Microsoft asks users for permission to let Copilot act autonomously on PCs

<>

Microsoft is asking Windows users to let Copilot open their files, read their work history, and take direct actions across their machines without requiring a click of approval at every step. That profound shift in desktop autonomy was revealed during a recent Microsoft Windows and Surface event, arriving as the tech giant pushes deeper into agentic computing from a position of weakness.

Hybrid Intelligence Inside Copilot+ PCs

The updated Copilot system integrates what Microsoft terms hybrid intelligence for Copilot+ PCs. With explicit user permission, the AI can inspect local files, evaluate device diagnostics, write code, and execute multi-step workflows. Simple tasks run on local models, while more complex operations route to the cloud. Pavan Davuluri, Microsoft executive vice president of Windows and devices, stated in the official announcement that Copilot entiende tu PC y actúa con tu permiso—understanding the PC and acting with user authorization. Alongside this, an autonomous agent framework called Autopilot handles persistent, proactive tasks, such as collecting what the accountant needs. Meanwhile, the Windows taskbar search box is transforming into a command line capable of executing thousands of system actions.

Internal Security Warnings at Microsoft

Despite the functional expansion, Microsoft’s own cybersecurity leadership has documented severe operational risks. Earlier this year, Dana Huang and Logan Iyer, corporate vice presidents of Windows security, wrote that agents reading files, invoking services, and chaining operations introduce new control and trust challenges, noting specifically that large language models are developing the capability to escape isolated environments. To mitigate these risks, Microsoft relies on voluntary activation, restricted folder access, and Microsoft Execution Containers—an isolation layer that prevents agents from self-escalating their permissions. However, cryptographic auditing tools and fine-grained management controls through Microsoft Entra and Intune are scheduled for rollout at a later date, leaving a gap between policy enforcement and administrative oversight.

The Persistent Fallout From Recall

This push toward deep operating system integration revives intense scrutiny over Microsoft’s earlier privacy missteps. When the company previously introduced Recall—a feature designed to capture background snapshots of user screens—security researcher Alex Hagenah discovered that the local database was stored in unencrypted plain text. Following swift pushback, Microsoft pulled Recall from general release, tied it to Windows Hello, and added encryption before moving it to the Windows Insider testing channel. Public frustration flared anew after Davuluri described Windows as evolving into an agentic operating system on social media, drawing hundreds of negative responses and prompting the executive to disable comments after acknowledging that the company still has work to do on the user experience.

Copilot+ hardware deployment and Surface Laptop Ultra launch

The new hybrid capabilities require specialized Copilot+ hardware, with deployment timelines varying across devices, markets, and processors over the coming months. Taskbar search expansions began rolling out to experimental Windows Insider channels on October 7, while the premium Surface Laptop Ultra hits store shelves on October 16 starting at $2,599. Microsoft reports that over 40% of currently manufactured enterprise laptops qualify as Copilot+ PCs, though every user retains the right to deny local access and decline automated workflows entirely.

Microsoft uses containers to isolate Copilot agents

What specific security safeguards isolate the new Copilot agents from the rest of the Windows operating system?

Microsoft uses Microsoft Execution Containers to isolate agent workflows from standard user accounts and restrict access to designated folders. According to corporate security documentation, these isolation policies operate independently of the AI agents, meaning neither the model nor its generated code can unilaterally grant itself expanded system privileges.

How does the new taskbar search function change daily interactions with Windows 11?

The updated taskbar search box functions as a command-line interface capable of executing thousands of direct system actions. Users can initiate device diagnostics, switch display settings like dark mode, or trigger automated workflows directly from the search prompt once the feature rolls out broadly.

What role does Microsoft Entra play in auditing agent activity within enterprise networks?

Microsoft Entra will soon provide administrative tools designed to distinguish autonomous agent activity from standard human user activity on corporate networks. Company notes indicate that full governance at scale requires these upcoming services alongside Intune container management.

When will the hardware supporting these agentic features become commercially available?

Microsoft’s flagship Surface Laptop Ultra launches on October 16 with a starting price of $2,599, while broader hybrid feature deployments continue rolling out to supported Copilot+ hardware across global markets.