Turn on Windows Defender Application Guard in Enterprise Mode

This policy setting enables application isolation through Windows Defender Application Guard (Application Guard).

Application Guard uses Windows Hypervisor to create a virtualized environment for apps that are configured to use virtualization-based security isolation. While in isolation, improper user interactions and app vulnerabilities can't compromise the kernel or any other apps running outside of the virtualized environment.

If you enable this setting, Application Guard is turned on for your organization.


Supported on: At least Windows 10 Enterprise
Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\Microsoft\AppHVSI
Value NameAllowAppHVSI_ProviderSet
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

apphvsi.admx

Administrative Templates (Computers)

Administrative Templates (Users)