Windows Defender Application Guard - Extension Within!

%3CLINGO-SUB%20id%3D%22lingo-sub-863061%22%20slang%3D%22en-US%22%3EWindows%20Defender%20Application%20Guard%20-%20Extension%20Within!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-863061%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20there%2C%3C%2FP%3E%3CP%3Ei've%20try%20to%20install%20a%20Chrome%20extension%20within%20the%20Application%20Guard%20Windows%20and%20got%20this%20message%3A%3C%2FP%3E%3CP%3EOoops%3C%2FP%3E%3CP%3EYour%20organization%20blocks%20XXX%20(extension%20ID%20%22xxxxxxx%22)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20understand%20why%20it's%20there%2C%20but%20not%20all%20extension%20are%20bad.%26nbsp%3B%20For%20exemple%20I%20would%20really%20like%20to%20have%20a%20adblocker%20in%20there.%26nbsp%3B%20Or%20give%20us%20the%20way%20to%20use%20%22%3CSPAN%3EAdd%20Tracking%20Protection%20Lists%22%20like%20on%20IE%20(EasyList).%26nbsp%3B%20Because%20we%20would%20love%20to%20use%20WDAG%20precisely%20for%20site%20with%20a%20lot%20of%20these%20annoyance.%26nbsp%3B%20And%20now%2C%20without%20Adblocker%20inside%20WDAG%2C%20it's%20more%20or%20less%20useless%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EI've%20try%20these%20policies%20to%20install%20the%20extension%20without%20success%3A%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E-Allow%20users%20to%20trust%20files%20that%20open%20in%20Windows%20Defender%20Application%20Guard%3CBR%20%2F%3E-Allow%20files%20to%20download%20and%20save%20to%20the%20host%20operating%20system%20from%20Windows%20Defender%20Application%20Guard%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EOr%20please%2C%20permit%20us%20to%20white%20list%20the%20extension%20with%20the%20Microsoft%20Edge%20Policy%3A%3C%2FP%3E%3CP%3E-Allow%20specific%20extensions%20to%20be%20installed%20%22xxxxxxx%22%3C%2FP%3E%3CP%3E-Control%20which%20extensions%20cannot%20be%20installed%20%22*%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eor%20add%20a%20new%20policy%20like%20%22Allow%20specific%20extensions%20to%20be%20installed%20in%20WDAG%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-863591%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Defender%20Application%20Guard%20-%20Extension%20Within!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-863591%22%20slang%3D%22en-US%22%3E%3CP%3ESince%20WDAG%20is%20kind%20of%20a%20VM%2C%20i%20guess%20installing%20Extension%20within%20gonna%20be%20hard%20because%20they%20gonna%20be%20needed%20inside%20the%20%22VM%20template%22%20used%20to%20create%20these%20instance%20of%20Edge...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESince%2C%20I'm%20looking%20more%20for%20a%20%22security%22%20oriented%20solution%2C%20what%20we%20REALLY%20need%20is%20a%20way%20to%20configure%20the%20easylist%20from%20a%20online%20source%2C%20like%20in%20IE%2C%20within%20the%20browser%20like%20a%20parameter.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20add%20a%204th%20option%20inside%20%22Tracking%20prevention%22%20for%20Chromium%20Edge.%3C%2FP%3E%3CP%3E-%20Basic%3CBR%20%2F%3E-%20Balanced%20(recommended)%3CBR%20%2F%3E-%20Strict%3CBR%20%2F%3E-%20Personalized%20Tracking%20Protection%20List%20(Like%20IE%2011%20%3D%20Manage%20add-ons%5CTracking%20Protection%5CYour%20Personalized%20List%5CSettings)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eand%20the%20whitelist%20with%20%22Allow%20all%20trackers%20on%20site%20you%20choose%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFrom%20this%20%22Personalized%20Tracking%20Protection%20List%22%20option%20you%20got%20the%20%22Get%20a%20tracking%20Protection%20List%20Online%22%20and%20there%20you%20go!%20Build-in%20Adblocker!%20Not%20these%20shady%20extension%20that%20we%20dont%20about!%3C%2FP%3E%3CP%3EEasy!%20Done!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-863604%22%20slang%3D%22en-US%22%3ERE%3A%20Windows%20Defender%20Application%20Guard%20-%20Extension%20Within!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-863604%22%20slang%3D%22en-US%22%3Eand%20using%20list%20like%20this%20one%20%22Stop%20Google%20Tracking%22%20%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Fie%2F2012%2F02%2F20%2Fgoogle-bypassing-user-privacy-settings%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fblogs.msdn.microsoft.com%2Fie%2F2012%2F02%2F20%2Fgoogle-bypassing-user-privacy-settings%2F%3C%2FA%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

Hello there,

i've try to install a Chrome extension within the Application Guard Windows and got this message:

Ooops

Your organization blocks XXX (extension ID "xxxxxxx")

 

I understand why it's there, but not all extension are bad.  For exemple I would really like to have a adblocker in there.  Or give us the way to use "Add Tracking Protection Lists" like on IE (EasyList).  Because we would love to use WDAG precisely for site with a lot of these annoyance.  And now, without Adblocker inside WDAG, it's more or less useless

 

I've try these policies to install the extension without success:

-Allow users to trust files that open in Windows Defender Application Guard
-Allow files to download and save to the host operating system from Windows Defender Application Guard

 

Or please, permit us to white list the extension with the Microsoft Edge Policy:

-Allow specific extensions to be installed "xxxxxxx"

-Control which extensions cannot be installed "*"

 

or add a new policy like "Allow specific extensions to be installed in WDAG"

 

Thanks

2 Replies

Since WDAG is kind of a VM, i guess installing Extension within gonna be hard because they gonna be needed inside the "VM template" used to create these instance of Edge...

 

Since, I'm looking more for a "security" oriented solution, what we REALLY need is a way to configure the easylist from a online source, like in IE, within the browser like a parameter.

 

Just add a 4th option inside "Tracking prevention" for Chromium Edge.

- Basic
- Balanced (recommended)
- Strict
- Personalized Tracking Protection List (Like IE 11 = Manage add-ons\Tracking Protection\Your Personalized List\Settings)

 

and the whitelist with "Allow all trackers on site you choose"

 

From this "Personalized Tracking Protection List" option you got the "Get a tracking Protection List Online" and there you go! Build-in Adblocker! Not these shady extension that we dont about!

Easy! Done!