How to Disable Copilot in Excel for Sensitive Spreadsheets

If your organization handles financial models, customer data, or trade secrets in Excel, you may need to prevent Copilot from accessing those files. Copilot in Excel connects to Microsoft Graph to generate formulas, charts, and insights based on your spreadsheet content. This integration means sensitive data could be processed outside your immediate control. This article explains how to disable Copilot in Excel for specific spreadsheets or across your entire Microsoft 365 tenant using Group Policy, PowerShell, and the Microsoft 365 admin center.

Why Copilot in Excel Poses a Risk for Sensitive Spreadsheets

Copilot in Excel uses the Microsoft Graph to read cell values, named ranges, and tables. When you ask Copilot to analyze a spreadsheet, it sends a representation of the selected data to Microsoft’s cloud. This processing is required for Copilot to generate formula suggestions, chart recommendations, or natural-language summaries. For spreadsheets containing personally identifiable information PII, financial forecasts under embargo, or intellectual property, this data flow may violate internal compliance policies or regulatory requirements such as GDPR, HIPAA, or SOX.

Microsoft provides several controls to limit or disable Copilot. The method you choose depends on your admin role and the scope of the restriction. You can disable Copilot tenant-wide, for specific security groups, or for a single spreadsheet using sensitivity labels. Each method has different effects on user experience and data processing.

How Copilot Processes Spreadsheet Data

When a user triggers Copilot in Excel, the client sends a prompt plus context about the active worksheet. This context includes cell values, column headers, and row data but not the entire workbook. Microsoft states that Copilot does not store or train on tenant data. However, the data passes through Microsoft’s AI inference servers. If your compliance policy forbids any external processing of certain data, you must disable Copilot entirely for those spreadsheets.

Steps to Disable Copilot in Excel Using the Microsoft 365 Admin Center

The most direct method is to turn off Copilot for specific users or groups in the Microsoft 365 admin center. This method disables Copilot in all Microsoft 365 apps including Excel, Word, and PowerPoint.

1. Sign in to the Microsoft 365 admin center
   Go to admin.microsoft.com and sign in with a Global Admin or Copilot Admin account.
2. Navigate to Copilot settings
   In the left navigation, select Settings then Org settings. Under the Services tab, find and select Copilot.
3. Open Data controls
   In the Copilot settings page, click Data controls. This section lists the data sources Copilot can access.
4. Turn off Copilot for specific users
   Under Copilot in Microsoft 365, select Specific users or groups. Enter the email addresses or group names of the users who should not have Copilot. Click Save.
5. Confirm the change
   Wait up to 30 minutes for the policy to propagate. Users in the restricted group will no longer see the Copilot icon in Excel.

Steps to Disable Copilot in Excel Using Group Policy

For on-premises domain-joined computers, you can use Group Policy to disable Copilot across all Office desktop apps. This method works for Windows 10 and Windows 11 devices.

1. Download the latest Office Administrative Templates
   Go to the Microsoft Download Center and download the Office Administrative Templates for the version of Office you use, such as Microsoft 365 Apps for enterprise.
2. Install the templates on a domain controller
   Run the downloaded MSI file on a machine that has the Group Policy Management Console. The templates are added to the Central Store or local PolicyDefinitions folder.
3. Open Group Policy Management Editor
   Right-click the domain or organizational unit where you want to apply the policy and select Create a GPO in this domain and Link it here. Give the GPO a name such as Disable Copilot.
4. Navigate to the Copilot policy setting
   In the Group Policy Management Editor, go to Computer Configuration > Policies > Administrative Templates > Microsoft Office 2016 > Tools | Options | General. Look for the policy named Turn off Copilot in Microsoft 365 apps.
5. Enable the policy
   Double-click the policy, select Enabled, and click OK. This setting disables Copilot in all Office apps including Excel.
6. Force a Group Policy update
   On affected client machines, run gpupdate /force in an elevated Command Prompt. Restart Excel for the change to take effect.

If Copilot Still Appears After Disabling It

Copilot icon remains visible but returns an error

This occurs when the policy has not fully propagated or when a user has cached credentials. Ask the user to sign out of all Microsoft 365 apps and sign back in. If the issue persists, verify that the GPO is applied by running gpresult /r on the client machine.

Copilot works in Excel Online but not in the desktop app

The desktop app policies do not affect Excel Online. To disable Copilot in Excel Online, use the Microsoft 365 admin center method described above. You must disable the service directly rather than relying on Group Policy.

Users in the restricted group can still use Copilot

Check whether the user is also a member of a group that has Copilot explicitly enabled. In the admin center, Copilot settings use an allow list. If a user belongs to both an allowed and a denied group, the allow list takes precedence. Remove the user from the allowed group or create a separate security group that contains only the users who should not have Copilot.

Copilot in Excel vs Copilot for Microsoft 365: Key Differences

Item	Copilot in Excel	Copilot for Microsoft 365
Scope	Excel-only features like formula generation and chart creation	All Microsoft 365 apps including Word, Excel, PowerPoint, Teams, and Outlook
Data access	Reads active worksheet data via Microsoft Graph	Reads emails, documents, calendar items, and Teams messages
Disable method	Group Policy, admin center user restriction, or sensitivity label	Same methods but affect all apps simultaneously
License requirement	Microsoft 365 E3 or E5 with Copilot add-on, or Copilot Pro	Microsoft 365 E3 or E5 with Copilot for Microsoft 365 license

You can now disable Copilot in Excel for sensitive spreadsheets using the Microsoft 365 admin center, Group Policy, or a combination of both. Start by identifying which spreadsheets contain sensitive data and which users need restricted access. After applying the policy, test on a non-production device first to confirm Copilot does not appear. For additional protection, apply Microsoft Purview sensitivity labels to mark spreadsheets as confidential and block Copilot from reading them automatically.