The correct place to review a Windows AI permission depends on which feature requested it. For an agent in a Windows agent workspace, open Settings > System > AI Components > Agents, select the agent, and inspect its Files permissions. For Copilot PC insights, use the controls in Copilot settings instead. These are separate permission systems, not one universal Windows AI dashboard.
Use Ask every time when you want a consent prompt for each request, or Never allow when an agent should not use the six common user folders. Review connectors separately: changing file access does not automatically disable a connector. The safest review starts by identifying the exact feature named in the consent prompt, then checking every access path that feature can use.
As an Amazon Associate I earn from qualifying purchases.
First, identify which Windows AI feature has access
Microsoft documents two different experiences that people commonly call “Windows AI agents.” They have different settings locations, different scopes, and different rollout conditions. Choosing the wrong settings page can leave the permission you meant to remove unchanged.
Recommended Free Tools
| Experience | Where to manage it | What the permission controls | Revocation choices | Availability |
|---|---|---|---|---|
| Agent in a Windows agent workspace | Windows Settings > System > AI Components > Agents | Per-agent access to six known folders and separately enabled connectors | Allow Always, Ask every time, or Never allow for the known folders | Per-agent folder management is documented for preview build 26100.7344 and later; the related feature is still in preview |
| Copilot PC insights | Copilot settings | Copilot access to relevant information about the PC, system, and files | Ask every time or revoke access completely; Microsoft also describes an Always allow state | Gradually rolling out, so the control may not be visible on every PC |
If an application displayed a consent prompt and you are unsure which row applies, identify the application or feature named in that prompt first. A prompt mentioning an agent, a task, or a connector points you toward the individual agent page. A prompt about PC insights points you toward Copilot settings. Do not assume that a setting in one row changes permissions in the other.
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
A quick decision path
- Was the request made by an agent workspace? Use the Windows Settings path and inspect that particular agent.
- Was it made by Copilot while answering a question about your computer? Use Copilot settings and review PC insights.
- Was a service or account named? Check the agent’s connector list and, where applicable, the service’s own consent controls.
- Did Windows ask to approve an administrator-level change? Treat it as UAC, which is separate from data-access permissions.
This separation matters when troubleshooting. Turning off PC insights does not change an agent’s known-folder settings, and setting an agent folder to Never allow does not revoke a Copilot grant.
Review and revoke permissions for a Windows agent workspace
Check whether your PC exposes the feature
Microsoft describes Experimental agentic features as a preview setting. The documented per-agent folder controls are available on preview builds 26100.7344 and later, but feature exposure and labels can change as Windows is updated. If AI Components or Agents is missing, that may simply mean the feature has not reached your device, your build is not eligible, or an administrator has controlled its availability.
Do not interpret a missing menu as proof that no agent can access data. It only means the documented control is not exposed in that Windows configuration. In that situation, inspect the agent or application’s own settings and documentation, and check whether a connector account has a separate consent screen.
Open the per-agent Files page
- Open Settings.
- Go to System > AI Components.
- Open Agents.
- Select the agent whose access you want to inspect.
- Open the agent’s Files section.
Work through agents one at a time. A change made for one selected agent is not a global switch for every agent, and it does not automatically change a connector used by another agent. If several agents appear, record the setting for each before closing Settings so that an overlooked agent does not retain standing access.
Understand the six folder controls
The Files page covers six common folders in the user profile:
- Documents
- Downloads
- Desktop
- Music
- Pictures
- Videos
For each of these known folders, choose one of three states:
- Allow Always: the agent can access the folder without asking for every request. This is standing access and should be reserved for an agent and workflow you intentionally trust. It is convenient for repeated tasks, but it gives the agent a broader opportunity to read files whenever its workflow calls for them.
- Ask every time: Windows requests your approval whenever the agent asks to access that folder. This reduces silent, ongoing access while preserving the option to approve a specific task. Read the prompt carefully before accepting it, especially when the task involves several folders or a connector as well.
- Never allow: the agent is denied requests for these folders. This is the strongest per-folder choice in the documented agent controls. It is appropriate when the agent has no legitimate reason to use a folder, or while you are evaluating an unfamiliar workflow.
Changing a setting applies to the selected agent. It is not a global switch for every agent or every application on the PC. Review other agents individually if they appear in the list. If you want to reduce access only for a sensitive location, use Never allow for that folder and leave other folders at Ask every time or Allow Always according to the task’s needs.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Do not treat the six folders as the entire file boundary
The six-folder controls are a useful, visible boundary, but they do not represent every location an agent account might be able to read. Microsoft notes that agent accounts can also access folders available to all authenticated users, including public user profiles. Therefore, setting Documents, Downloads, Desktop, Music, Pictures, and Videos to Never allow does not prove that every file on the machine is inaccessible to that agent.
