Configure Microsoft Defender Application Guard clipboard settings

This policy setting allows you to decide how the clipboard behaves while in Microsoft Defender Application Guard.

If you enable this setting, you must choose from the following behaviors:

- Disable clipboard functionality completely between the host and Application Guard

- Enable the clipboard to copy content from Application Guard to the host

- Enable the clipboard to copy content from the host to Application Guard.

Note:
We recommend that you don't enable copying from the host to Application Guard. If you enable this functionality, a potentially compromised Application Guard session will have access to the host device's clipboard and its content.

If you choose to enable copying, you must also choose the type of content that can be copied, by using the content options:

- 1. Allows text copying.

- 2. Allows image copying.

- 3. Allows both text and image copying.

If you disable or don't configure this setting, all clipboard functionality is turned off in Application Guard.

Clipboard behavior setting.

0. Block clipboard operations(default)
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	SOFTWARE\Policies\Microsoft\AppHVSI
   Value Name	AppHVSIClipboardSettings
   Value Type	REG_DWORD
   Value	0

1. Enable clipboard operation from an isolated session to the host
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	SOFTWARE\Policies\Microsoft\AppHVSI
   Value Name	AppHVSIClipboardSettings
   Value Type	REG_DWORD
   Value	1

2. Enable clipboard operation from an host to the isolated session
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	SOFTWARE\Policies\Microsoft\AppHVSI
   Value Name	AppHVSIClipboardSettings
   Value Type	REG_DWORD
   Value	2

3. Enable clipboard operation both directions
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	SOFTWARE\Policies\Microsoft\AppHVSI
   Value Name	AppHVSIClipboardSettings
   Value Type	REG_DWORD
   Value	3

Clipboard content options.

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\AppHVSI
Value Name	AppHVSIClipboardFileType
Value Type	REG_DWORD
Default Value	1
Min Value	1
Max Value	3