How to Enable or Disable Microsoft Defender Application Guard in Windows 11

ryan yao BDvCewlnbD8 unsplash scaled
ryan yao BDvCewlnbD8 unsplash scaled

This post shows students and new users steps to turn On or Off Microsoft Defender Application Guard in Windows 11. Application Guard uses a unique hardware isolation approach to help prevent old and newly emerging attacks from helping keep your system protected.

Application Guard opens untrusted files in an isolated Hyper-V-enabled container. The isolated Hyper-V container is separate from the host operating system. This helps to contain attacks in isolated environments.

Microsoft Defender Application Guard also works with Microsoft Edge, Microsoft Office app, and browser to help isolate untrusted sites and prevents untrusted Word, PowerPoint, and Excel files from accessing trusted resources.

These protections are built into Windows and work with Microsoft Defender Endpoint on your device and in the cloud. In addition, Microsoft Security includes additional pIn protection such as Controlled folder access, Real-time protection, Tamper protection, ransomware protection, and Phishing protection.

Below is how to turn Windows 11 on or off

How to turn On or Off Microsoft Defender Application Guard in Windows 11

As mentioned above, Application Guard uses a unique hardware isolation approach to help prevent old and newly emerging attacks from helping keep your system protected.

Application Guard functionality is turned off by default. However, quickly install it through the Control Panel, PowerShell, or your mobile device management (MDM) solution.

In Windows 11, click Starts > Settings > Apps > Optional features.

Under Related settings, click More Windows features on the Optional features windows.

On the More Windows Features window, scroll down the list of available features, check the box next to Microsoft Defender Application Guard, and click OK.

Application Guard and its underlying dependencies will be installed.

Alternatively, one can install Application Guard via PowerShell. To do that, open PowerShell as administrator.

Once Windows PowerShell opens with administrator credentials, run the commands below:

Enable-WindowsOptionalFeature -online -FeatureName Windows-Defender-ApplicationGuard

That should install Microsoft Defender Application Guard in Windows 11.

You can use Application Guard in two modes: Standalone and Enterprise. In a Standalone, you

You can use Application Guard in two modes: Standalone and Enterprise. In a Standalone, you must manually start Microsoft Edge in Application Guard while browsing the internet.

You can press the shortcut below to open Microsoft Edge in Application Guard.

CTRL + SHIFT + Q

That should do it!

Conclusion:

This post showed you how to install Microsoft Defender Application Guard in Windows 11. Please use the comment form below if you find any errors above or have something to add.

Posted by
Richard

I love computers; maybe way too much. What I learned I try to share at geekrewind.com.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: