Prevent users from removing Application Guard protection on files.
Jump to overview

Policy overview

Key metadata and intent for this policy.

User
Category
Microsoft Office 2016 > Security Settings > Trust Center > Application Guard
Supported on
Windows 10

Supported OS tags: Windows10

This policy setting allows you to control whether users can remove Application Guard protection and open a document with full trust in Office. If you enable this policy setting, users can continue to work with Office documents in Application Guard, however, they cannot remove protection and open a document outside Application Guard. If you disable or do not configure this policy settings, Office will by default allow users to remove protection and open a document with full trust. Note: This policy setting only applies to Microsoft 365 Apps for enterprise.

Internal name
L_TurnOffTrustPromotionForDocumentsInApplicationGuard
Policy ID
632409dbc599
Elements
0

Registry values

How enabled and disabled states update the registry.

ScopeRegistry locationTypeEnabled valueDisabled valueCopy
User
Path
software\policies\microsoft\office\16.0\common\security\applicationguard
Value name
disabletrustpromotion
REG_DWORD
HKCU
1
HKCU
0
Registry location
Type REG_DWORD · User
Path
software\policies\microsoft\office\16.0\common\security\applicationguard
Value name
disabletrustpromotion
Hive
HKCU
Enabled value
1
Disabled value
0

Policy elements

Inputs and configuration options exposed by this policy.

This policy has no additional user input fields.