Configure Microsoft Defender Application Guard clipboard settings

Policy ID
AppHVSI_ClipboardConfig
Scope
Computer Configuration
Supported on
Microsoft Edge on Windows 10 Enterprise or Windows 10 Education with Microsoft Defender Application Guard in Enterprise mode
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Microsoft Defender Application Guard

Description

This policy setting allows you to decide how the clipboard behaves while in Microsoft Defender Application Guard.

If you enable this setting, you must choose from the following behaviors:

- Disable clipboard functionality completely between the host and Application Guard

- Enable the clipboard to copy content from Application Guard to the host

- Enable the clipboard to copy content from the host to Application Guard.

Note:
We recommend that you don't enable copying from the host to Application Guard. If you enable this functionality, a potentially compromised Application Guard session will have access to the host device’s clipboard and its content.

If you choose to enable copying, you must also choose the type of content that can be copied, by using the content options:

- 1. Allows text copying.

- 2. Allows image copying.

- 3. Allows both text and image copying.

If you disable or don't configure this setting, all clipboard functionality is turned off in Application Guard.

Options

  • Clipboard behavior setting.
    • Block clipboard operations(default)
    • Enable clipboard operation from an isolated session to the host
    • Enable clipboard operation from an host to the isolated session
    • Enable clipboard operation both directions
  • Clipboard content options.

Registry

ComputerHKEY_LOCAL_MACHINE
  • AppHVSIClipboardSettingsREG_DWORD
  • AppHVSIClipboardFileTypeREG_DWORD

Other policies in the same category

View all policies in this category (10)