps_access_voice_activation_when_device_is_locked_for_all_users.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsActivateWithVoice"=-
"LetAppsActivateWithVoiceAboveLock"=dword:000000013 Disable Voice Activation when Device is Locked Access by Apps for All Users
This will prevent using Option One and Option Two.
A) Click/tap on the Download button below to download the file below, and go to step 5 below.
Disable_let_apps_access_voice_activation_when_device_is_locked_for_all_users.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsActivateWithVoiceAboveLock"=dword:000000024 Default User-Choice Voice Activation when Device is Locked Access by Apps
This is the default setting to allow using Option One and Option Two.
A) Click/tap on the Download button below to download the file below, and go to step 5 below.
Default_user-choice_let_apps_access_voice_activation_while_locked.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsActivateWithVoiceAboveLock"=-5 Save the .reg file to your desktop.
6 If you have Smart App Control turned on, you will need to unblock the downloaded REG file.
7 Double click/tap on the downloaded .reg file to merge it.
8 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
9 You can now delete the downloaded .reg file if you like.
That's it,
Shawn Brink
Last edited:
