Windows 10: Turn On or Off Save Data in Application Guard for Microsoft Edge

Zizlialk · Nov 15, 2015

How to: Turn On or Off Save Data in Application Guard for Microsoft Edge

How to Turn On or Off Save Data in Application Guard for Microsoft Edge in Windows 10

Microsoft Edge is a new web browser that is available across the Windows 10 device family. It is designed for Windows 10 to be faster, safer, and compatible with the modern Web.

Microsoft Edge running in Application Guard provides the maximum level of protection from malware and zero day attacks against Windows. Windows Defender Application Guard for Microsoft Edge is a lightweight virtual machine that helps isolate potentially malicious website activity from reaching your operating systems, apps, and data.

There is no persistence of any cookies or local storage when an Application Guard window is closed in Microsoft Edge.

Three core features of Windows Defender Application Guard:

Isolated Browsing - Windows Defender Application Guard uses the latest virtualization technology to help protect your operating system by creating an isolated environment for your Microsoft Edge session.

Help Safeguard your PC - Windows Defender Application Guard starts up every time you visit a non-work-related site to help keep potentially malicious attacks away from your PC.

Malware Removal - Any websites you visit, files you download, or settings you change while in this isolated environment are deleted when you sign out of Windows, wiping out any potential malware.

Starting with advanced graphics actions in Application Guard settings. As long as devices meet the minimum requirements, these settings will appear in Windows Security.

The save data setting allows turning on or off to keep any data users save while browsing in Application Guard in Microsoft Edge.

For more details about Application Guard, see:

Windows Defender Application Guard (Windows 10) | Microsoft Docs

Windows Defender Application Guard inside Windows Security App - Microsoft Tech Community

Windows Defender Application Guard Standalone mode - Microsoft Tech Community

This tutorial will show you how to turn on or off save data while browsing in Windows Defender Application Guard for Microsoft Edge for all users in Windows 10 Pro and Windows 10 Enterprise.

You must be signed in as an administrator to turn on of off save data in Application Guard for Microsoft Edge.

*Warning When users browse in Application Guard for Microsoft Edge, certain actions are disabled by default. You can choose to turn on the save data action, but be aware that browsing might be less secure.

CONTENTS:

Option One: Turn On or Off Save Data in Application Guard for Microsoft Edge in Windows Security

Option Two: Turn On or Off Save Data in Application Guard for Microsoft Edge using a REG file

OPTION ONE [/i] Turn On or Off Save Data in Application Guard for Microsoft Edge in Windows Security
1. Open Windows Security, and click/tap on the App & browser control icon. (see screenshot below)

2. Click/tap on the Change Application Guard settings link under the Isolated browsing section. (see screenshot below)

3. Turn on or off (default) Save data for what you want. (see screenshot below)

4. If prompted by UAC, click/tap on Yes to approve.

5. When finished, close Windows Security.

6. Restart the computer to apply.

OPTION TWO [/i] Turn On or Off Save Data in Application Guard for Microsoft Edge using a REG file

*note The downloadable .reg files below will modify the DWORD value in the registry key below.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Hvsi

EnablePersistence DWORD

0 = Off
1 = On

1. Do step 2 (on) or step 3 (off) below for what you would like to do.

2. To Turn On Save Data in Application Guard for Microsoft Edge
A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Turn_ON_save_data_in_Application_Guard_for_Microsoft_Edge.reg

Download

3. To Turn Off Save Data in Application Guard for Microsoft Edge
*note This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Turn_OFF_save_data_in_Application_Guard_for_Microsoft_Edge.reg

Download
4. Save the .reg file to your desktop.

