Application Guard
8 TopicsDefender Application Guard issues
I have a new Surface pro 7 running Windows 10 Enterprise, all patched and updated. The machine is Azure AD joined and managed by Intune on a M365E5 license. Every time I try and access ANY website in Edge WDAG launches and fails! So, I have two issues: 1. Why does Windows Defender Application Guard launch for every web site? 2. Why does it crash So the error from the browser after the crash is: WDAG Report - Container: Error: 0x80070013, Ext error: 0x00000001; RDP: Error: 0x00000000, Ext error: 0x00000000 Location: 0x00000000 If I look at Event viewer | Applications and Services | Microsoft | Windows | WDAG-Manager | Operational - I see: A Failure has occurred: HResult = Unspecified error, File = windows\hvsi\hvsimgr\manager\isolatedapplauncher.cpp, LineNumber = 376, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsimgr.exe, Code = NULL and A Failure has occurred: HResult = The media is write protected., File = windows\hvsi\hvsimgr\container\hvsicontainer.cpp, LineNumber = 769, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsimgr.exe, Code = NULL also C:\WINDOWS\system32>wdagtool.exe cleanup RESET_PERSISTENCE_LAYER Terminating HvsiMgr.exe HvsiMgr.exe process not found Performing cleanup and restarting the container * [WDAGTool] - Failed to reset the container. - HRESULT: 80070013 * [WDAGTool] - The hvsi cleanup tool has failed. - HRESULT: 80070013 A. I have tried enabling and disabling Hyper-V and WDAG on the device. They are all on now B. I have disabled and re-enabled WDAG using PowerShell C. I have run a system file scan with no errors Suggestions?? Thanks RobertSolved18KViews0likes6Comments[FIXED] Edge insider Canary Not working anymore. opens all websites in WDAG Application Guard Window
UPDATE: Fixed in Edge insider Version 79.0.294.0 (Official build) canary (64-bit) I just updated my Edge insider Canary to Version 79.0.292.0 (Official build) canary (64-bit) and After that, when I type in something in the omnibox or click on any bookmark, the browser launches the Windows Defender Application Guard window and attempts to open that websites in there. I said attempt because It tries and fails with this error: I'm on Windows 10 fast ring build 18990. tried restarting computer and disabling all extensions but still no luck. whatever this last update had triggered this problem. so right now Edge insider canary is literally dead and I'm posting this with Edge classic. Elliot Kirk anyone else experiencing this?12KViews4likes31CommentsApplication Guard in Edge and Web Filtering
Hi, just in the process of testing Application Guard for Edge. I have whitelisted some sites namely M365 related ones and BBC Etc. These open in a standard Edge session, going to any other site opens in Application Guard session. So that’s as intended. However any sites we currently have blocked via Web Filtering in ATP are shifted to Application Guard session as not whitelisted, but bypass the web content filtering so the blocked sites are no longer blocked. Is there any way around this? How can we apply the web content filtering to the Application Guard session? Thanks NeilApplication Guard window uses the wrong theme - Edge insider
Both the normal and Windows Defender application guard window are set to use system theme (set to dark) but WDAG mode still uses the white theme. this issue wasn't there previously and both modes used to load the correct theme. Version 80.0.320.0 (Official build) canary (64-bit) Windows 10 build 19013.11021.9KViews0likes3CommentsIdentify network traffic originating from App Guard containers at the proxy level
Microsoft Edge Version 91.0.834.0 (Official build) canary (64-bit) The newly added flag for this feature: edge://flags/#edge-wdag-traffic-identification If enabled, Application Guard traffic will be tagged with a X-MS-ApplicationGuard-Initiated header – Windows By the way, if any user or developer is reading this, can you help me understand how exactly we should monitor WDAG connections? There are some difficulties I've been trying to solve in the past few hours.1.9KViews0likes1CommentMicrosoft Defender Application Guard mode doesn't respect search engine preferences
Edge insider Canary Version 80.0.355.0 (Official build) canary (64-bit) in the settings the search engine is set to Google but Application Guard Window uses the default Bing. it needs to use the same preferences.671Views0likes0CommentsApplication Guard Closing Browser
Hi All, I am implementing WDAG in my organization. I am testing with the MS Edge browser. After configuring the "Network Isolation" settings, every time I browse to an "untrusted" website, my current/non-WDAG browser closes and the WDAG browser instance opens. Is there a setting that keeps the current/non-WDAG browser open when the WDAG browser instance opens? Thanks!501Views0likes0Comments