mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-18 11:53:37 +00:00
Added edition info
This commit is contained in:
@ -13,7 +13,7 @@ ms.date: 08/11/2017
|
||||
# Configure Windows Defender Application Guard policy settings
|
||||
|
||||
**Applies to:**
|
||||
- Windows 10, version 1709
|
||||
- Windows 10 Enterpise edition, version 1709
|
||||
|
||||
Windows Defender Application Guard (Application Guard) works with Group Policy to help you manage your organization's computer settings. By using Group Policy, you can configure a setting once, and then copy it onto many computers. For example, you can set up multiple security settings in a GPO, which is linked to a domain, and then apply all those settings to every computer in the domain.
|
||||
|
||||
|
@ -13,7 +13,7 @@ ms.date: 08/11/2017
|
||||
# Frequently asked questions - Windows Defender Application Guard
|
||||
|
||||
**Applies to:**
|
||||
- Windows 10, version 1709
|
||||
- Windows 10 Enterpise edition, version 1709
|
||||
|
||||
Answering frequently asked questions about Windows Defender Application Guard (Application Guard) features, integration with the Windows operating system, and general configuration.
|
||||
|
||||
|
@ -13,7 +13,7 @@ ms.date: 08/11/2017
|
||||
# Prepare and install Windows Defender Application Guard
|
||||
|
||||
**Applies to:**
|
||||
- Windows 10 Enterprise, version 1709
|
||||
- Windows 10 Enterprise edition, version 1709
|
||||
|
||||
## Prepare to install Windows Defender Application Guard
|
||||
Before you can install and use Windows Defender Application Guard, you must determine which way you intend to use it in your enterprise. You can use Application Guard in either **Standalone** or **Enterprise-managed** mode.
|
||||
|
@ -13,7 +13,7 @@ ms.date: 08/11/2017
|
||||
# System requirements for Windows Defender Application Guard
|
||||
|
||||
**Applies to:**
|
||||
- Windows 10 Enterprise, version 1709
|
||||
- Windows 10 Enterprise edition, version 1709
|
||||
|
||||
The threat landscape is continually evolving. While hackers are busy developing new techniques to breach enterprise networks by compromising workstations, phishing schemes remain one of the top ways to lure employees into social engineering attacks. Windows Defender Application Guard is designed to help prevent old, and newly emerging attacks, to help keep employees productive.
|
||||
|
||||
@ -33,6 +33,6 @@ Your environment needs the following hardware to run Windows Defender Applicatio
|
||||
|
||||
|Software|Description|
|
||||
|--------|-----------|
|
||||
|Operating system|Windows 10 Enterprise, Windows Insider Program (Enterprise edition, Build 16188 or later)|
|
||||
|Operating system|Windows 10 Enterprise edition, version 1709|
|
||||
|Browser|Microsoft Edge and Internet Explorer|
|
||||
|Management system|[Microsoft Intune](https://docs.microsoft.com/en-us/intune/)<br><br>**-OR-**<br><br>[System Center Configuration Manager](https://docs.microsoft.com/en-us/sccm/)<br><br>**-OR-**<br><br>[Group Policy](https://technet.microsoft.com/en-us/library/cc753298(v=ws.11).aspx)<br><br>**-OR-**<br><br>Your current company-wide 3rd party mobile device management (MDM) solution. For info about 3rd party MDM solutions, see the documentation that came with your product.|
|
||||
|
@ -13,7 +13,7 @@ ms.date: 08/11/2017
|
||||
# Testing scenarios using Windows Defender Application Guard in your business or organization
|
||||
|
||||
**Applies to:**
|
||||
- Windows 10, version 1709
|
||||
- Windows 10 Enterpise edition, version 1709
|
||||
|
||||
We've come up with a list of suggested testing scenarios that you can use to test Windows Defender Application Guard (Application Guard) in your organization.
|
||||
|
||||
@ -22,20 +22,18 @@ You can see how an employee would use standalone mode with Application Guard.
|
||||
|
||||
**To test Application Guard in Standalone mode**
|
||||
|
||||
1. Download the latest Windows Insider Program build (15257 or later).
|
||||
1. Install Application Guard, using the [installation](#install-set-up-and-turn-on-application-guard) steps in this guide.
|
||||
|
||||
2. Install Application Guard, using the [installation](#install-set-up-and-turn-on-application-guard) steps in this guide.
|
||||
|
||||
3. Restart the device, start Microsoft Edge, and then click **New Application Guard window** from the menu.
|
||||
2. Restart the device, start Microsoft Edge, and then click **New Application Guard window** from the menu.
|
||||
|
||||

