Microsoft Defender Application Guard prevents potentially risky files from accessing trusted system resources on Windows 10/11. This post from MiniTool provides 5 ways for you to enable Windows Defender Application Guard.

Windows Defender Application Guard

Microsoft Defender Application Guard protects your network and data from malicious applications running in your web browser. It opens untrusted documents in an isolated environment through hardware virtualization. It protects your system from malware in an isolated container in standalone and automated mode.

Microsoft Defender Application Guard works with Group Policy to help you manage your organization’s computer settings. By using Group Policy, you can configure settings once and then replicate them on multiple computers.

Tips:

Tip: VM and VDI environments do not support Microsoft Defender Application Guard.

Windows Defender Application Guard is available on the following operating systems:

  • Windows 10 Enterprise edition, version 1709 and later
  • Windows 10 Pro edition, version 1803 and later
  • Windows 11 and later

How to Enable Windows Defender Application Guard

Before using Windows Defender Application Guard, you need to enable it from your Windows. Here are 5 ways for you.

Way 1: Via Windows Features

Step 1: Type Windows Features in the Search box to open the Turn Windows Features on or off window.

Step 2: Find the Microsoft Defender Application Guard box and check it. Then, click OK to save the changes.

check the Microsoft Defender Application Guard box

Way 2: Via Windows Security

Step 1: Press the Windows + I keys together to open the Settings application.

Step 2: Click Update & Security > Windows Security > Open Windows Security.

Step 3: Go to the App & browser control part. Under the Isolated browsing part, click the Install Microsoft Defender Application Guard link.

click the Install Microsoft Defender Application Guard link

Way 3: Via PowerShell

Step 1: Type PowerShell in the Search box. Then, choose Run as administrator.

Step 2: Type the following command and press the Enter key.

Enable-WindowsOptionalFeature -Online -FeatureName Windows-Defender-ApplicationGuard

Way 4: Via Local Group Policy Editor

Step 1: Type group policy in the Search box and then select Edit group policy from the start menu list.

Step 2: Go to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Application Guard.

Step 3: Find the Turn on Microsoft Defender Application Guard in Managed Mode option. Then, double-click it to choose Enabled.

enable Microsoft Defender Application Guard

Step 4: You can now go to Options and change it to 2 or 3.

Way 5: Via Command Prompt

Step 1: Type PowerShell in the Search box. Then, choose Run as administrator.

Step 2: Type the following command and press the Enter key.

Dism /online /Enable-Feature /FeatureName:”Windows-Defender-ApplicationGuard”

Tips:

Tip: Whether using Microsoft Defender Application Guard or not, it’s recommended to back up your important data regularly to protect it since virus attacks or malware attacks may cause your data lose. To do that, you can try the free backup software – MiniTool ShaodwMaker. It can back up files, folders, systems, and disks.

MiniTool ShadowMaker TrialClick to Download100%Clean & Safe

Final Words

How to enable or disable Microsoft Defender Application Guard? This post provides 5 ways and you can choose one of them based on your needs. I hope that this post can be useful to you.

  • linkedin
  • reddit