How to Install Microsoft Defender Application Guard on Windows 11
Microsoft Defender Application Guard installs a secure, isolated browser environment on Windows 11.
This feature acts like a special sandbox for Microsoft Edge. It helps keep your computer safe from dangerous websites and files by running them in a separate virtual space.
While Microsoft has marked Application Guard as deprecated starting with Windows 11, version 24H2, you can still add it through Windows Features.
Application Guard shields your personal information and system by containing any threats in this isolated session, stopping them from reaching your main computer.
Install Microsoft Defender Application Guard via Windows Security by navigating to App & browser control and enabling Isolated browsing. Alternatively, use PowerShell with the command Dism /online /Enable-Feature /FeatureName:”Windows-Defender-ApplicationGuard”. This requires administrative privileges.
How to install or remove it using the Windows Security app
Turning Microsoft Defender Application Guard on or off is done through the Windows Security app. Open Windows Security by typing ‘Windows Security’ in your Start menu. Then, click ‘App & browser control’ and locate the ‘Isolated browsing’ section to find the install or uninstall option.
- Open the Windows Security app. You can find this by clicking your Start menu and typing “Windows Security.”
- Click on the App & browser control section.
- Under the Isolated browsing area, click the link to install or uninstall the feature.
- A new window will appear. Check the box next to Microsoft Defender Application Guard to install it. If you want to remove it, uncheck the box .
Windows will download the files needed. If you are uninstalling, you will be asked to restart your computer to finish the process.
How to install or remove it using PowerShell
If you’re comfortable with text commands, you can install or remove Microsoft Defender Application Guard using PowerShell. To install it, open PowerShell and enter the command Dism /online /Enable-Feature /FeatureName:”Windows-Defender-ApplicationGuard”. For removal, use the command Dism /online /Disable-Feature /FeatureName:”Windows-Defender-ApplicationGuard”.
Install the feature by running this command:
Dism /online /Enable-Feature /FeatureName:"Windows-Defender-ApplicationGuard"Remove the feature using this command:
Dism /online /Disable-Feature /FeatureName:"Windows-Defender-ApplicationGuard"If the computer asks if you want to restart, type Y and press Enter.
Troubleshooting and Verification
After installing Microsoft Defender Application Guard, verify it’s working by checking the Windows Features list or attempting to open a new Application Guard window.
Summary
Microsoft Defender Application Guard offers extra security by isolating your web browsing. However, this feature is being phased out. Microsoft has deprecated Application Guard, and it will not receive new feature updates. Plans exist for its removal in future Windows versions.
Is Microsoft Defender Application Guard being deprecated?
Does Application Guard work in IE mode?
Yes, Application Guard can be configured to work with Internet Explorer mode in Microsoft Edge. This allows organizations to isolate legacy web applications that require IE mode while maintaining a secure container environment, protecting the host system from potential threats found on older, less secure websites.
Can I download files from the container to the host?
Files downloaded within the Microsoft Defender Application Guard container remain separate from your main device by default. You can set rules to permit or stop file downloads from the container to your host device. Admins often use Group Policy or Intune to manage these rules, preventing bad files from leaving the secure container.
What is Microsoft Defender application Guard?
For Microsoft Office, Application Guard helps prevents untrusted Word, PowerPoint, and Excel files from accessing trusted resources. Application Guard opens untrusted files in an isolated Hyper-V-enabled container. The isolated Hyper-V container is separate from the host operating system.
Is Microsoft Defender application guard missing 🪟 Windows 11?
Microsoft made this decision to streamline its security offerings and focus on more advanced protective measures. As of Windows 11, version 24H2 (released October 2024), MDAG is no longer available. The browser extensions and associated Windows Store apps were subsequently removed after May 2024.
Was this guide helpful?
About the Author
Richard
Tech Writer, IT Professional
Richard, a writer for Geek Rewind, is a tech enthusiast who loves breaking down complex IT topics into simple, easy-to-understand ideas. With years of hands-on experience in system administration and enterprise IT operations, he’s developed a knack for offering practical tips and solutions. Richard aims to make technology more accessible and actionable. He's deeply committed to the Geek Rewind community, always ready to answer questions and engage in discussions.
[…] you install and enable the Microsoft Defender Application Guard for Edge, specific actions such as access to the camera and microphone, file printing, and copying and […]