Microsoft Defender Application Guard protects your networks and data from malicious applications running in your web browser, but you must install and activate it first.
In a previous article, we noted that many of the security features listed as absolute requirements for a successful Windows 11 installation are already available as options in Windows 10, you just have to turn them on manually. If you are wondering if your current Windows 10 PC will run Windows 11, activating these security protocols will give you the answers you seek.
Activation for TPM 2.0 and HVCI were explained before, but now we will look at the activation procedures for Microsoft Defender Application Guard in Windows 10. MDAG uses virtualization-based technology to help safeguard your systems from malicious and criminal websites that you visit with your enabled web browsers like Edge, Chrome and Firefox.
SEE: Checklist: Securing Windows 10 systems (TechRepublic Premium)
How to activate Microsoft Defender Application Guard
Microsoft Defender Application Guard works by creating an isolated memory instance of your browser. These Hyper-V containers prevent malicious scripts or other malware attacks from reaching the inner workings of your Windows 10 operating system protecting your networks and your data. MDAG also works with applications like Word and Excel running as part of a Microsoft 365 productivity environment.
Unfortunately, for Windows 10 Home users, MDAG is included with Windows 10 Professional, Enterprise and Educational versions by default. MDAG is part of Windows Features for those versions, so we will have to call up the Control Panel.
The easiest way to get to the screen we need is to type “windows features” into the search box on your Windows 10 desktop. Be sure to select the Turn Windows Features On or Off item from the search results. You should see a dialog window that looks like Figure A.