STIGQter: STIG Summary: Microsoft Windows 11 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

Copilot must be disabled for Windows 11.

DISA Rule

SV-268317r1135320_rule

Vulnerability Number

V-268317

Group Title

SRG-OS-000096-GPOS-00050

Rule Version

WN11-00-000125

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Open PowerShell as an administrator. Run the following command:

Get-AppxPackage -AllUsers *CoPilot* | Remove-AppxPackage -AllUsers

Check Contents

Run the following PowerShell command as an administrator:

Get-AppxPackage -AllUsers | Where-Object { $_.Name -like "*Copilot*" }

If Microsoft.Copilot displays, this is a finding.

Vulnerability Number

V-268317

Documentable

False

Rule Version

WN11-00-000125

Severity Override Guidance

Run the following PowerShell command as an administrator:

Get-AppxPackage -AllUsers | Where-Object { $_.Name -like "*Copilot*" }

If Microsoft.Copilot displays, this is a finding.

Check Content Reference

M

Target Key

5471