This policy setting enables application isolation through Microsoft Defender Application Guard.
Application Guard uses Windows Hypervisor to create a virtualized environment for apps that are configured to use virtualization-based security isolation. While in isolation, improper user interactions and app vulnerabilities can't compromise the kernel or any other apps running outside of the virtualized environment.
If you enable this setting, Application Guard is turned on for your organization.
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | SOFTWARE\Policies\Microsoft\AppHVSI |
Value Name | AllowAppHVSI_ProviderSet |
Value Type | REG_DWORD |
Default Value | 1 |
Min Value | 0 |
Max Value | 3 |
Options: 0. Disable Microsoft Defender Application Guard 1. Enable Microsoft Defender Application Guard for Microsoft Edge ONLY 2. Enable Microsoft Defender Application Guard for isolated Windows environments ONLY 3. Enable Microsoft Defender Application Guard for Microsoft Edge AND isolated Windows environments