{"id":4730,"date":"2026-06-30T00:59:59","date_gmt":"2026-06-30T04:59:59","guid":{"rendered":"https:\/\/workai.tv\/news\/2026\/06\/ai-engineering\/microsoft-365-copilot-auto-installs-on-enterprise-pcs-italy-launches-antitrust-probe\/"},"modified":"2026-06-30T00:59:59","modified_gmt":"2026-06-30T04:59:59","slug":"microsoft-365-copilot-auto-installs-on-enterprise-pcs-italy-launches-antitrust-probe","status":"publish","type":"post","link":"https:\/\/workai.tv\/news\/2026\/06\/ai-engineering\/microsoft-365-copilot-auto-installs-on-enterprise-pcs-italy-launches-antitrust-probe\/","title":{"rendered":"Microsoft 365 Copilot Auto-Installs on Enterprise PCs: Italy Launches Antitrust Probe"},"content":{"rendered":"

Share with your CISO<\/h2>\n

Microsoft is pushing the Microsoft 365 Copilot app onto enterprise Windows devices worldwide through its Click-to-Run Office update channel, bypassing conventional Windows Update and Store blockers. The broad deployment hits the Semi-Annual Enterprise Channel on July 14. Italy’s competition authority opened a formal antitrust investigation into Microsoft’s Copilot bundling practices<\/a> on June 26, the same week the rollout expanded. Every EEA country is exempt from the auto-install, a carve-out that exists because the EU’s Digital Markets Act prohibits exactly this behavior from designated gatekeepers like Microsoft.<\/p>\n

What this means for your business<\/h2>\n

The delivery vector is the story. Click-to-Run (the background streaming service that has updated Office since 2010) operates entirely outside Windows Update and the Microsoft Store. That means your existing change management gates, your Store blockers, your Windows Update policies: none of them catch this. For a healthcare or financial services organization, that’s not a theoretical gap. An AI application with access to everything a user’s credentials can reach just arrived on managed endpoints without completing your software approval process.<\/p>\n

The EEA exemption is Microsoft’s own legal risk assessment made visible. When a company voluntarily excludes an entire regulatory jurisdiction from a deployment, it’s telling you the practice wouldn’t survive scrutiny there. The UK CMA investigation is ongoing, Italy’s AGCM probe just opened, and the FTC has been examining Microsoft’s AI bundling. Microsoft is running a consent-by-default model everywhere that scrutiny is absent, and banking on the cost of enforcement being lower than the cost of asking permission. That calculus is worth naming explicitly when you’re briefing leadership on why this required an emergency policy push.<\/p>\n

This is Microsoft’s third attempt at this rollout. The first two waves prompted enterprise backlash and pauses. The April 2026 Group Policy addition that many IT teams read as a resolution governed the consumer Copilot app through Windows, not this application through Office. Blocking one didn’t block the other. The pattern is opt-out creep: each wave introduces a new delivery path that existing blocks don’t cover, requiring a new round of administrative response. The signal worth watching is whether Microsoft eventually fragments Copilot controls enough that no single policy covers the full surface area.<\/p>\n

Concept deep-dive: Click-to-Run<\/h2>\n

Click-to-Run is Microsoft’s streaming and virtualization delivery system for Office applications, running as a persistent background service (OfficeClickToRun.exe) on any device with Microsoft 365 Apps installed. It exists to enable faster Office updates without full reinstalls. Think of it as a private software pipeline that runs parallel to Windows Update and is architecturally invisible to tools watching the Store or Windows patch channel. Because it’s bundled with Office itself, you can’t block it without breaking Office. That’s what makes it an effective delivery vehicle for software an organization hasn’t explicitly approved.<\/p>\n

Based on reporting from Microsoft 365 Copilot Auto-Installs on Enterprise PCs: Italy Launches Antitrust Probe<\/a>, originally published 2026-06-29 15:11:00.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Share with your CISO Microsoft is pushing the Microsoft 365 Copilot app onto enterprise Windows devices worldwide through its Click-to-Run Office update channel, bypassing conventional Windows Update and Store blockers. The broad deployment hits the Semi-Annual Enterprise Channel on July 14. Italy’s competition authority opened a formal antitrust investigation into Microsoft’s Copilot bundling practices on […]<\/p>\n","protected":false},"author":1,"featured_media":4731,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[145],"tags":[],"tmauthors":[],"class_list":["post-4730","post","type-post","status-publish","format-standard","has-post-thumbnail","category-ai-engineering"],"_links":{"self":[{"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/posts\/4730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/comments?post=4730"}],"version-history":[{"count":0,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/posts\/4730\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/media\/4731"}],"wp:attachment":[{"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/media?parent=4730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/categories?post=4730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/tags?post=4730"},{"taxonomy":"tmauthors","embeddable":true,"href":"https:\/\/workai.tv\/news\/wp-json\/wp\/v2\/tmauthors?post=4730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}