When deciding whether an agent is appropriate for sensitive work, account for shared and public locations as well as the six known folders. A file stored outside the six folders may still be available through a location shared with authenticated users. Keep confidential material out of broadly accessible directories, and inspect the agent’s task design and connector list rather than relying on one Files setting.
This also explains why a test can appear contradictory: the agent may be denied access to Documents yet still find a file in a public profile or another shared location. That result does not mean the Never allow choice failed; it means the file was outside the six-folder control.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Review connectors separately
The individual agent settings page also includes controls for enabling connectors required by tasks. A connector can provide access to a service or data source that is not represented by the six Windows folders. Turning a folder permission to Ask every time or Never allow does not automatically revoke an enabled connector.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →After reviewing Files, remain on the selected agent’s settings page and check which connectors are enabled. Disable any connector the agent no longer needs. If a connector has its own account, consent, or administrator control, review that service’s permissions as well; the Windows Files choice is not a substitute for connector-specific revocation.
For example, an agent that organizes local documents may need a folder but not a connected service. Conversely, an agent that sends information to a service may need a connector even when all six known folders are denied. Evaluate those permissions as separate decisions: what local data can be read, and what external destination can receive or process information.
Use the broader feature switch only when you want a broad restriction
Microsoft documents a broader option at Settings > System > AI Components > Experimental agentic features. Turning this feature off restricts the experimental agentic capability more broadly. It is not merely another way to deny one folder to one agent.
Use the per-agent Files choices when you want to keep an agent available but reduce its standing access. Use the experimental-feature switch when your objective is to disable the broader documented feature on the device. Because the feature is in preview, the exact wording and behavior can change with later builds. A broad switch may affect more than the individual workflow you were testing, so choose it deliberately rather than as a substitute for a targeted revocation.
Free tools Windows power users keep installed
One-click scans. No signup required.
Review and revoke Copilot PC insights access
Copilot PC insights is a separate permission experience. Microsoft says the feature asks for permission before accessing relevant PC information and is being gradually rolled out. A PC that does not show the option may simply not have received the feature yet.
- Open Copilot.
- Open Copilot settings.
- Review the PC insights access choice shown there.
- Change Always allow to Ask every time if you want a prompt before each access request, or revoke access completely if Copilot should no longer use PC insights.
Microsoft’s support information does not specify a more detailed, universal sequence of labels inside Copilot settings. The available wording may vary during the gradual rollout, so do not look for the Windows Settings path used by agent workspaces. If the setting is absent, check again after the feature reaches the account or device rather than changing unrelated Windows privacy switches.
What PC insights can and cannot access
Microsoft describes PC insights as a way for Copilot to answer questions about the PC, its system, and files. It also states that PC insights cannot make system changes or monitor the computer in the background. The permission is therefore about providing relevant information for an answer, not granting Copilot a general ability to administer Windows.
The same support information says PC insights does not access work email, Teams chats, calendars, or organizational Microsoft 365 documents. Those exclusions describe the documented PC insights scope; they do not mean that every Copilot feature or connected service has identical boundaries. Review the permission prompt for the specific feature you are using, particularly if it names another service or account.
Choose Ask every time if you want to evaluate each request in context. Revoke access completely when PC insights is not useful or when you do not want Copilot to use PC information. Always allow is a convenience choice that should match your comfort with the documented scope and the gradual-rollout nature of the feature.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
Why Windows Privacy settings may not show the agent
Windows has capability controls under Settings > Privacy & security, but those lists do not cover every type of desktop software. Microsoft says desktop apps may not appear in the capability lists and are not affected by those controls.
If an agent is absent from a Privacy & security list, that is not proof that it has no access and not proof that Windows is malfunctioning. Return to the agent’s own page under System > AI Components > Agents, inspect the application’s settings and documentation, and review any connector account separately. The agent-specific control is the authoritative place for the documented known-folder choices.
General capability controls and agent controls answer different questions. A capability page may govern a listed app permission, while the agent page governs the six known folders and connector enablement for that agent. Checking both can be useful, but one should not be treated as a complete inventory of the other.
UAC is not an AI permission control
User Account Control (UAC) prompts when software is about to make an administrator-level change. UAC helps prevent an unauthorized elevation, but it does not revoke an agent’s permission to read a folder, use a connector, or request PC insights.
