PcFixin'

Stop Windows 11 AI Agents Accessing Personal Folders

By PcFixin' · July 19, 2026 · Windows · Windows 11, AI agents, privacy

Turn off broad file access, review each AI agent, and tighten app permissions for your documents, photos, downloads, and other personal files.

What Windows AI agents may be able to reach

An AI agent is different from an ordinary chatbot. It can carry out tasks on your behalf, such as finding files or working with installed apps. That can be useful, but it also means the agent may need permission to read or change your files.

Microsoft's experimental Agent Workspace can be allowed to reach six personal folders: Documents, Downloads, Desktop, Videos, Pictures, and Music. These are called “known folders” because Windows keeps track of them. Moving one to another drive does not necessarily hide it from an agent.

These features are still being introduced gradually. The steps below assume you have a Windows 11 preview or supported build that shows AI Components in Settings. If that page is missing, do not worry. The experimental agent feature is not available or enabled on your computer.

Turn off experimental agent file access completely

This is the simplest and strongest choice if you do not use Windows AI agents. Turning off the experimental agentic feature limits agent access to the six known folders listed above. You will need an administrator account, meaning an account permitted to change important Windows settings.

1. Press the Windows key and I together to open Settings.
2. Select System from the left side of Settings.
3. Select AI Components.
4. Select Experimental agentic features.
5. Turn off the Experimental agentic features switch.

Restrict one agent instead of disabling everything

On preview builds 26100.7344 and later, Windows may let you manage folder access separately for each agent. This is handy if you want to keep an agent but do not want it freely reaching every personal folder.

Windows may also display a consent message when an agent asks for files. Consent simply means permission. Read that message slowly, check which files or folders are requested, and refuse requests that seem broader than the task.

The wording of the three file-access choices may change during this experimental rollout. Choose the option that denies access, or select only the folders needed for that agent. Avoid a broad “always allow” choice unless you genuinely want ongoing access.

1. Open Settings by pressing the Windows key and I together.
2. Select System.
3. Select AI Components.
4. Select Agents.
5. Select the agent you want to review.
6. Scroll to the Files section.
7. Choose the most restrictive file-access option that still lets the agent perform its job.
8. Turn off any connector that the agent does not need.

Check ordinary app access too

AI tools installed as apps may also appear in Windows privacy controls. The File system page controls access for compatible apps that Windows can manage individually. Turning off an app here can prevent it from browsing your wider file system, although the app may lose features that depend on opening or saving files.

This page does not control every traditional desktop program. Older desktop software may not appear in the list. If an unwanted AI program is missing, close it when it is not needed or uninstall it through Settings > Apps > Installed apps. That is more reliable than assuming a missing switch means the program has no access.

Settings names can vary slightly between Windows 11 releases. If you cannot find File system under Privacy & security, type “file system privacy” into the Settings search box.

1. Press the Windows key and I together to open Settings.
2. Select Privacy & security.
3. Select File system under App permissions.
4. Review the apps shown under file system access.
5. Turn off the switch beside any app that does not need access to your files.

Use the smallest permission that gets the job done

You do not have to reject every AI feature forever. A good privacy habit is to grant the smallest permission needed for one clear task. If an agent only needs a single document, share that document when asked instead of leaving an entire folder available.

After the task is finished, return to the agent's Files section and remove access you no longer need. This takes an extra minute, but it prevents temporary convenience from becoming permanent permission. You are not breaking Windows by saying no. You are simply deciding which tools may enter your digital filing cabinet.

1. Reject any file request that includes more folders than the current task requires.
2. Remove the agent's file permission after completing the task.

Bottom line

For the strongest protection, turn off Experimental agentic features. If you keep an agent enabled, restrict its Files permissions, disable unnecessary connectors, and remove access when the job is done.