This post shows students and new users steps to turn On or Off Microsoft Defender Application Guard in Windows 11. Application Guard uses unique hardware isolation approach to help prevent old and newly emerging attacks to help keep your system protected.
Application Guard opens untrusted files in an isolated Hyper-V-enabled container. The isolated Hyper-V container is separate from the host operating system. During this helps to contain attacks in isolated environments.
Microsoft Defender Application Guard also works with Microsoft Edge, Microsoft Office app and browser to help isolate untrusted sites and prevents untrusted Word, PowerPoint and Excel files from accessing trusted resources.
These protections are built into Windows and it works with Microsoft Defender Endpoint on your device and in the cloud. Protection such as Controlled folder access, Real-time protection, Tamper protection and Ransomware protection, Phishing protection are included with Microsoft Security.
Below is how to enable or disable in Windows 11
How to turn On or Off Microsoft Defender Application Guard in Windows 11
As mentioned above, Application Guard uses unique hardware isolation approach to help prevent old and newly emerging attacks to help keep your system protected.
Application Guard functionality is turned off by default. However, you can quickly install it on your devices through the Control Panel, PowerShell, or your mobile device management (MDM) solution.
In Windows 11, click Starts > Settings > Apps > Optional features.
On the Optional features windows, under Related settings, click More Windows features.
On the More Windows Features window, scroll down the list of available features and check box next to Microsoft Defender Application Guard, then click OK.
Application Guard and its underlying dependencies will be installed.
Alternatively, one can install Application Guard via PowerShell. To do that, open PowerShell as administrator.
Once Windows PowerShell opens with administrator credentials, run the commands below:
Enable-WindowsOptionalFeature -online -FeatureName Windows-Defender-ApplicationGuard
That should install Microsoft Defender Application Guard in Windows 11.
You can use Application Guard in two modes: Standalone and Enterprise. In a Standalone more, you
You can use Application Guard in two modes: Standalone and Enterprise. In a Standalone more, you must manually start Microsoft Edge in Application Guard while browsing the internet.
You can press the shortcut below to open Microsoft Edge in Application Guard.
CTRL + SHIFT + Q
That should do it!
Conclusion:
This post showed you how to install Microsoft Defender Application Guard in Windows 11. If you find any error above or have something to add, please use the comment form below.
