SOLVED
Home

Windows Defender Application Guard incompatible with CWDIllegalInDllSearch registry setting

%3CLINGO-SUB%20id%3D%22lingo-sub-788151%22%20slang%3D%22en-US%22%3EWindows%20Defender%20Application%20Guard%20incompatible%20with%20CWDIllegalInDllSearch%20registry%20setting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-788151%22%20slang%3D%22en-US%22%3E%3CP%3E%3CFONT%20face%3D%22arial%2Chelvetica%2Csans-serif%22%20size%3D%223%22%3EWDAG%20for%20the%20new%20Chromium%20based%20Edge%20does%20not%20work%20when%20the%20value%20%22CWDIllegalInDllSearch%22%20in%26nbsp%3B%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20face%3D%22arial%2Chelvetica%2Csans-serif%22%20size%3D%223%22%3E%22HKLM%5CSYSTEM%5CCurrentControlSet%5CControl%5CSession%20Manager%22%20is%20set%20to%20%22dword%3Affffffff%22.%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20face%3D%22arial%2Chelvetica%2Csans-serif%22%20size%3D%223%22%3EThis%20is%20a%20defense%20in%20depth%20setting%20described%20in%26nbsp%3B%22A%20new%20CWDIllegalInDllSearch%20registry%20entry%20is%20available%20to%20control%20the%20DLL%20search%20path%20algorithm%22%20(KB2264107).%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%3CFONT%20face%3D%22arial%2Chelvetica%2Csans-serif%22%20size%3D%223%22%3EWhen%20this%20entry%20exists%20(reboot%20required)%2C%20the%20menu%20entry%20%22New%20Application%20Guard%20Window%22%20does%20not%20show%20and%20only%20the%20old%20Edge%20WDAG%20works.%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-788261%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Defender%20Application%20Guard%20incompatible%20with%20CWDIllegalInDllSearch%20registry%20setting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-788261%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20on%20Windows%20insider%20fast%20build%2018950%2C%20searched%20through%20my%20entire%20registry%20and%20couldn't%20find%20%22CWDIllegalInDllSearch%22.%3CBR%20%2F%3EI%20have%20Windows%20defender%20application%20guard%20extension%20installed%20on%20the%20new%20Edge%20Canary%2C%20enabled%20it%20in%20Windows%20Defender%20and%20installed%20the%20app%20from%20Microsoft%20Store.%20when%20i%20try%20to%20open%20a%20new%20Application%20guard%20Window%20it%20opens%20the%20New%20Edge%20Canary.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-836970%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Defender%20Application%20Guard%20incompatible%20with%20CWDIllegalInDllSearch%20registry%20setting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-836970%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F342662%22%20target%3D%22_blank%22%3E%40JSp42%3C%2FA%3E%26nbsp%3B-%20Thank%20you%20for%20discovering%20this%20issue!%20Based%20on%20your%20feedback%20we%20have%20taken%20a%20fix%20to%20this%20and%20its%20available%20in%20the%20latest%20canary%20build.%20Please%20let%20us%20know%20if%20you%20still%20see%20this%20issue.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-856632%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Defender%20Application%20Guard%20incompatible%20with%20CWDIllegalInDllSearch%20registry%20setting%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-856632%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F398823%22%20target%3D%22_blank%22%3E%40Arunesh%3C%2FA%3E%26nbsp%3BI%20can%20confirm%20that%20w%2F%20Edge%20Dev%26nbsp%3B78.0.268.3%20the%20issue%20has%20been%20resolved.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESorry%20for%20my%20late%20response%20but%20I%20only%20discovered%20your%20reply%20today.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20your%20help.%3C%2FP%3E%3C%2FLINGO-BODY%3E
JSp42
New Contributor

WDAG for the new Chromium based Edge does not work when the value "CWDIllegalInDllSearch" in 

"HKLM\SYSTEM\CurrentControlSet\Control\Session Manager" is set to "dword:ffffffff".

This is a defense in depth setting described in "A new CWDIllegalInDllSearch registry entry is available to control the DLL search path algorithm" (KB2264107).

When this entry exists (reboot required), the menu entry "New Application Guard Window" does not show and only the old Edge WDAG works.

3 Replies

I'm on Windows insider fast build 18950, searched through my entire registry and couldn't find "CWDIllegalInDllSearch".
I have Windows defender application guard extension installed on the new Edge Canary, enabled it in Windows Defender and installed the app from Microsoft Store. when i try to open a new Application guard Window it opens the New Edge Canary.

Highlighted
Solution

@JSp42 - Thank you for discovering this issue! Based on your feedback we have taken a fix to this and its available in the latest canary build. Please let us know if you still see this issue.

@Arunesh I can confirm that w/ Edge Dev 78.0.268.3 the issue has been resolved.

 

Sorry for my late response but I only discovered your reply today.

 

Thanks for your help.

Related Conversations
flashing a white screen while open new tab
cntvertex in Discussions on
13 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
22 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
28 Replies
PacketMon Components are not loading in WAC 1909
HotCakeX in Windows Admin Center on
2 Replies