How to Enable Windows Defender Application Guard? [5 Ways] - MiniTool

Enhanced Windows 10/11 security: Five ways to enable Microsoft Defender Application Guard

Microsoft Defender Application Guard (MDAG) prevents potentially risky files from accessing trusted system resources on Windows 10/11. This article will introduce five ways to enable MDAG.

The role of MDAG

MDAG protects your network and data from malicious applications, especially those running in a browser, by opening untrusted documents in an isolated environment through hardware virtualization. It protects your system from malware in isolated containers in standalone and automated modes.

MDAG is used in conjunction with Group Policy to help manage your organization's computer settings. Group Policy allows you to configure settings at once and then copy them to multiple computers.

Supported operating systems:

• Windows 10 Enterprise Edition, Version 1709 and later
• Windows 10 Professional Edition, Version 1803 and later
• Windows 11 and later

Five ways to enable MDAG

Before using MDAG, you need to enable it on your Windows system. Here are five methods:

Method 1: Through Windows functions

Step 1: Enter "Windows Features" in the search box to open the "Enable or Close Windows Features" window.

Step 2: Find the "Microsoft Defender Application Guard" check box and select it. Then, click OK to save the changes.

Method 2: Through the Windows Security Center

Step 1: Press Windows I key to open the Settings application.

Step 2: Click Update & Security > Windows Security Center > Open Windows Security Center.

Step 3: Go to the “Apps and Browser Controls” section. Under the Quarantine Browsing section, click the Install Microsoft Defender Application Guard link.

Method 3: Through PowerShell

Step 1: Enter PowerShell in the search box and select Run as administrator.

Step 2: Type the following command and press Enter :

Enable-WindowsOptionalFeature -Online -FeatureName Windows-Defender-ApplicationGuard

Method 4: Through the local group policy editor

Step 1: Enter Group Policy in the search box, and then select Edit Group Policy from the Start menu list.

Step 2: Go to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Application Guard.

Step 3: Find the option "Enable Microsoft Defender Application Guard in Managed Mode". Then, double-click it to select Enabled.

Step 4: Now you can go to Options and change it to 2 or 3.

Method 5: Pass the command prompt

Step 1: Enter PowerShell in the search box and select Run as administrator.

Step 2: Type the following command and press Enter :

Dism /online /Enable-Feature /FeatureName:”Windows-Defender-ApplicationGuard”

Conclusion

This article provides five ways to enable or disable Microsoft Defender Application Guard, and you can choose one of them as you like. Hope this article helps you.

The above is the detailed content of How to Enable Windows Defender Application Guard? [5 Ways] - MiniTool. For more information, please follow other related articles on the PHP Chinese website!