Policy
Prevent users from removing Application Guard protection on files.
Microsoft Office
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10
This policy setting allows you to control whether users can remove Application Guard protection and open a document with full trust in Office. If you enable this policy setting, users can continue to work with Office documents in Application Guard, however, they cannot remove protection and open a document outside Application Guard. If you disable or do not configure this policy settings, Office will by default allow users to remove protection and open a document with full trust. Note: This policy setting only applies to Microsoft 365 Apps for enterprise.
Registry values
How enabled and disabled states update the registry.
| Scope | Registry location | Type | Enabled value | Disabled value | Copy |
|---|---|---|---|---|---|
| User | Path software\policies\microsoft\office\16.0\common\security\applicationguard Value name disabletrustpromotion | REG_DWORD | HKCU 1 | HKCU 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.