This tutorial will show you how to allow or deny apps access to generative AI for your account or all users in Windows 11.
Starting with Windows 11 build 26236 (Canary), Microsoft added a new Generative AI section to the Privacy & security settings page.
The new Generative AI section allows you to turn on or off whether apps can use generative AI features.
- Option One: Turn On or Off Apps Access to Generative AI for All Users in Settings
- Option Two: Turn On or Off Apps Access to Generative AI for All Users using REG file
- Option Three: Turn On or Off Apps Access to Generative AI for Current User in Settings
- Option Four: Turn On or Off Apps Access to Generative AI for Current User using REG file
- Option Five: Turn On or Off Specific Apps Access to Generative AI for Current User in Settings
- Option Six: Enable or Disable Apps Access to Generative AI for All Users in Local Group Policy Editor
- Option Seven: Enable or Disable Apps Access to Generative AI for All Users using REG file
You must be signed in as an administrator to use this option.
1 Open Settings (Win+I).
2 Click/tap on Privacy & security on the left side, and click/tap on Generative AI on the right side under "App permissions". (see screenshot below)
3 Turn On (default) or Off Generative AI access for what you want. (see screenshot below)
This will enable (on) or disable (off) users ability to use Option Three, Option Four, and Option Five.
4 You can now close Settings if you like.
You must be signed in as an administrator to use this option.
This is the same setting as Option One.
1 Do step 2 (on) or step 3 (off) below for what you want.
This is the default setting to allow using Option Three, Option Four, and Option Five.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Allow"
This will disable and prevent using Option Three, Option Four, and Option Five.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Deny"
4 Save the .reg file to your desktop.
5 Double click/tap on the downloaded .reg file to merge it.
6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
7 You can now delete the downloaded .reg file if you like.
1 Open Settings (Win+I).
2 Click/tap on Privacy & security on the left side, and click/tap on Generative AI on the right side under "App permissions". (see screenshot below)
3 Turn On (default) or Off Let apps use generative AI for what you want. (see screenshot below)
Turning off Let apps use generative AI, will disable and gray out Option Five.
4 You can now close Settings if you like.
This is the same setting as Option Three.
1 Do step 2 (on) or step 3 (off) below for what you want.
This is the default setting to allow you to use Option Five.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Allow"
This will disable and prevent you from using Option Five.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Deny"
4 Save the .reg file to your desktop.
5 Double click/tap on the downloaded .reg file to merge it.
6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
7 You can now delete the downloaded .reg file if you like.
1 Open Settings (Win+I).
2 Click/tap on Privacy & security on the left side, and click/tap on Generative AI on the right side under "App permissions". (see screenshot below)
3 Click/tap on Let apps use generative AI to expand it open if able. (see screenshot below step 4)
4 Turn On (default) or Off any available apps you want. (see screenshot below)
5 You can now close Settings if you like.
Enable or Disable Apps Access to Generative AI for All Users in Local Group Policy Editor
You must be signed in as an administrator to use this option.
The Local Group Policy Editor is only available in the Windows 11 Pro, Enterprise, and Education editions.
All editions can use Option Seven to configure the same policy.
1 Open the Local Group Policy Editor (gpedit.msc).
2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)
3 In the right pane of App Privacy in the Local Group Policy Editor, double click/tap on the Let Windows apps make use of generative AI features of Windows policy to edit it. (see screenshot above)
4 Do step 5 (enable), step 6 (disable), or step 7 (default) below for what you want.
This will turn on and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.
This will turn off and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.
This is the default setting to allow using Option One, Option Two, Option Three, Option Four, and Option Five.
8 You can now close the Local Group Policy Editor if you like.
You must be signed in as an administrator to use this option.
This is the same setting as Option Six.
1 Do step 2 (enable), step 3 (disable), or step 4 (default) below for what you want.
This will turn on and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsAccessGenerativeAI"=dword:00000001
"LetAppsAccessGenerativeAI_UserInControlOfTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceAllowTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceDenyTheseApps"=hex(7):00,00
This will turn off and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsAccessGenerativeAI"=dword:00000002
"LetAppsAccessGenerativeAI_UserInControlOfTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceAllowTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceDenyTheseApps"=hex(7):00,00
This is the default setting to allow using Option One, Option Two, Option Three, Option Four, and Option Five.
(Contents of REG file for reference)
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsAccessGenerativeAI"=-
"LetAppsAccessGenerativeAI_UserInControlOfTheseApps"=-
"LetAppsAccessGenerativeAI_ForceAllowTheseApps"=-
"LetAppsAccessGenerativeAI_ForceDenyTheseApps"=-
5 Save the .reg file to your desktop.
6 Double click/tap on the downloaded .reg file to merge it.
7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
8 You can now delete the downloaded .reg file if you like.
That's it,
Shawn Brink
Attachments
-
Turn_ON_generative_AI_access_for_all_users.reg686 bytes · Views: 158
-
Turn_OFF_generative_AI_access_for_all_users.reg676 bytes · Views: 231
-
Turn_OFF_app_access_to_generative_AI_for_current_user.reg682 bytes · Views: 106
-
Turn_ON_app_access_to_generative_AI_for_current_user.reg684 bytes · Views: 98
-
Default_user-choice_app_access_to_generative_AI.reg938 bytes · Views: 88
-
Disable_app_access_to_generative_AI_for_all_users.reg1 KB · Views: 158
-
Force_allow_app_access_to_generative_AI_for_all_users.reg1 KB · Views: 114