Policy

Configure Microsoft Defender Application Guard clipboard settings

Microsoft Windows

Back to Microsoft Defender Application GuardBack to main
Configure Microsoft Defender Application Guard clipboard settings
Jump to overview

Policy overview

Key metadata and intent for this policy.

Computer
Category
Windows Components > Microsoft Defender Application Guard
Supported on
Microsoft Edge on Windows 10 Enterprise or Windows 10 Education with Microsoft Defender Application Guard in Enterprise mode

Supported OS tags: Windows10

This policy setting allows you to decide how the clipboard behaves while in Microsoft Defender Application Guard. If you enable this setting, you must choose from the following behaviors: - Disable clipboard functionality completely between the host and Application Guard - Enable the clipboard to copy content from Application Guard to the host - Enable the clipboard to copy content from the host to Application Guard. Note: We recommend that you don't enable copying from the host to Application Guard. If you enable this functionality, a potentially compromised Application Guard session will have access to the host device’s clipboard and its content. If you choose to enable copying, you must also choose the type of content that can be copied, by using the content options: - 1. Allows text copying. - 2. Allows image copying. - 3. Allows both text and image copying. If you disable or don't configure this setting, all clipboard functionality is turned off in Application Guard.

Internal name
AppHVSI_ClipboardConfig
Policy ID
8fe4bad65408
Elements
2

Registry values

How enabled and disabled states update the registry.

No explicit registry values are set for enabled or disabled states.

Policy elements

Inputs and configuration options exposed by this policy.

ScopeElementTypeRegistry mappingConstraints & behaviorCopy
Computer
Clipboard content options.
ID AppHVSIClipboardFileType_AllowedFileType_TextBox
decimal
Path
SOFTWARE\Policies\Microsoft\AppHVSI
Value name
AppHVSIClipboardFileType
Type
REG_DWORD
Range: 1 to 3
Computer
Clipboard behavior setting.
ID AppHVSIClipboardSettings_CopyPasteDirection_DropdownList
enum
Path
SOFTWARE\Policies\Microsoft\AppHVSI
Value name
AppHVSIClipboardSettings
Type
REG_DWORD
Options: Block clipboard operations(default) (0), Enable clipboard operation from an isolated session to the host (1), Enable clipboard operation from an host to the isolated session (2), Enable clipboard operation both directions (3)
Clipboard content options.
Computer · Type decimal
Registry mapping
Path
SOFTWARE\Policies\Microsoft\AppHVSI
Value name
AppHVSIClipboardFileType
Type
REG_DWORD
Details
Range: 1 to 3
Clipboard behavior setting.
Computer · Type enum
Registry mapping
Path
SOFTWARE\Policies\Microsoft\AppHVSI
Value name
AppHVSIClipboardSettings
Type
REG_DWORD
Details
Options: Block clipboard operations(default) (0), Enable clipboard operation from an isolated session to the host (1), Enable clipboard operation from an host to the isolated session (2), Enable clipboard operation both directions (3)