Deploy Microsoft 365 Copilot with Intune: Step-by-Step Admin Guide

Deploying the Microsoft 365 Copilot app with Intune lets IT administrators push the AI productivity app silently to all enrolled Windows and macOS devices, with the right licenses assigned and update channels configured. This guide covers the full Microsoft 365 Copilot deployment process via Intune, from license assignment to app rollout and adoption monitoring.

The Microsoft 365 Copilot app completed its general rollout in June 2025 and requires Microsoft 365 Apps Version 2511 or later for automatic installation. For the full deployment FAQ, see Microsoft’s official Copilot deployment documentation. See also our guide on what Microsoft Intune is.

Prerequisites: Licenses and Update Channels

Before deploying the Copilot app via Intune, confirm these requirements for each target user and device:

• Base license: Microsoft 365 E3, E5, Business Standard, or Business Premium
• Copilot add-on: Microsoft 365 Copilot license ($30/user/month or Copilot Business for up to 300 users)
• Microsoft 365 Apps Version 2511 or later (Current Channel or Monthly Enterprise Channel)
• Entra ID account with an Exchange Online mailbox
• Device enrolled in Intune with the appropriate compliance policy applied

Step 1: Assign Copilot Licenses via Entra ID Dynamic Groups

The most efficient way to assign Copilot licenses at scale uses Entra ID group-based licensing. Create a security group (static or dynamic) in the Entra admin center, assign the Microsoft 365 Copilot license plan to the group, and add users. Entra ID automatically assigns and removes licenses as users join or leave the group.

1. In the Entra admin center, go to Groups → create or select a security group
2. Go to Licenses → Assignments → Add
3. Select the Microsoft 365 Copilot plan and save
4. Add users to the group — licenses assign automatically within minutes

For dynamic group configuration, see our guide on Entra ID dynamic groups for Intune. A dynamic user group based on department or job title automates Copilot license assignment without any manual management.

Step 2: Configure the Update Channel

The Copilot app requires devices on Current Channel or Monthly Enterprise Channel. Devices on the Semi-Annual Enterprise Channel cannot automatically receive the Copilot app. Switch channels via Intune using the Microsoft 365 Apps admin center or a configuration policy:

1. In the Intune admin center, go to Devices → Configuration → Create policy
2. Select Windows 10 and later → Settings catalog
3. Search for Update Channel under Microsoft Office 2016
4. Set to Current Channel or Monthly Enterprise Channel and assign to your Copilot target group

Step 3: Deploy the Microsoft 365 Copilot App via Intune

On qualifying devices (M365 Apps Version 2511+), the Copilot app installs automatically in the background. For devices that need a manual push or for macOS devices, deploy it explicitly via Intune:

1. In the Intune admin center, go to Apps → Windows → Add
2. Select Microsoft 365 Apps (Windows 10 and later) as the app type
3. Configure the app suite to include the Microsoft 365 Copilot app
4. Assign to your Copilot license group with assignment type Required
5. For macOS, follow the same process under Apps → macOS → Microsoft 365 Apps (macOS)

Step 4: Monitor Adoption with the Copilot Dashboard

After deployment, track Copilot usage in the Copilot Dashboard in Microsoft Viva Insights. This dashboard shows active users, feature adoption rates, user satisfaction scores, and high-usage individuals. Use the Action segments feature (GA in early 2026) to target inactive Copilot users with onboarding guidance via organizational messages — directly through Teams, Windows notifications, or email.

For the Copilot in Intune AI capabilities, see our guide on Copilot in Microsoft Intune. For Intune app deployment on macOS, see our macOS app deployment guide.

Govern Copilot Access with Conditional Access

Deploying the Copilot app is only half the equation — governing who can use it and from which devices completes the Zero Trust posture. Configure a Conditional Access policy in Entra ID that targets the Microsoft 365 Copilot app and requires device compliance. This ensures only Intune-enrolled, compliant devices can access Copilot features, preventing corporate AI data from being accessible on unmanaged personal devices. For the full Conditional Access setup, see our guide on Conditional Access with Intune and Entra ID.