Forum Discussion
Windows Defender Application Guard Standalone mode
This feature is puzzling. Why is it touted for Enterpise users? Are you assuming that Enterprise users are the ones who browse dangerous sites the most? Why then this feature is not enabled by default and why it has to be enabled and used this way? Is it hampering browsing in some way, not saving local data, settings, cookies? Then it has a very narrow usage model. Maybe for DoD :D But i'm sure such organizations have other means of blocking their users browsing non-work related sites. It seems that Home users would benefit from such protection the most (i understand that Hyper-V might not be supported on many home PCs, but we live in x64 era already). But it is sold as an added value for Enterprise license, though i don't see much value in it for my organization.
Application Guard feature just like Credential Guard and Device Guard depends on underlying feature called Virtual Secure Mode. Which depends on Hyper-V and is Controlled by Group Policy and all these features are available on Enterprise Edition only. Virtualization extensions might or might not be present on all underlying hardware, though mostly they are present now a days.
Hence the reason for this to be available on Enterprise edition only.
Refer:
https://blogs.windows.com/msedgedev/2016/09/27/application-guard-microsoft-edge/
https://blogs.technet.microsoft.com/ash/2016/03/02/windows-10-device-guard-and-credential-guard-demystified/
Does this that Hyper-V will be removed from Windows 10 Pro in next releases?
No. If you download a Windows Insider build you'll see Hyper-V is in Windows 10 Pro as well.
- Indeed. Even for users who have hardware support for Hyper-V, they may choose not to install it because lots of Android emulator (or I would say, all emulators people commonly used to play and stream Android gameplay) won't work with Hyper-V component installed.