If an agent triggers a UAC prompt, treat that as a separate event: decide whether the requested administrative change is legitimate, then independently review the agent’s data and connector permissions. Approving or denying UAC does not alter the Files choices described above. A denied UAC prompt does not necessarily stop an agent from requesting ordinary file access, and an approved prompt does not grant it a blanket right to read every location.
Security implications of agent permissions
Microsoft warns that agentic applications can face cross-prompt injection. Malicious text in a document or user-interface element can attempt to override an agent’s instructions and cause unintended actions. This risk is one reason to minimize standing access, prefer prompts for sensitive locations, and remove connectors that are not required for a task.
Permission prompts are useful only when you read what they cover. A prompt for a folder is not the same as a prompt for a connector, and neither is the same as a UAC request. Check the named resource, the requested action, and whether the request fits the task you started.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesMicrosoft states the design principle this way: “Agents should always act under the principles of least privilege and must not be granted permissions or capabilities exceeding that of the initiating user, including administrative rights.” This is a stated principle in Microsoft’s Experimental Agentic Features support documentation, not a guarantee that every current implementation or third-party connector always enforces least privilege perfectly.
A practical least-privilege review
- Set known folders to Ask every time while evaluating a new agent.
- Change a folder to Never allow when the agent has no legitimate reason to use it.
- Keep an agent’s enabled connectors limited to the task it performs.
- Do not place sensitive files in public or shared folders merely because the six known folders are restricted.
- Read each approval prompt, including the folder, connector, or action requested, before accepting it.
- Use a standard user account for ordinary work where possible; do not grant administrative rights to compensate for an agent’s inability to complete a task.
- Recheck settings after Windows or agent updates, because preview labels and feature availability can change.
Troubleshoot common permission problems
“I cannot find AI Components or Agents.”
Confirm that Windows is on a preview build that supports the documented controls; per-agent folder management is tied to build 26100.7344 and later. The experimental agentic feature is still in preview, and rollout or policy settings can affect visibility. If the menu is missing, do not infer that the agent has no permissions or that the general Privacy & security page can manage it. Use the application’s own settings and the documentation for the feature you are running.
“I changed Files to Never allow, but the agent still reaches other data.”
The documented choice denies requests for the six known folders only. Check public user profiles and other folders available to all authenticated users, then inspect enabled connectors. The Files choice does not revoke connector access or redefine the permissions of other accounts and services. Identify the exact location or service the agent reached before deciding that the setting behaved incorrectly.
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
“The agent keeps asking for a connector.”
Open the selected agent’s settings page and review its connector controls separately from Files. A connector may be required for the task even when folder access is denied. Disable the connector if it is unnecessary, or review the connector’s own consent and account permissions if it is required. Do not repeatedly approve a request without confirming which service it names and why the task needs it.
“Copilot PC insights is not in my settings.”
Microsoft says PC insights is gradually rolling out. Its absence does not indicate that the Windows agent-workspace controls are hidden in the same place. Check Copilot settings after updates and use the permission prompt shown by the feature when it becomes available. Do not substitute the AI Components path for the Copilot control.
“I received an administrator approval prompt.”
That is a UAC event, not evidence that an agent’s file or PC-insights permission has been revoked or granted. Decide about the administrator-level change separately, then review the agent or Copilot permission screen for data access.
“I am using Windows 10.”
Do not transplant the Windows 11 agent-workspace path to Windows 10. Microsoft’s privacy guidance notes that Windows 10 support ended on October 14, 2025, and the documented AI Components controls described here are for the newer Windows experience. Use the settings and support information provided for the version actually installed on the device.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.A short review routine
- Name the feature that requested access: an agent workspace, Copilot PC insights, or another application.
- Use the matching settings area rather than relying on a generic privacy list.
- For an agent workspace, inspect each agent’s Files section and choose Allow Always, Ask every time, or Never allow for the six known folders.
- Check connectors on the same agent page; file settings do not disable them.
- Consider shared and public folders outside the six-folder control.
- For PC insights, use Copilot settings to switch to Ask every time or revoke access.
- Treat UAC prompts as administrator-change requests, not as data-permission controls.
- Repeat the review for every agent or feature that appears in use, especially after a preview update changes the available settings.
Frequently asked questions
How do I review and revoke permissions granted to Windows AI agents?
First identify the feature. For an agent workspace, go to Settings > System > AI Components > Agents, select the agent, open Files, and choose Ask every time or Never allow for the relevant known folders. Then review connectors separately. For Copilot PC insights, open Copilot settings and change Always allow to Ask every time or revoke access completely.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteDoes Copilot access all my files?
