Allow hardware-accelerated rendering for Microsoft Defender Application Guard

Policy ID
AppHVSI_AllowVirtualGPU
Scope
Computer Configuration
Supported on
Microsoft Edge on Windows 10 Enterprise or Windows 10 Education with Microsoft Defender Application Guard in Enterprise mode
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Microsoft Defender Application Guard

Description

This policy setting determines whether Microsoft Defender Application Guard renders graphics using hardware or software acceleration.

If you enable this setting, Microsoft Defender Application Guard uses Hyper-V to access supported, high-security rendering graphics hardware (GPUs). These GPUs improve rendering performance and battery life while using Microsoft Defender Application Guard, particularly for video playback and other graphics-intensive use cases. If you enable this setting without connecting any high-security rendering graphics hardware, Microsoft Defender Application Guard will automatically revert to software-based (CPU) rendering.

Note:
Be aware that enabling this setting with potentially compromised graphics devices or drivers might pose a risk to the host device.

If you disable or don’t configure this setting, Microsoft Defender Application Guard uses software-based (CPU) rendering and won’t load any third-party graphics drivers or interact with any connected graphics hardware.

Registry

ComputerHKEY_LOCAL_MACHINE
  • AllowVirtualGPUREG_DWORD

Other policies in the same category

View all policies in this category (10)