Jan 31 2021 06:06 PM
Our test lab is a local Active Directory domain hosted on Server 2019 domain controllers managing Windows 10 Pro workstations, all running either Windows 10 1909 or 20H2. Since these are not Enterprise workstations, I've installed Windows Application Guard on a 20H2 workstation according to the instructions at https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-application-g... in Standalone Mode and configured the appropriate group policies, including enabling "Allow files to download and save to the host operating system from Windows Defender Application Guard".
WDAG appears to work in Edge (Chrome) when manually activated. However, downloaded Word documents that I open in Word 2016 are still opened in Protected View and not by WDAG. Thinking that this might be because these are not Enterprise but Pro machines, I configured the same WDAG group policy settings in the local policy and restarted the machine. It didn't work. WDAG does not open downloaded documents in MS Word.
Does WDAG for Office work only on Enterprise machines and not on Pro? Is there some trick that I'm missing? I'll be grateful for any information.
Mar 22 2021 08:57 PM
Solution