--- title: "I turned on Windows 11's AI agents, then immediately revoked their file access" url: https://daily.dev/posts/i-turned-on-windows-11-s-ai-agents-then-immediately-revoked-their-file-access-ccegs53fj source_url: https://www.xda-developers.com/turned-on-windows-11-ai-agents-then-immediately-revoked-their-file-access type: article source: "XDA Developers" published: 2026-07-05T21:33:44.721Z updated: 2026-07-05T21:39:41.630Z tags: ["windows", "ai-agents", "mcp", "local-ai"] reading_time: 5 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # I turned on Windows 11's AI agents, then immediately revoked their file access **[XDA Developers](https://daily.dev/sources/xda-developers)** · 5 min read · 0 upvotes · 0 comments ## Summary A hands-on evaluation of Windows 11's Copilot Actions and Agent Workspace, written by someone who actively uses agentic AI workflows in their home lab. The author enabled the feature, tested it, then disabled it due to concerns about the default trust boundary — specifically that the agent retains persistent access to real user folders (known folders) rather than scoped, ephemeral access. While crediting Microsoft for shipping it off by default and applying least-privilege thinking, the author argues key safeguards are missing: per-app scoping, tamper-evident audit logs, mandatory confirmations for destructive actions, and guaranteed on-device processing of private data. As an alternative, the author uses Terraform and Ansible to spin up isolated VMs connected to a local LLM, giving agents only the files they need. The conclusion is that OS-integrated agents are the right direction, but the current trust boundary is too loose for personal devices storing sensitive data. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#windows](https://daily.dev/tags/windows), [#ai-agents](https://daily.dev/tags/ai-agents), [#mcp](https://daily.dev/tags/mcp), [#local-ai](https://daily.dev/tags/local-ai) [View this post on daily.dev](https://daily.dev/posts/i-turned-on-windows-11-s-ai-agents-then-immediately-revoked-their-file-access-ccegs53fj)