Turn on Microsoft Defender Application Guard in Managed Mode
- Policy ID
- AppHVSI_AllowAppHVSIConfig
- Scope
- Computer Configuration
- Supported on
- Windows 10 Enterprise, Windows 10 Education, or later
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- Windows Components › Microsoft Defender Application Guard
Description
This policy setting enables application isolation through Microsoft Defender Application Guard.
Application Guard uses Windows Hypervisor to create a virtualized environment for apps that are configured to use virtualization-based security isolation. While in isolation, improper user interactions and app vulnerabilities can’t compromise the kernel or any other apps running outside of the virtualized environment.
If you enable this setting, Application Guard is turned on for your organization.
Options
Registry
ComputerHKEY_LOCAL_MACHINE
- AllowAppHVSI_ProviderSetREG_DWORD