Prevent users from removing Application Guard protection on files.
- Policy ID
- L_TurnOffTrustPromotionForDocumentsInApplicationGuard
- Scope
- User Configuration
- Supported on
- At least Windows Server 2016, Windows 10
- Source
- Microsoft 365 Apps / Office Administrative Templates (version 5568.1000)
- Category
- Microsoft Office 2016 › Security Settings › Trust Center › Application Guard
Description
This policy setting allows you to control whether users can remove Application Guard protection and open a document with full trust in Office.
If you enable this policy setting, users can continue to work with Office documents in Application Guard, however, they cannot remove protection and open a document outside Application Guard.
If you disable or do not configure this policy settings, Office will by default allow users to remove protection and open a document with full trust.
Note: This policy setting only applies to Microsoft 365 Apps for enterprise.
Registry
UserHKEY_CURRENT_USER
- disabletrustpromotionREG_DWORD