This tutorial will show you how to allow or deny apps access to generative AI for your account or all users in Windows 11.
Starting with Windows 11 build 26236 (Canary), Microsoft added a new Generative AI section to the Privacy & security settings page.
The new Generative AI section allows you to turn on or off whether apps can use generative AI features.
Contents
- Option One: Turn On or Off Apps Access to Generative AI for All Users in Settings
- Option Two: Turn On or Off Apps Access to Generative AI for All Users using REG file
- Option Three: Turn On or Off Apps Access to Generative AI for Current User in Settings
- Option Four: Turn On or Off Apps Access to Generative AI for Current User using REG file
- Option Five: Turn On or Off Specific Apps Access to Generative AI for Current User in Settings
- Option Six: Enable or Disable Apps Access to Generative AI for All Users in Local Group Policy Editor
- Option Seven: Enable or Disable Apps Access to Generative AI for All Users using REG file
You must be signed in as an administrator to use this option.
1 Open Settings (Win+I).
2 Click/tap on Privacy & security on the left side, and click/tap on Generative AI on the right side under "App permissions". (see screenshot below)
3 Turn On (default) or Off Generative AI access for what you want. (see screenshot below)
This will enable (on) or disable (off) users ability to use Option Three, Option Four, and Option Five.
4 You can now close Settings if you like.
You must be signed in as an administrator to use this option.
This is the same setting as Option One.
1 Do step 2 (on) or step 3 (off) below for what you want.
2. Turn On Apps Access to Generative AI for All Users
This is the default setting to allow using Option Three, Option Four, and Option Five.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Turn_ON_generative_AI_access_for_all_users.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Allow" 3. Turn Off Apps Access to Generative AI for All Users
This will disable and prevent using Option Three, Option Four, and Option Five.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Turn_OFF_generative_AI_access_for_all_users.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Deny"4 Save the .reg file to your desktop.
5 Double click/tap on the downloaded .reg file to merge it.
6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
7 You can now delete the downloaded .reg file if you like.
1 Open Settings (Win+I).
2 Click/tap on Privacy & security on the left side, and click/tap on Generative AI on the right side under "App permissions". (see screenshot below)
3 Turn On (default) or Off Let apps use generative AI for what you want. (see screenshot below)
Turning off Let apps use generative AI, will disable and gray out Option Five.
4 You can now close Settings if you like.
This is the same setting as Option Three.
1 Do step 2 (on) or step 3 (off) below for what you want.
2. Turn On Apps Access to Generative AI for Current User
This is the default setting to allow you to use Option Five.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Turn_ON_app_access_to_generative_AI_for_current_user.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Allow" 3. Turn Off Apps Access to Generative AI for Current User
This will disable and prevent you from using Option Five.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.
Turn_OFF_app_access_to_generative_AI_for_current_user.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\generativeAI]
"Value"="Deny"4 Save the .reg file to your desktop.
5 Double click/tap on the downloaded .reg file to merge it.
6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
7 You can now delete the downloaded .reg file if you like.
1 Open Settings (Win+I).
2 Click/tap on Privacy & security on the left side, and click/tap on Generative AI on the right side under "App permissions". (see screenshot below)
3 Click/tap on Let apps use generative AI to expand it open if able. (see screenshot below step 4)
4 Turn On (default) or Off any available apps you want. (see screenshot below)
5 You can now close Settings if you like.
Enable or Disable Apps Access to Generative AI for All Users in Local Group Policy Editor
You must be signed in as an administrator to use this option.
The Local Group Policy Editor is only available in the Windows 11 Pro, Enterprise, and Education editions.
All editions can use Option Seven to configure the same policy.
1 Open the Local Group Policy Editor (gpedit.msc).
2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)
Computer Configuration > Administrative Templates > Windows Components > App Privacy
3 In the right pane of App Privacy in the Local Group Policy Editor, double click/tap on the Let Windows apps make use of generative AI features of Windows policy to edit it. (see screenshot above)
4 Do step 5 (enable), step 6 (disable), or step 7 (default) below for what you want.
5 Always Enable Apps Access to Generative AI for All Users
This will turn on and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.
A) Select (dot) Enabled. (see screenshot below)
B) Select Force Allow in the "Default for all apps" drop menu in Options.
C) Click/tap on OK, and go to step 8 below.
6 Disable Apps Access to Generative AI for All Users
This will turn off and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.
A) Select (dot) Enabled. (see screenshot below)
B) Select Force Deny in the "Default for all apps" drop menu in Options.
C) Click/tap on OK, and go to step 8 below.
7 Default User-choice Apps Access to Generative AI
This is the default setting to allow using Option One, Option Two, Option Three, Option Four, and Option Five.
A) Select (dot) Not Configured. (see screenshot below)
B) Click/tap on OK, and go to step 8 below.
8 You can now close the Local Group Policy Editor if you like.
You must be signed in as an administrator to use this option.
This is the same setting as Option Six.
1 Do step 2 (enable), step 3 (disable), or step 4 (default) below for what you want.
2. Always Enable Apps Access to Generative AI for All Users
This will turn on and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.
A) Click/tap on the Download button below to download the file below, and go to step 5 below.
Force_allow_app_access_to_generative_AI_for_all_users.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsAccessGenerativeAI"=dword:00000001
"LetAppsAccessGenerativeAI_UserInControlOfTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceAllowTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceDenyTheseApps"=hex(7):00,00 3. Disable Apps Access to Generative AI for All Users
This will turn off and prevent using Option One, Option Two, Option Three, Option Four, and Option Five.
A) Click/tap on the Download button below to download the file below, and go to step 5 below.
Disable_app_access_to_generative_AI_for_all_users.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsAccessGenerativeAI"=dword:00000002
"LetAppsAccessGenerativeAI_UserInControlOfTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceAllowTheseApps"=hex(7):00,00
"LetAppsAccessGenerativeAI_ForceDenyTheseApps"=hex(7):00,00 4. Default User-choice Apps Access to Generative AI
This is the default setting to allow using Option One, Option Two, Option Three, Option Four, and Option Five.
A) Click/tap on the Download button below to download the file below, and go to step 5 below.
Default_user-choice_app_access_to_generative_AI.reg
Download
(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
"LetAppsAccessGenerativeAI"=-
"LetAppsAccessGenerativeAI_UserInControlOfTheseApps"=-
"LetAppsAccessGenerativeAI_ForceAllowTheseApps"=-
"LetAppsAccessGenerativeAI_ForceDenyTheseApps"=-5 Save the .reg file to your desktop.
6 Double click/tap on the downloaded .reg file to merge it.
7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.
8 You can now delete the downloaded .reg file if you like.
That's it,
Shawn Brink
Last edited:
