diff --git a/windows/security/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md b/windows/security/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md index 4e9d84ab90..2e7c06d339 100644 --- a/windows/security/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md +++ b/windows/security/threat-protection/windows-defender-application-guard/test-scenarios-wd-app-guard.md @@ -12,11 +12,12 @@ ms.date: 10/19/2017 # Testing scenarios using Windows Defender Application Guard in your business or organization -**Applies to:** -- Windows 10 Enterpise edition, version 1709 - We've come up with a list of suggested testing scenarios that you can use to test Windows Defender Application Guard (Application Guard) in your organization. +**Applies to:** +- Windows 10 Enterpise edition, version 1709 or higher +- Windows 10 Professional edition, version 1803 + ## Application Guard in standalone mode You can see how an employee would use standalone mode with Application Guard. @@ -97,6 +98,10 @@ Application Guard provides the following default behavior for your employees: You have the option to change each of these settings to work with your enterprise from within Group Policy. +**Applies to:** +- Windows 10 Enterpise edition, version 1709 or higher +- Windows 10 Professional edition, version 1803 + **To change the copy and paste options** 1. Go to the **Administrative Templates\System\Windows Components\Windows Defender Application Guard\Configure Windows Defender Application Guard clipboard settings**. @@ -152,3 +157,34 @@ You have the option to change each of these settings to work with your enterpris >[!NOTE] >If you don't allow or turn off data persistence, restarting a device or logging in and out of the isolated container triggers a recycle event that discards all generated data, including session cookies, Favorites, and so on, removing the data from Application Guard. If you turn on data persistence, all employee-generated artifacts are preserved across container recycle events. However, these artifacts only exist in the isolated container and aren’t shared with the host PC. This data persists after restarts and even through build-to-build upgrades of Windows 10.

If you turn on data persistence, but later decide to stop supporting it for your employees, you can use our Windows-provided utility to reset the container and to discard any personal data.

**To reset the container:**
  1. Open a command-line program and navigate to Windows/System32.
  2. Type `wdagtool.exe cleanup`.
    The container environment is reset, retaining only the employee-generated data.
  3. Type `wdagtool.exe cleanup RESET_PERSISTENCE_LAYER`.
    The container environment is reset, including discarding all employee-generated data.
+ +**Applies to:** +- Windows 10 Enterpise edition, version 1803 +- Windows 10 Professional edition, version 1803 + +**To change the download options** +1. Go to the **Administrative Templates\System\Windows Components\Windows Defender Application Guard\Allow files to download and save to the host operating system from Windows Defender Application Guard** setting. + +2. Click **Enabled**. + + ![Group Policy editor Download options](images/appguard-gp-download.png) + +3. Log out and back on to your device, opening Microsoft Edge in Application Guard again. + +4. Download a file from Windows Defender Application Guard. + +5. Check to see the file has been downloaded into This PC > Downloads > Untrusted files. + +**To change the download options** +1. Go to the **Administrative Templates\System\Windows Components\Windows Defender Application Guard\Allow hardware-accelerated rendering for Windows Defender Application Guard** setting. + +2. Click **Enabled**. + + ![Group Policy editor hardware acceleration options](images/appguard-gp-vgpu.png) + +3. Contact Microsoft for further information to fully enable this setting. + +4. Once you have fully enabled this experimental feature, open Microsoft Edge and browse to an untrusted, but safe URL with video, 3D, or other graphics-intensive content. The website opens in an isolated session. + +5. Assess the visual experience and battery performance. +