{"id":354386,"date":"2025-12-17T18:03:18","date_gmt":"2025-12-17T18:03:18","guid":{"rendered":"https:\/\/www.newsbeep.com\/au\/354386\/"},"modified":"2025-12-17T18:03:18","modified_gmt":"2025-12-17T18:03:18","slug":"microsoft-confirms-windows-11-will-ask-for-consent-before-ai-agents-can-access-your-personal-files-after-outrage","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/au\/354386\/","title":{"rendered":"Microsoft confirms Windows 11 will ask for consent before AI agents can access your personal files, after outrage"},"content":{"rendered":"

\"Windows<\/a><\/p>\n

Microsoft confirms that Windows 11 will ask for your consent before it allows an AI Agent to access your files stored in the six known folders, which include Desktop, Documents, Downloads, Music, Pictures, and Videos. You can also customize file access permissions for each agent.<\/p>\n

This clarification comes after growing concerns around Microsoft\u2019s push to bring AI agents deeper into Windows. Over the past few weeks, the company has been laying the groundwork for agent-based experiences<\/a> that can interact with your files, apps, and system settings, even while openly admitting that AI models can misbehave<\/a>, hallucinate, or create new security risks.<\/p>\n

\u201cAI Agent\u201d is an optional feature and needs to be manually enabled. Until now, Microsoft hadn\u2019t clearly explained how file access would work in practice, or whether users would have control over what these agents could see.<\/p>\n

As first spotted by Windows Latest, on December 5, Microsoft quietly updated its Experimental Agentic Features support document<\/a> to explain how consent, permissions, and agent connectors work in preview builds 26100.7344 and newer, finally confirming that AI agents cannot access your personal files by default and must explicitly ask for permission.<\/p>\n

AI Agents in Windows 11 will need your permission to access files from known folders<\/p>\n

A couple of weeks ago, Windows Latest pointed out how Microsoft wants to give AI access to your files and apps<\/a>, even while admitting that such AI agents can misbehave and pose security risks.<\/p>\n

\u201cAI models still face functional limitations in terms of how they behave and occasionally may hallucinate and produce unexpected outputs\u201d, says the company in their support document<\/a>.<\/p>\n

\"Experimental<\/p>\n

Of course, a company confessing that its most promoted product introduces novel security risks cannot be taken lightly under any circumstances.<\/p>\n

We noticed that although Microsoft insists that AI agents run under an agentic workspace, which is separate from the user workspace, and have limited permissions, Windows will still grant them access to your Desktop, Documents, Downloads, Music, Pictures, and Videos folders, which are collectively called the known folders<\/a>.<\/p>\n

\"WindowsImage Courtesy: WindowsLatest.com<\/p>\n

Earlier, Microsoft\u2019s documentation was not clear, as it implied that enabling the above toggle would allow agents to access these folders automatically.<\/p>\n

However, Microsoft was quick to respond with an update to the support document after Windows Latest reached out for statements. Microsoft says it\u2019s adding a clear consent step for AI agents. Even if you turn on Experimental agentic features, an agent doesn\u2019t automatically get to read your files.<\/p>\n

You can also give separate permissions for individual agents, like Copilot, Researcher, or Analyst, to these folders collectively.<\/p>\n

Yes, it means that while you can give per-agent access to the known folders, you cannot choose which of the six folders an AI agent can have access to. It\u2019s either all of them or none of them.<\/p>\n

I would prefer it if the Researcher and Analyst agents had all-time access to my Documents folder, while Copilot has to ask me every time if it needs access to any of my personal folders. But that\u2019s not the case here.<\/p>\n

\"InvokingInvoking agent from Ask Copilot in Taskbar. Credit: Microsoft<\/p>\n

That being said, you can still choose if the AI agent can get unlimited access at all times, or just allow access once, or no access at all. If an AI agent, like Copilot, needs to get hold of your files to complete a task, you\u2019ll get a pop-up from which you can choose \u201cAlways allow\u201d, \u201cAsk every time, or \u201cNever allow\u201d.<\/p>\n

\"CopilotThe pop-up currently does not have \u201cNever allow,\u201d but it looks like \u201cNot now\u201d will later get updated to \u201cnever allow.\u201d<\/p>\n

These options are only available for systems with preview builds 26100.7344 and above for 24H2, 26200.7344 and above for 25H2.<\/p>\n

AI Agents get a dedicated Settings page in Windows 11<\/p>\n

Each agent you have in Windows now gets its own Settings page from where you can manage its permission to access your files. In the screenshot below, you can change permissions to Connectors in Copilot, like OneDrive and Google Drive integration<\/a>.<\/p>\n

\"Windows<\/p>\n

The other \u201cConnectors\u201d just below Files and Connectors are, in fact, Agent Connectors, which are powered by Model Context Protocol (MCP) and are standardized bridges that allow AI agents to interact with apps in Windows. Microsoft is currently testing this with its push to bring AI Agents to the taskbar<\/a>.<\/p>\n

\"Agent<\/p>\n

In the screenshot provided by Microsoft, you can also see two Agent Connectors, which let the Agent use the File Explorer app and System Settings app. You can set individual permissions for each of these, which means you can either allow AI agents to use these apps at all times, only once when you allow, or never at all.<\/p>\n

To access these settings, go to the Settings app, select System > AI Components > Agents.<\/p>\n

You\u2019ll see the list of Agents available on your PC\u2019s Windows OS. Select the agent and customize what these agents can access on your PC.<\/p>\n

In the case of Files, Microsoft gives you three options. The Allow Always option gives the agent access to the six known folders whenever it has to. Selecting the Ask every time option will make Windows show you a prompt to give permission to share files in these folders when the agent needs them.<\/p>\n

Of course, the Never allow\u00a0option will make Windows deny the request of the agent to access the folders.<\/p>\n

This is a solution to a problem that Microsoft created when it said that AI would have access to your files. Anyway, the ability to manage permissions is good enough for now.<\/p>\n

That being said, Microsoft also says that \u201c\u200b\u200b\u200b\u200b\u200b\u200b\u200bAgent accounts have access to any folders that all authenticated users have access to, e.g., public user profiles.\u201d<\/p>\n

If the folder permissions include groups like Users \/ Authenticated Users with read access, then an agent account could access it.<\/p>\n

\"Security<\/p>\n

If the folder is locked to your user account (plus SYSTEM\/Admins), then the agent account won\u2019t have access unless Windows explicitly grants it via the known-folder consent flow.<\/p>\n

Note that Microsoft has no word on when AI will be able to stop hallucinating or avoid novel security issues like cross-prompt injection (XPIA).<\/p>\n

Interestingly, Microsoft made it a point to post in X that AI in Windows 11 will empower people \u201csecurely\u201d,<\/a> even as malware risks are unavoidable.<\/p>\n","protected":false},"excerpt":{"rendered":"Microsoft confirms that Windows 11 will ask for your consent before it allows an AI Agent to access…\n","protected":false},"author":2,"featured_media":354387,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[256,254,255,64,63,105],"class_list":{"0":"post-354386","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-artificial-intelligence","8":"tag-ai","9":"tag-artificial-intelligence","10":"tag-artificialintelligence","11":"tag-au","12":"tag-australia","13":"tag-technology"},"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/354386","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/comments?post=354386"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/posts\/354386\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media\/354387"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/media?parent=354386"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/categories?post=354386"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/au\/wp-json\/wp\/v2\/tags?post=354386"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}