5. Double click/tap on the downloaded .reg file to merge it.

6. When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7. Restart the computer to apply.

8. If you like, you can now delete the downloaded .reg file.

That's it,
Shawn

Related Tutorials

How to Turn On or Off Windows Defender Application Guard for Microsoft Edge in Windows 10

How to Open a New Application Guard Window in Microsoft Edge in Windows 10

Enable Microsoft Edge Data Persistence with Windows Defender Application Guard in Windows 10

Enable Download to Host from Windows Defender Application Guard Microsoft Edge session in Windows 10

How to Turn On or Off Copy and Paste in Application Guard for Microsoft Edge in Windows 10

How to Turn On or Off Printing in Application Guard for Microsoft Edge in Windows 10

How to Turn On or Off Camera and Microphone in Application Guard for Microsoft Edge in Windows 10

How to Turn On or Off Advanced Graphics in Application Guard for Microsoft Edge in Windows 10

Tweet

— Twitter API (@user) View on Twitter
Click to expand...

:)

ddelo · Oct 27, 2019

Windows Defender Application Guard?

Shawn, has already done a great job on that:

*Arrow Turn On or Off Windows Defender Application Guard in Windows 10 | Tutorials

*Arrow Open New Application Guard Window in Microsoft Edge | Tutorials

*Arrow Turn On or Off Save Data in Application Guard for Microsoft Edge | Tutorials

The test results, from someone used it:
Turn On or Off Windows Defender Application Guard in Windows 10 - Page 2 - | Tutorials

Steve C · Oct 27, 2019

Windows Defender Application Guard?

Shawn, has already done a great job on that:

*Arrow Turn On or Off Windows Defender Application Guard in Windows 10 | Tutorials

*Arrow Open New Application Guard Window in Microsoft Edge | Tutorials

*Arrow Turn On or Off Save Data in Application Guard for Microsoft Edge | Tutorials

The test results, from someone used it:
Turn On or Off Windows Defender Application Guard in Windows 10 - Page 2 - | Tutorials
Click to expand...

Thanks - it turns out the forum search results were blocked by my security software!

Brink · Oct 27, 2019

Introducing Windows Defender Application Guard for Microsoft Edge

We’re determined to make Microsoft Edge the safest and most secure browser. Over the past two years, we have been continuously innovating, and we’re proud of the progress we’ve made. This is reflected by Microsoft Edge having the fewest vulnerabilities of any major browser on Windows since our release last year.

Browser vulnerabilities (as of September 2016) for Microsoft Edge, Chrome, and Firefox (per the National Vulnerability Database) since Microsoft Edge was released.

While no modern browser—or any complex application—is free of vulnerabilities, the majority of the vulnerabilities for Microsoft Edge have been responsibly reported by professional security researchers who work with the Microsoft Security Response Center (MSRC) and the Microsoft Edge team to ensure customers are protected well before any attacker might use these vulnerabilities in the wild. Even better, there is no evidence that any vulnerabilities have been exploited in the wild as zero-day attacks.

However, many businesses worldwide have come under increasing threat of targeted attacks, where attackers are crafting specialized attacks against a particular business, attempting to take control of corporate networks and data. For the most security-conscience businesses, we are introducing a new layer of defense-in-depth protection: Windows Defender Application Guard for Windows 10 Enterprise. Application Guard provides unprecedented protection against targeted threats using Microsoft’s Hyper-V virtualization technology.

McP8ZGAInwI

Understanding targeted attacks against large Enterprises

The threat landscape has changed significantly in recent years. Today, over 90% of attacks use a hyperlink to initiate the attack to steal credentials, install malware, or exploit vulnerabilities.

This is damaging not only to the business attacked, but also to the thousands, if not millions of users whose accounts and personal data may be stolen. Highly motivated and persistent attackers will often start with a social engineering trick: creating a well-crafted and personal email to known employees of the company. This email, which will often appear to be from a legitimate authority in the company, may ask the employee to click a link to read a supposedly important document. Unfortunately, that link is to a specially crafted malicious web site that may use a previously undisclosed vulnerability to install malware on the user’s machine. Once established on that single computer, the attackers can then steal credentials and start to probe the rest of the network for other vulnerable machines, repeating the process on other computers until they achieve their objective, whether that is stealing data, intellectual property, or disrupting the business.