|
||||
|
||||
4. Wait for Application Guard to set up the isolated environment.
|
||||
3. Wait for Application Guard to set up the isolated environment.
|
||||
|
||||
>[!NOTE]
|
||||
>Starting Application Guard too quickly after restarting the device might cause it to take a bit longer to load. However, subsequent starts should occur without any perceivable delays.
|
||||
|
||||
5. Go to an untrusted, but safe URL (for this example, we used msn.com) and view the new Microsoft Edge window, making sure you see the Application Guard visual cues.
|
||||
4. Go to an untrusted, but safe URL (for this example, we used msn.com) and view the new Microsoft Edge window, making sure you see the Application Guard visual cues.
|
||||
|
||||

|
||||
|
||||
@ -43,15 +41,13 @@ You can see how an employee would use standalone mode with Application Guard.
|
||||
How to install, set up, turn on, and configure Application Guard for Enterprise-managed mode.
|
||||
|
||||
### Install, set up, and turn on Application Guard
|
||||
Before you can use Application Guard in enterprise mode, you must install a version of Windows 10 that includes the functionality. Then, you must use Group Policy to set up the required settings.
|
||||
Before you can use Application Guard in enterprise mode, you must install Windows 10 Enterprise edition, version 1709, which includes the functionality. Then, you must use Group Policy to set up the required settings.
|
||||
|
||||
1. Download the latest Windows Insider Program build (15257 or later).
|
||||
1. Install Application Guard, using the [installation](#install-set-up-and-turn-on-application-guard) steps in this guide.
|
||||
|
||||
2. Install Application Guard, using the [installation](#install-set-up-and-turn-on-application-guard) steps in this guide.
|
||||
2. Restart the device and then start Microsoft Edge.
|
||||
|
||||
3. Restart the device and then start Microsoft Edge.
|
||||
|
||||
4. Set up the Network Isolation settings in Group Policy:
|
||||
3. Set up the Network Isolation settings in Group Policy:
|
||||
|
||||
a. Click on the **Windows** icon, type _Group Policy_, and then click **Edit Group Policy**.
|
||||
|
||||
@ -67,22 +63,22 @@ Before you can use Application Guard in enterprise mode, you must install a vers
|
||||
|
||||

|
||||
|
||||
5. Go to the **Administrative Templates\System\Windows Components\Windows Defender Application Guard\Turn on Windows Defender Application Guard in Enterprise Mode** setting.
|
||||
4. Go to the **Administrative Templates\System\Windows Components\Windows Defender Application Guard\Turn on Windows Defender Application Guard in Enterprise Mode** setting.
|
||||
|
||||
6. Click **Enabled**.
|
||||
5. Click **Enabled**.
|
||||
|
||||

|
||||
|
||||
>[!NOTE]
|
||||
>Enabling this setting verifies that all the necessary settings are properly configured on your employee devices, including the network isolation settings set earlier in this scenario.
|
||||
|
||||
7. Start Microsoft Edge and type _www.microsoft.com_.
|
||||
6. Start Microsoft Edge and type _www.microsoft.com_.
|
||||
|
||||
After you submit the URL, Application Guard determines the URL is trusted because it uses the domain you’ve marked as trusted and shows the site directly on the host PC instead of in Application Guard.
|
||||
|
||||

|
||||
|
||||
8. In the same Microsoft Edge browser, type any URL that isn’t part of your trusted or neutral site lists.
|
||||
7. In the same Microsoft Edge browser, type any URL that isn’t part of your trusted or neutral site lists.
|
||||
|
||||
After you submit the URL, Application Guard determines the URL is untrusted and redirects the request to the hardware-isolated environment.
|
||||
|
||||
|
@ -13,7 +13,7 @@ ms.date: 08/11/2017
|
||||
# Windows Defender Application Guard overview
|
||||
|
||||
**Applies to:**
|
||||
- Windows 10, version 1709
|
||||
- Windows 10 Enterpise edition, version 1709
|
||||
|
||||
The threat landscape is continually evolving. While hackers are busy developing new techniques to breach enterprise networks by compromising workstations, phishing schemes remain one of the top ways to lure employees into social engineering attacks.
|
||||
|
||||
|
Reference in New Issue
Block a user