Preparing my Application Guard for Office test lab

Sat, 21 Nov 2020 17:24:13 +0000

Hello everyone, today I wanted to see application guard for office in action. If you are not familiar with application guard for office, I suggest you read the following articles / documentation.

And now let me walk you through the steps to get application guard for office working in your test lab.

Deploy Windows 10 20H1 or 20H2
When running your test client in Hyper-V you have to enable nested virtualization so that we can later enable Application Guard
Next, we turn on the Microsoft Defender Application Guard. Now if your system does not meet the minimum requirements the option is greyed out as shown in the screenshot below. But luckily there is a workaround described here. Once you have added these registry keys, you will be able to enable Application Guard
Now we have to enable Microsoft Defender Application Guard in managed mode, so that it can be used for Microsoft Edge and Office. Open the Group Policy editor and navigate to: Computer Configuration \ Administrative templates \ Windows Components \ Microsoft Defender Application Guard and open the setting: Turn on Microsoft Defender Application Guard in Managed Mode and set the value to 3 If you want to enable Application Guard for Edge and Office or 2 for Office only.
Now that we have Defender Application Guard ready, let us move on to Office. The official documentation mentions Office Beta Channel Build version 2008 16.0.13212 or later, however as per this announcement it should work with the Insider current channel as well. Configure the following group policy settings for Office 365 Apps for Enterprise to enable insider releases:User Configuration \ Administrative Templates \ Microsoft Office 2016 \ miscellaneous \ Show the option for Office Insider

Application-Guard on Anything About IT

Preparing my Application Guard for Office test lab