Announcing WDAG in PRO SKU

Microsoft

Windows Defender Application Guard provides unprecedented protection against targeted threats using Microsoft's industry leading Hyper-V virtualization technology. In our recent Fall Creators update, we introduced this new layer of defense for the Microsoft Edge browser to businesses running the Enterprise version of Windows. We also provided an unmanaged “standalone mode” for interested users to give the technology a try. Many enthusiastic Insiders did try out this new experience only to find standalone mode was only available on the Enterprise version of Windows.

 

“Make this feature available to Pro version users.”

 

“Please bring Windows Defender Application Guard to Windows 10 Professional. We need this!”

 

Well, you spoke, and we listened. We are bringing this new defense-in-depth protection to Windows 10 Professional in RS4. Now, like Windows 10 Enterprise users, Windows 10 Pro Users can navigate the Internet in Application Guard knowing their systems are safe from common web based attacks. It is available now to our awesome Windows Insider community to give it a try and provide feedback.

 

Here is a recent talk on Window Defender Application Guard if you'd like to understand this feature in some more detail. Below are some steps you can take to enable this cutting edge experience on the latest Windows Insider Preview build.

 

How to setup and configure your system for Windows Defender Application Guard

 

Requirements:

  • Windows 10 Professional, Build: 17053 (or later)
  • en-us only for the current builds; full localized support will arrive soon
  • PC must support virtualization; Hyper-V (some older PCs may not support Hyper-V or have this feature disabled in BIOS)
  • Windows Defender Application Guard is Off by default, it must be enabled manually or by policy

 

You can turn on Windows Defender Application Guard using the Turn Windows features on or off dialog. Select the checkbox as shown below for Windows Defender Application Guard.

 

                  image.png

 

Click OK and then restart your computer. 

 

How to Use Windows Defender Application Guard

1. Open Edge and click on the menu in the top right corner

2. Click on "New Application Guard window" as shown below
 

            image.png

                                       Windows Defender Application Guard

3. You will see the following splash screen after which a new instance of Edge will open with Windows Defender Application Guard enabled.

 

                image.png

4. The new instance of Edge will open with Windows Defender Application Guard enabled

 

      image.png

 

We encourage Windows Insiders to use Windows Defender Application Guard with Microsoft Edge to browse the Web. Your feedback, suggestions, and telemetry will help us to improve this feature.

 

Feedback Hub link: Launch Windows Feedback for Microsoft Edge\Application Guard

 

FAQ

 

1. What are the system requirements for running Application Guard on Windows Professional?

The system requirements are the same as for running Application Guard on Windows Enterprise systems. See our system requirements documentation for more information. 

 

2. Why don't I see my Favorites in the Application Guard Edge session?
To keep your Application Guard Edge session secure and isolated from the host PC, favorites from the Application Guard Edge session are not copied back to your host PC.  See below for enabling this feature.

 

3.How can I save favorites in my Application Guard Edge Session? 

Users can configure features including Persistence, Printing and Clipboard through the registry. To configure:

 

Navigate to the registry editor using “regedit.”

  • Caution: misconfiguring registry settings could have adverse effects on the device

 

        1. Under “HKLM:\software\microsoft\HVSI” users can configure the following registry keys. 

 

                          image.png

  

      2. Changing to values to a “1” from a “0” enables the given feature. Changing values back to “0” disables the feature.

 

4. Can I download documents from the Application Guard Edge session onto my host PC?

This functionality is planned for a future release.

 

5. Can I run third party applications (other browsers) in Application Guard?

No. Application Guard is designed to protect users from malicious software running in the container. To ensure malicious applications cannot run in the container, Microsoft limits the applications able to run in the container.

 

6. How can I configure Application Guard to automatically determine which sites should open in the container?

Application Guard for Windows 10 Professional is only designed to be used in stand alone mode. The ability to deploy enforcement of trusted vs. untrusted websites is only available in the Enterprise version.

 

 

9 Replies

Will this be coming to Windows 10 Education as well?

Please bring the Feature to Education Edition

Sorry, this feature most likely will only be offered in the Professional and Higher Versions of Windows 10.  Unfortunately, the reason for this is due to the cost barrier.  Please Contact Microsoft in writing for further information at Microsoft Corporation One Microsoft Way Redmond, WA 98052-6399 USA

Dan,

 

Thank you for replying. My assumption was that Education Edition is a Higher Version then Pro. Based off the features available per the Wiki https://en.wikipedia.org/wiki/Windows_10_editions . I will reach out to our TAM and escalate.

 

Travis

Based on the Wiki Article provided - "EducationWindows 10 Education is distributed through Academic Volume Licensing. Initially, it was reported to have the same feature set as Windows 10 Enterprise.[1][2][3] As of version 1709, however, this edition has less features. See § Comparison chart for details"

 

Yes, please escalate the issue as needed.

 

Dan Weiser

I have avoid protection using firefox in unbuntu window on Win10 desktop. Install the Linux Subsystem on Windows 10. Instal Xming server. Run bash window. Get ubuntu firefox. Not suported, but no problems.

I think you are trying to say that you are using Mozilla Firefox in a Ubuntu Window on a Win10 desktop.  Is the Windows 10 desktop a current supported model or is this a preview release?  Please enlighten us to version model of Windows 10 desktop?  Are you running Ubuntu (also are interested in version number) in a Virtual Machine within a Windows 10 Environment and then proceeding to load Xming Server while running in a Bash window on top of Mozilla Firefox and you are not getting any current support because this is an unsupported configuration (meaning what you are doing is not in the current Microsoft regimen) but it is working as a test model for you.  Is this correct and can you explain further what your expected outcome from this testing will be or is this just for personal interest?

Windows 10 pro 1709

https://sourceforge.net/projects/xming/

vidas@VMPC3:/mnt/c/Users/vidas.makauskas$ uname -a
Linux VMPC3 4.4.0-43-Microsoft #1-Microsoft Wed Dec 31 14:42:53 PST 2014 x86_64 x86_64 x86_64 GNU/Linux

Firefox Quantum 57.0 (64-bit)
Mozilla Firefox for Ubuntu
canonical - 1.0

PS

I've install linux subsystem because I need pan free package read from news server. Before i've use outlook express on win XP and sepparate computer with opensuse linux installed. So linux subsystem is worthy for me.

Nice.  Thanks for sharing.  I will have to check this out as time allows but I am too busy now with fixing computers and networks.  In addition, I have my next computer certification test coming up in the middle of February.