Configure Microsoft Defender Application Guard clipboard settings

This policy setting allows you to decide how the clipboard behaves while in Microsoft Defender Application Guard.

If you enable this setting, you must choose from the following behaviors:

- Disable clipboard functionality completely between the host and Application Guard

- Enable the clipboard to copy content from Application Guard to the host

- Enable the clipboard to copy content from the host to Application Guard.

Note:
We recommend that you don't enable copying from the host to Application Guard. If you enable this functionality, a potentially compromised Application Guard session will have access to the host device's clipboard and its content.

If you choose to enable copying, you must also choose the type of content that can be copied, by using the content options:

- 1. Allows text copying.

- 2. Allows image copying.

- 3. Allows both text and image copying.

If you disable or don't configure this setting, all clipboard functionality is turned off in Application Guard.

Supported on: Windows 10 Enterprise, Windows 10 Education, or later

Clipboard behavior setting.


  1. Block clipboard operations(default)
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Microsoft\AppHVSI
    Value NameAppHVSIClipboardSettings
    Value TypeREG_DWORD
    Value0
  2. Enable clipboard operation from an isolated session to the host
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Microsoft\AppHVSI
    Value NameAppHVSIClipboardSettings
    Value TypeREG_DWORD
    Value1
  3. Enable clipboard operation from an host to the isolated session
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Microsoft\AppHVSI
    Value NameAppHVSIClipboardSettings
    Value TypeREG_DWORD
    Value2
  4. Enable clipboard operation both directions
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSOFTWARE\Policies\Microsoft\AppHVSI
    Value NameAppHVSIClipboardSettings
    Value TypeREG_DWORD
    Value3

Clipboard content options.

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSOFTWARE\Policies\Microsoft\AppHVSI
Value NameAppHVSIClipboardFileType
Value TypeREG_DWORD
Default Value1
Min Value1
Max Value3

apphvsi.admx

Administrative Templates (Computers)

Administrative Templates (Users)