Microsoft tightens Copilot controls

Microsoft spent 2024 and 2025 putting Copilot buttons into everything from Windows apps to Microsoft 365. In 2026, it is doing almost the opposite: fewer broad entry points in Windows, and more admin controls inside the workplace software that actually pays the bills. (learn.microsoft.com, techcrunch.com) The clearest example is Notepad, the plain-text app that has shipped with Windows for decades. In a January 21, 2026 Windows Insider update, Microsoft said Notepad would surface three narrower tools called Write, Rewrite, and Summarize instead of a single all-purpose Copilot command. (blogs.windows.com, support.microsoft.com) That sounds cosmetic until you look at how companies buy this software. A consumer-facing button in Notepad is a vague promise, but a named tool like Summarize or Rewrite is easier to explain, meter, and limit. (support.microsoft.com, learn.microsoft.com) Inside Microsoft 365, Microsoft is building exactly that kind of meter. Its admin documentation says information technology teams can now track Copilot through Microsoft 365 admin center reports, Viva Insights Copilot Analytics, Microsoft Purview audit logs, and Power Platform analytics for Copilot Studio agents. (learn.microsoft.com) Microsoft has even wrapped those controls in a formal framework called the Copilot Control System. Microsoft says that framework has three pillars: security and governance, management controls, and measurement and reporting. (learn.microsoft.com, learn.microsoft.com) The reason this exists is not abstract. Microsoft’s own guidance says generative artificial intelligence inside Microsoft 365 can amplify risks around oversharing, privacy, compliance, and who is allowed to build or publish custom agents. (learn.microsoft.com) So the product is being split into two lanes. In Windows, Microsoft is trimming back “Copilot everywhere” behavior in apps like Notepad, Photos, Widgets, and Snipping Tool; in Microsoft 365, it is adding the dashboards and audit trails that large employers ask for before they roll software out to thousands of workers. (techcrunch.com, learn.microsoft.com) The reporting is getting more detailed too. Microsoft’s Copilot Dashboard data export moved from public preview in December 2025 toward general availability in April 2026, with weekly usage metrics exported in de-identified form using hashed user identifiers. (mc.merill.net) That is a very different pitch from the early Copilot era. The old sales line was that artificial intelligence should sit everywhere you might click; the new one is that artificial intelligence should be visible to auditors, measurable by managers, and narrow enough that users know what each button actually does. (learn.microsoft.com, blogs.windows.com) Microsoft is not removing artificial intelligence from Windows or Microsoft 365. It is turning Copilot from a mascot into an admin-managed feature set, which is a much less flashy product story and a much easier one to sell to a corporate security team. (support.microsoft.com, learn.microsoft.com)