Cyber Security News

Copilot, Recall, and Other AI Tools Can Be Removed from Windows 11 with New Tool

A new community tool is giving Windows 11 users far more control over Microsoft’s growing stack of AI features.

An open‑source project called RemoveWindowsAI now lets administrators and power users disable or strip out components such as Copilot, Recall, and other AI integrations that are tightly integrated with the operating system and Microsoft apps.

The tool targets a broad range of AI hooks built into Windows 11 and Microsoft’s ecosystem.

Recent commits show active work on disable Copilot in Edge, block AI features in the Photos app, remove AI‑related scheduled tasks, and turn off background access for Copilot.

All listed tools are fully removable or disableable through registry manipulation, file deletion, and Edge flag configuration.

AI Tool/FeatureCategoryRemoval MethodStatus
Copilot (Windows 11)AI AssistantRegistry key modification, disable startup/background app accessFully removable
Copilot (Edge)Browser IntegrationRegistry keys, Edge flag manipulation, execution policy changesFully removable
RecallAI FeaturesFile removal, registry cleanupFully removable
Photos App AIBuilt-in AppsSettings disable via registryFully removable
Office Hub WebViewOffice IntegrationStartup task disable, registry modificationFully removable
AI Scheduled TasksBackground ServicesTask scheduler removal, registry cleanupFully removable
Edge Copilot ModeBrowser FeaturesEdge flags, registry configurationFully removable
App Actions FilesSystem ComponentsFile deletion, registry cleanupFully removable

The project also manipulates registry keys tied to “SystemAIModels” and other AI‑related configuration points to prevent the operating system from silently re‑enabling these features.

Development is moving quickly. In early January 2026, the maintainer pushed updates to check the status of Windows update package installations, add a fallback method that uses the TrustedInstaller service for stubborn components, and apply minor fixes to improve reliability.

Late December changes focused on cleaning up registry entries during custom package reverts, enhancing the removal of AI files, and handling execution policy locations that could interfere with script execution.

The tool also prioritizes user experience and safety. Commits mention preventing both backup and revert modes from being selected at the same time, adding tooltips for those options, and updating status messages, as reported by Zoicware in GitHub.

Hence, users understand what the script is doing. Other updates handle edge cases, such as systems where Microsoft Edge has never been opened, different language configurations, and empty values in configuration files.

For privacy‑conscious users and organizations wary of AI features like Recall’s screen‑recording capabilities, RemoveWindowsAI offers a way to push back against Microsoft’s AI‑first direction without abandoning Windows entirely.

While it is aimed at advanced users and should be used with caution, the project shows strong demand for deeper, scriptable control over AI services built into Windows 11.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago