Policy
Turn on Microsoft Defender Application Guard in Managed Mode
Microsoft Windows
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10
This policy setting enables application isolation through Microsoft Defender Application Guard. Application Guard uses Windows Hypervisor to create a virtualized environment for apps that are configured to use virtualization-based security isolation. While in isolation, improper user interactions and app vulnerabilities can’t compromise the kernel or any other apps running outside of the virtualized environment. If you enable this setting, Application Guard is turned on for your organization.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
| Computer | AppHVSI_AllowAppHVSI_TextBox ID AppHVSI_AllowAppHVSI_TextBox | decimal | Path SOFTWARE\Policies\Microsoft\AppHVSI Value name AllowAppHVSI_ProviderSet Type REG_DWORD | Range: 0 to 3 |