Breaking the attacker playbook

We’re taking a systematic approach to disrupting these attackers by providing our customers with the tools they need to defend against these vectors of attack. Application Guard is designed to stop attackers from establishing a foothold on the local machine or from expanding out into the rest of the corporate network.

By using our industry leading virtualization technology, potential threats are not only isolated from the network and system, but will be completely removed when the container is closed.

Digging deeper into Application Guard

Application Guard leverages virtualization technology born in the Microsoft Cloud to accomplish this disruption.

When a user browses to a trusted web site, for example an internal accounting system web application, Microsoft Edge operates as it does today. It has access to local storage, can authenticate the user to internal sites with corporate credentials, standard cookies work, the user can save files to the local machine, and in general Windows just works. This mode, outlined in blue in the chart below, is known as the Host version of Windows.

Application Guard isolates untrusted sites in a new instance of Windows at the hardware layer.

However, when an employee browses to a site that is not recognized or trusted by the network administrator, Application Guard steps in to isolate the potential threat. As shown in the mode outlined in red above, Application Guard creates a new instance of Windows at the hardware layer, with an entirely separate copy of the kernel and the minimum Windows Platform Services required to run Microsoft Edge. The underlying hardware enforces that this separate copy of Windows has no access to the user’s normal operating environment.

Application Guard’s enforcement includes completely blocking access to memory, local storage, other installed applications, corporate network endpoints, or any other resources of interest to the attacker. This separate copy of Windows has no access to any credentials, including domain credentials, that may be stored in the permanent credential store.

Most of the time, even untrusted sites are not malicious and perfectly safe to visit, and the user just expects them to work. This isolated environment allows these sites to function essentially as they would if they were running on the host version of Windows. In this case Application Guard does provide the essential features that users would expect to work, even when browsing untrusted sites, such as being able to copy and paste with the Windows clipboard, and being able to print content from those web sites to their work printer. This allows the user to still be productive even while the host is being protected by Application Guard. The enterprise administrator has control over this functionality using Microsoft management tools and policy, and can choose what they are comfortable with based on their own risk assessment.

Defense-in-depth isolation for enterprises

To improve on the security offered by purely software based sandboxes, Microsoft worked with several enterprise and government customers on a hardware based isolation approach to address these concerns. With Application Guard, Microsoft Edge protects your enterprise from advanced attacks that can infiltrate your network and devices via the Internet, creating a safer, worry-free browsing experience for customers.

But what happens when the untrusted site is actually part of an attacker’s malicious plan? Let’s revisit the attack described above. An attacker sends a well-crafted email to an innocent employee of the company enticing them to visit a link on a site under the attacker’s control. The innocent user, not noticing anything suspicious about the mail, clicks on the link to an untrusted location. In order to proactively keep the user and enterprise resources safe, Application Guard coordinates with Microsoft Edge to open that site in a temporary and isolated copy of Windows. In this case, even if the attacker’s code is successful in attempting to exploit the browser, the attacker finds their code running in a clean environment with no interesting data, no access to any user credentials, and no access to other endpoints on the corporate network. The attack is completely disrupted. As soon as the user is done, whether or not they are even aware of the attack having taken place, this temporary container is thrown away, and any malware is discarded along with it. There is no way for the attacker to persist on that local machine, and even a compromised browser instance has no foothold to mount further attacks against the company’s network. After deletion, a fresh new container is created for future browsing sessions.

Web developers and Application Guard

The good news for web developers is that they do not need to do anything different with their site code – Microsoft Edge renders sites in Application Guard fundamentally the same way it does in the host version of Windows. There is no need to detect when Microsoft Edge is running in this mode, nor any need to account for behavior differences. Since this temporary container is destroyed when the user is done, there is no persistence of any cookies or local storage when the user is finished.

We’re committed keeping Enterprise users and data safe and secure

Our mission at Microsoft is to empower every person and every organization on the planet to achieve more. With Windows Defender Application Guard, enterprise users can take advantage of the vast power of Internet sites and services while still protecting corporate and personal data. This capability makes Microsoft Edge the most secure browser for the Enterprise.