Microsoft says PC insights can use relevant information about the PC, system, and files after permission is granted. It also says PC insights does not access work email, Teams chats, calendars, or organizational Microsoft 365 documents. The documented scope is not a promise that every Copilot feature or connected service has the same boundaries, so check the specific prompt.
Is Never allow a complete block on an agent’s file access?
No. Never allow denies requests for the six documented known folders: Documents, Downloads, Desktop, Music, Pictures, and Videos. Agent accounts may also access locations available to all authenticated users, such as public user profiles, and connectors can expose other data sources.
Does changing a folder to Ask every time disable connectors?
No. Files permissions and connector enablement are separate controls on the agent’s settings page. Review and disable unnecessary connectors independently, including any consent or account permissions managed by the connected service.
Why is my agent missing from Privacy & security?
Microsoft says desktop apps may not appear in Windows capability lists and are not affected by those controls. Use the agent’s own AI Components page, the application’s settings, and connector documentation instead of treating absence from the list as proof of no access.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
What is the difference between UAC and an AI permission prompt?
UAC concerns an administrator-level change. An AI permission prompt may concern a folder, PC insights, or a connector. Approving or denying UAC does not revoke those data permissions, and reviewing data permissions does not answer whether an administrator-level change should be allowed.
Can I disable all experimental agentic features at once?
Microsoft documents a broader switch at Settings > System > AI Components > Experimental agentic features. Turning it off restricts the broader experimental capability, rather than just one folder for one agent. Use it when a broad restriction is intended; use per-agent controls for a targeted change.
Why do the menu names or choices look different?
The experimental agentic feature is in preview, per-agent folder controls are documented for build 26100.7344 and later, and PC insights is gradually rolling out. Wording and visibility can therefore vary by build, device, policy, or rollout stage. Use the closest matching feature-specific control and avoid assuming that an unavailable menu has moved to a generic privacy page.
Bottom line
Windows does not provide one universal AI-permissions dashboard for these experiences. Use Settings > System > AI Components > Agents for a Windows agent workspace, review each agent’s six known-folder choices and connectors, and remember that shared locations remain outside that folder control. Use Copilot settings for PC insights, where you can choose Ask every time or revoke access. Keep UAC separate, favor least privilege, and treat preview or gradual-rollout behavior as a reason to verify the exact controls available on your build.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Frequently Asked Questions
How do I review and revoke permissions granted to Windows AI agents?
Identify the feature first. For an agent workspace, open Settings > System > AI Components > Agents, select the agent, open Files, and choose Ask every time or Never allow for the relevant known folders. Review connectors separately. For Copilot PC insights, open Copilot settings and change Always allow to Ask every time or revoke access completely.
Does Copilot access all my files?
Microsoft says PC insights can use relevant information about the PC, system, and files after permission is granted. It says PC insights does not access work email, Teams chats, calendars, or organizational Microsoft 365 documents. Other Copilot features or connected services may have different scopes.
Is Never allow a complete block on an agent’s file access?
No. It denies requests for Documents, Downloads, Desktop, Music, Pictures, and Videos. Locations available to all authenticated users, such as public user profiles, and separately enabled connectors are outside that six-folder choice.
Does changing a folder to Ask every time disable connectors?
No. Folder permissions and connector enablement are separate controls. Review the selected agent’s connector list and the connected service’s own consent settings.
Why is my agent missing from Privacy & security?
Microsoft says desktop apps may not appear in Windows capability lists and are not affected by those controls. Check the agent’s own AI Components page, application settings, and connector documentation.
What is the difference between UAC and an AI permission prompt?
UAC concerns an administrator-level change. An AI prompt may concern a folder, PC insights, or a connector. One does not revoke or grant the other.
Can I disable all experimental agentic features at once?
Use Settings > System > AI Components > Experimental agentic features to apply the broader documented restriction. This is wider than denying one folder for one agent.
Why do menu names or choices differ on my PC?
The experimental agentic feature is in preview, per-agent controls are documented for build 26100.7344 and later, and PC insights is gradually rolling out. Availability and wording can vary.
Free tools Windows power users keep installed
One-click scans. No signup required.
The Bottom Line
Choose the settings area that matches the feature: Windows agent workspaces use AI Components > Agents, while Copilot PC insights uses Copilot settings. Set known folders to Ask every time or Never allow as appropriate, review connectors independently, remember that shared locations are outside the six-folder control, and treat UAC as a separate administrator-change prompt.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
