AI News

Lesson 00.2: Build a Safe Microsoft Copilot Practice Setup

Skip to the setup checklist

Module 00 · Lesson 00.2

Build a practice setup that cannot hurt real work

Prepare an approved Copilot sign-in, fictional practice material, a course folder, and a simple review log before you bring AI anywhere near customer or company data.

LevelBeginner
Time7–10 minutes
RequiredApproved Copilot access
DeliverableCourse workspace and practice-data rule

A safe setup removes avoidable decisions

New learners often paste the nearest real document because it feels practical. A dedicated practice kit lets you learn attachments, prompts, Pages, app workflows, and review habits without testing policy boundaries.

Account

Use the surface your organization or subscription provides

Record the active identity before each session. A work browser profile can still contain a personal sign-in, and the reverse is also possible.

Material

Practice with synthetic but realistic data

Use invented names, organizations, figures, messages, and decisions. Synthetic data should still contain the ambiguity you need to learn from.

Review

Keep the input, first output, corrections, and final result

A review log turns “Copilot seemed helpful” into evidence about what worked, what failed, and what you changed.

Your minimum setup kit

You do not need every Microsoft 365 app or a paid Copilot add-on. Start with the approved surface you have and a place to save your practice.

ItemRequired nowOptional laterDo not use for practice
Sign-inOne known personal or work/school identityA separate browser profile for another approved identityA shared account or an identity whose ownership is unclear
Copilot surfaceApproved chat or in-app experiencePages, Notebooks, agents, or additional appsA consumer surface for proprietary work information
Source materialFictional notes and documentsOrganization-approved training filesCustomer, employee, financial, medical, legal, regulated, or confidential data
StorageA course folder or notebookA Copilot Page when availableAn externally shared folder with unknown access
Review recordA simple table of task, source, issue, correction, and resultA team prompt-and-evaluation logOnly the final answer with no source or correction history

Create a course workspace

The tool does not matter. Use a local folder, OneDrive folder approved for training, OneNote section, or another place your organization permits.

  1. Create one parent folder. Name it “Copilot course practice” and add the date you started.
  2. Add four subfolders or sections. Use “Sources,” “First outputs,” “Verified outputs,” and “Review log.”
  3. Save the fictional notes from Lesson 00.1. Label them clearly so nobody mistakes them for a real project record.
  4. Create a review log. Add columns for date, task, Copilot surface, source, issue found, correction, and final disposition.
  5. Write the practice-data rule. State what you may use, what you may not use, and who decides when the answer is unclear.
Practice-data rule template
For this course I will use:
- fictional people, companies, messages, meetings, and figures;
- public information that I am allowed to reuse;
- organization-approved training files, when explicitly provided.

I will not use:
- customer, employee, applicant, student, patient, financial, legal, security, credential, regulated, confidential, or proprietary information;
- files whose permissions or ownership I do not understand.

When I am unsure, I will stop and ask: [role or policy owner].

Add a small synthetic practice pack

Copy these scenarios into your Sources folder. They support later lessons without containing real information.

Writing

Northstar Bikes onboarding note

A fictional bike retailer is onboarding 12 store managers to a new returns process. The note must be clear, calm, and under 180 words.

Data

Four-week support table

Invent ticket counts, response times, and satisfaction scores for four weeks. Include one missing value and one visible outlier.

Meetings

Pilot launch notes

Reuse Lesson 00.1’s notes, including the absent owner, missing date, and unresolved security dependency.

Run the pre-session check

It takes less than a minute and prevents the most common account and data-boundary mistakes.

  • I can name the active account and whether it is personal or work/school.
  • I recognize the Copilot surface and its current product label.
  • I know which source I will provide and why I am allowed to use it.
  • The practice file is fictional or explicitly approved for training.
  • I know where the first output and review notes will be saved.
  • I know who to ask when policy, permission, or sensitivity is unclear.

Deliverable and quality check

Your workspace is ready when another learner could understand the boundary without relying on your memory.

Pass

  • The active identity and Copilot surface are recorded.
  • Practice files are clearly marked fictional.
  • The review log preserves first output and correction history.
  • The prohibited-data list is specific.
  • An escalation owner or policy is named.

Revise

  • The setup says only “do not share sensitive information.”
  • Real email or meeting content is used because it is convenient.
  • Personal and organizational accounts are mixed without a record.
  • Only polished final outputs are saved.
  • There is no owner for a policy question.

Knowledge check

Why keep the first output after you correct it?

The first output shows the failure mode. Keeping it lets you compare prompts, corrections, and final quality instead of remembering only the successful result.

Is public information always safe to paste into any Copilot surface?

No. Public availability does not settle copyright, license, confidentiality, organizational policy, or intended-use questions. Confirm that you may reuse it and cite the source when appropriate.

What should you do when you cannot classify a file?

Stop. Do not upload or paste it. Ask the named policy, privacy, security, legal, records, or data owner who can make that decision.

Official Microsoft sources

Verified July 30, 2026.