― John Hazen, Principal Program Manager, Microsoft Edge
― Chas Jeffries, Principal Program Manager, Application Guard
Click to expand...

Source: Introducing Windows Defender Application Guard for Microsoft Edge | Microsoft Edge Dev Blog

Brink · Oct 27, 2019

Windows Defender Application Guard extensions for Chrome and Firefox

The hardware-based isolation technology on Windows 10 that allows Microsoft Edge to isolate browser-based attacks is now available as a browser extension for Google Chrome and Mozilla Firefox.

We introduced the container technology in 2017. Since then, we have been evolving the technology and engaging with customers to understand how hardware-based isolation can best help solve their security concerns. We know that many of our customers depend on multi-browser environments to allow enterprise apps to meet various compatibility requirements and enable productivity. And while modern browsers are continuously working to mitigate vulnerabilities, there are still exposures across these complex engines that can lead to irreversible and costly damages.

To provide customers with a comprehensive solution to isolate potential browser-based attacks, we have designed and developed Windows Defender Application Guard extensions, now generally available, to allow customers to integrate hardware-based isolation with Google Chrome and Mozilla Firefox.

How it works

The extensions for Google Chrome and Mozilla Firefox automatically redirect untrusted navigations to Windows Defender Application Guard for Microsoft Edge. The extension relies on a native application that we’ve built to support the communication between the browser and the device’s Application Guard settings.

When users navigate to a site, the extension checks the URL against a list of enterprise sites defined by enterprise administrators. If the site is determined to be untrusted, the user is redirected to an isolated Microsoft Edge session. In the isolated Microsoft Edge session, the user can freely navigate to any site that has not been explicitly defined as enterprise-trusted by their organization without any risk to the rest of system. With our upcoming dynamic switching capability, if the user tries to go to an enterprise site while in an isolated Microsoft Edge session, the user is taken back to the default browser.

To configure the Application Guard extension under managed mode, enterprise administrators can follow these recommended steps:

Ensure devices meet requirements.

Windows Defender Application Guard.
[*]Define the network isolation settings to ensure a set of enterprise sites is in place.
[*]Install the new Windows Defender Application Guard companion application from the Microsoft Store.
[*]Install the extension for Google Chrome or Mozilla Firefox browsers provided by Microsoft.
[*]Restart the device.

Intuitive user experience

We designed the user interface to be transparent to users about Windows Defender Application Guard being installed on their devices and what it does. We want to ensure that users are fully aware that their untrusted navigations will be isolated and why.

When users initially open Google Chrome or Mozilla Firefox after the extension is deployed and configured properly, they will see a Windows Defender Application Guard landing page.

If there are any problems with the configuration, users will get instructions for resolving any configuration errors.

Users can initiate an Application Guard session without entering a URL or clicking on a link by clicking the extension icon on the menu bar of the browser.

Commitment to keep enterprise users and data safe

Hardware-based isolation is one of the innovations that enhance platform security on Windows 10. It is a critical component of the attack surface reduction capabilities in Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) and the broader unified security in Microsoft Threat Protection. With the new Application Guard extension for Google Chrome and Mozilla Firefox, customers can extend the security benefits of isolation in their environments and further reduce attack surface. Customers can confidently navigate the expansive internet with protection for enterprise and personal data.

The Windows Defender Application Guard extensions for Google Chrome and Mozilla Firefox are now available for Windows 10 Professional, Enterprise, and Education SKUs, version 1803 and later with latest updates.

Rona Song
Windows platform security team

Click to expand...

Source: https://www.microsoft.com/security/b...sed-isolation/

Brink · Oct 27, 2019

Windows Defender Application Guard extensions for Chrome and Firefox

The hardware-based isolation technology on Windows 10 that allows Microsoft Edge to isolate browser-based attacks is now available as a browser extension for Google Chrome and Mozilla Firefox.

