Microsoft Copilot Windows Control Expands

Microsoft says Copilot will soon read files on a Windows PC, take actions across apps and settings, and run AI models on the machine itself, under a design it calls Hybrid Intelligence. The pitch is lower cost and better privacy. The catch is timing: the features are months away, and the controls that would govern file access have not been documented.

Engadget described Hybrid Intelligence, announced at Microsoft's Windows and Surface event in San Francisco on Wednesday, as a new suite of software orchestration tools that will allow you to run AI models locally on your PC. When the feature is enabled, the updated Copilot app can access files on your computer and take actions across your apps and settings, Engadget reported.

What Does Hybrid Intelligence Let Copilot Do?

Techaeris, summarizing the announcement, said the design gives Copilot three local capabilities on Copilot+ PCs: local context, local actions and local models. Copilot can act on a user's behalf across Windows, Techaeris reported, handling tasks such as organizing files, assessing device diagnostics, troubleshooting issues, coding and carrying out workflows directly on the device. The capabilities span Copilot's Home, Code and Autopilot sections.

Pavan Davuluri, Microsoft's executive vice president of Windows and Devices, framed it to the audience in terms of consent. A Windows PC can, in his words, "with their permission, can take action on their behalf."

The most concrete demonstration came from Jacob Andreou, Microsoft's EVP of Copilot. WindowsForum reported that in the headline demo, Autopilot used a local model to find, rename and Zip tax files and then draft an email to an accountant.

Why Push AI Onto the PC Now?

Axios said Microsoft's argument is partly about money. The company's pitch for on-device AI is that developers' appetite exceeds what their companies' AI budgets can afford. The ideal, per Axios, is frontier models in the cloud plus local models when they can be effective.

"Hybrid intelligence exists because people's appetite for intelligence is effectively unlimited." Davuluri said, according to Axios.

Engadget reported that Microsoft will still use cloud inference for the hardest tasks. Where cost or privacy might be a concern, Copilot can run prompts against models that run directly on the computer. Engadget's roundup put it as running AI models locally while tapping into the cloud for extra compute power.

Competition is part of the backdrop. Engadget linked Microsoft's agentic push to Meta's Muse AI agent finding a large audience and Perplexity's Personal Computer arriving on Mac. Axios reported that Microsoft announced Meta is bringing its Muse personal agent to Windows. Axios also said Microsoft is trying to carve out a high-end laptop category for people who want to run demanding AI workloads locally rather than rely entirely on the cloud.

For Microsoft's hardware, the stakes carry some history. Axios noted that the company's first push into AI-powered Windows machines, the Copilot+ PCs, got off to a rocky start after the delay of Recall, its signature feature.

How Does Microsoft Plan to Fence In the Agents?

Security took up a fair amount of the event, Axios said. Microsoft outlined how it is making Windows more secure by ensuring that agents' actions are separated from those taken by humans and remain within preset limits. Engadget said Microsoft hammered home that it is working to make Windows the most secure platform for AI agents.

The technical centerpiece is Microsoft Execution Containers, or MXC. Techaeris described it as a policy-driven execution layer for untrusted code and dynamically generated workloads. Developers declare the files and network destinations a workload needs, and MXC enforces that boundary. The policy lives outside the agent's control, so the agent or the code it generates cannot grant itself extra access, Techaeris reported.

WindowsForum said Microsoft made MXC generally available on Windows 11 the same day. According to Techaeris, GitHub Copilot, OpenClaw, OpenAI Codex, Replit, LM Studio and Unsloth AI support it today. Anthropic's Claude Code, Perplexity, Raycast, Manus, Box and others are arriving soon.

GeekWire added a detail on identity: Windows can assign agents a local ID, or a cloud-provisioned identity backed by Entra.

What Is Still Missing?

Quite a lot, according to WindowsForum. Relaying Microsoft's Windows Experience Blog, it said Microsoft limits the Copilot capabilities to Copilot+ PCs. A Windows Update is required, and timing may vary by device, market and silicon platform. Microsoft has not published a Windows build number, Copilot app version, country list or subscription requirement for the hybrid features. Techaeris said they are expected to roll out on Copilot+ PCs in the coming months.

The permission model is the larger gap. Microsoft states that Copilot will act "with your permission" and that users stay "in control at every step," WindowsForum said, but the blog does not describe the permission prompts, folder selection, default access scope or any activity log. WindowsForum also cautioned that the tax demo was a prepared video shown on stage, not a hands-on test, and that Microsoft has not published a threat model for these Copilot features.

Skepticism is already visible. Engadget's reporter noted the backlash against Recall and against Copilot features that Microsoft ended up removing, and wrote that he has no interest in agents having access to his personal files. Engadget also observed that the move comes less than a year after Microsoft promised to remove unnecessary Copilot integration from Windows 11.

GeekWire traced the tension to Davuluri himself. He was appointed Executive Vice President of Windows + Devices in March 2026, reporting directly to CEO Satya Nadella. He called Windows an agentic OS in November 2025 via a tweet and blog post, GeekWire reported, and the customer backlash was quick and biting. He has since changed how he talks about it while still heading in an agentic direction. He told GeekWire in September: "The user of Windows going forward will continue to be users … but it's also going to add these agentic workloads."

What About Search and the New Hardware?

Alongside Copilot, Microsoft showed a revamped Windows Search. Engadget reported that starting this fall, the Search menu will let users carry out thousands of different actions across Windows by typing short commands. Davuluri demoed it switching settings such as dark mode and do not disturb on and off. Engadget's roundup listed taking a screenshot, adjusting the volume, getting answers to questions and sending text messages among the taskbar actions. With a phone paired to Windows, users can send texts from the taskbar without pulling out the device.

The redesigned menu also lets users converse with the new Copilot app without launching it separately, then jump directly into the app to continue, Engadget said. WindowsForum noted that Microsoft's Insider notes put the new Search in the Experimental channel (Build 26340.9616) and the Experimental (26H1) channel (Build 28120.3181). It described the Copilot-in-Search integration as a separate, opt-in feature headed to select markets later in 2026.

On hardware, Engadget reported that the Surface Laptop Ultra starts at $2,599, with pre-orders open and availability on October 16. Techaeris said the Surface RTX Spark Dev Box is priced at $5,999 MSRP, sold exclusively on Microsoft.com in the United States, and shipping in November. Techaeris also said Microsoft AI developed an on-device version of MAI Code 1.1 Flash, a coding-optimized mixture-of-experts model with 137 billion total and 6.8 billion active parameters.

What Changed This Week

Microsoft moved from talking about Copilot as a cloud assistant to describing it as an agent that can work with local files, settings and models on the PC, with the hardest tasks still sent to the cloud. It paired that with MXC, now generally available on Windows 11, as its answer to the question of how far an agent can reach. The cost and privacy case rests on running models locally where they can be effective. The Copilot hybrid features themselves have no build number, no market list and no documented permission flow yet.

What to Watch

The first marker is documentation: whether Microsoft publishes the permission prompts, default access scope, activity logging and a threat model for the Copilot features. WindowsForum flagged all of these as absent. The second is the rollout itself, which Techaeris said would reach Copilot+ PCs in the coming months, and which will need a Windows Update and an announced build and version. The new Search menu arrives this fall per Engadget, while the Copilot-in-Search integration is slated for select markets later in 2026. Surface Laptop Ultra availability follows on October 16, and the Surface RTX Spark Dev Box ships in November.

Reporting based on coverage from Engadget, Axios, Techaeris, WindowsForum and GeekWire, published around October 7, 2026.