We introduced the container technology in 2017. Since then, we have been evolving the technology and engaging with customers to understand how hardware-based isolation can best help solve their security concerns. We know that many of our customers depend on multi-browser environments to allow enterprise apps to meet various compatibility requirements and enable productivity. And while modern browsers are continuously working to mitigate vulnerabilities, there are still exposures across these complex engines that can lead to irreversible and costly damages.

To provide customers with a comprehensive solution to isolate potential browser-based attacks, we have designed and developed Windows Defender Application Guard extensions, now generally available, to allow customers to integrate hardware-based isolation with Google Chrome and Mozilla Firefox.

How it works

The extensions for Google Chrome and Mozilla Firefox automatically redirect untrusted navigations to Windows Defender Application Guard for Microsoft Edge. The extension relies on a native application that we’ve built to support the communication between the browser and the device’s Application Guard settings.

When users navigate to a site, the extension checks the URL against a list of enterprise sites defined by enterprise administrators. If the site is determined to be untrusted, the user is redirected to an isolated Microsoft Edge session. In the isolated Microsoft Edge session, the user can freely navigate to any site that has not been explicitly defined as enterprise-trusted by their organization without any risk to the rest of system. With our upcoming dynamic switching capability, if the user tries to go to an enterprise site while in an isolated Microsoft Edge session, the user is taken back to the default browser.

To configure the Application Guard extension under managed mode, enterprise administrators can follow these recommended steps:

Ensure devices meet requirements.

Windows Defender Application Guard.
[*]Define the network isolation settings to ensure a set of enterprise sites is in place.
[*]Install the new Windows Defender Application Guard companion application from the Microsoft Store.
[*]Install the extension for Google Chrome or Mozilla Firefox browsers provided by Microsoft.
[*]Restart the device.

Intuitive user experience

We designed the user interface to be transparent to users about Windows Defender Application Guard being installed on their devices and what it does. We want to ensure that users are fully aware that their untrusted navigations will be isolated and why.

When users initially open Google Chrome or Mozilla Firefox after the extension is deployed and configured properly, they will see a Windows Defender Application Guard landing page.

If there are any problems with the configuration, users will get instructions for resolving any configuration errors.

Users can initiate an Application Guard session without entering a URL or clicking on a link by clicking the extension icon on the menu bar of the browser.

Commitment to keep enterprise users and data safe

Hardware-based isolation is one of the innovations that enhance platform security on Windows 10. It is a critical component of the attack surface reduction capabilities in Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) and the broader unified security in Microsoft Threat Protection. With the new Application Guard extension for Google Chrome and Mozilla Firefox, customers can extend the security benefits of isolation in their environments and further reduce attack surface. Customers can confidently navigate the expansive internet with protection for enterprise and personal data.

The Windows Defender Application Guard extensions for Google Chrome and Mozilla Firefox are now available for Windows 10 Professional, Enterprise, and Education SKUs, version 1803 and later with latest updates.

Rona Song
Windows platform security team

Click to expand...

Source: https://www.microsoft.com/security/b...sed-isolation/

Windows 10: Turn On or Off Save Data in Application Guard for Microsoft Edge

Turn On or Off Save Data in Application Guard for Microsoft Edge

Turn On or Off Save Data in Application Guard for Microsoft Edge

Turn On or Off Save Data in Application Guard for Microsoft Edge

Turn On or Off Save Data in Application Guard for Microsoft Edge - Similar Threads - Turn Off Save

Turn off Credential Guard of Device Guard

Turn On or Off Camera and Mic in Application Guard for Microsoft Edge

Turn On Advanced Graphics in Application Guard for Microsoft Edge

Turn On or Off Printing in Application Guard for Microsoft Edge

Turn On or Off Copy and Paste in Application Guard for Microsoft Edge

Enable Data Persistence for Microsoft Edge in Application Guard

Turn On or Off Download Save Prompt in Microsoft Edge

Open New Application Guard Window in Microsoft Edge

Turn On or Off Offer to Save Passwords in Microsoft Edge