28,659 questions
It should work on Windows 11 Pro. Check other requirements here: https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-application-guard/reqs-md-app-guard
Application Guard in enterprise mode on Windows 11 Pro will not work
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(105.60000000000001, 26%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBP%3C/text%3E%3C/svg%3E)
BILL POTHEN
0
Reputation points
I have installed Application Guard. Setup the group settings to enable Enterprise Mode.
Edge does not appear to be affected by it. It does work when I hand selected New Application Guard Window.
The settings seem very straight forward. I have tried several different settings with no change.
I can see that additional entries are in the event log.
Windows for business | Windows Client for IT Pros | User experience | Other
3 answers
Sort by: Most helpful
-
Kapil Arya 8,461 Reputation points MVP Volunteer Moderator2023-02-22T08:34:15.4+00:00 -
BILL POTHEN 0 Reputation points
2023-02-22T11:15:32.19+00:00 I definitely meet the requirements.
I have gone thru the requirements as well as the setup instructions.
It does produce output in the system event log. Most look as expected except for the two that I attached.
Here are the errors that seem to point to something is not working.
I get two of the 7001 errors 1 minute earlier to the two that are attatched.
-
BILL POTHEN 0 Reputation points
2023-02-22T11:20:38.6933333+00:00 I get an event 7011 and 1 minute later I get another 7011 followed by 7046.
7011:
A timeout (30000 milliseconds) was reached while waiting for a transaction response from the hvsics service.
7046:
The following service has repeatedly stopped responding to service control requests: Application Guard Container Service
Contact the service vendor or the system administrator about whether to disable this service until the problem is identified.
You may have to restart the computer in safe mode before you can disable the service.
I have done everything I can think of to resolve 7011.
-
BILL POTHEN 0 Reputation points
2023-02-22T15:37:30.0233333+00:00 I powered my computer off and started it back up. The errors are gone.
I am using Application Guard Internals to test.
the Domains categorized as both work and personal, works.
Enterprise resource domains hosted in the cloud, I cannot get it recognize any domain that is put in. this is my last try "..microsoft.com|.microsoft.com"
http://microsoft.com Returns untrusted.
http://www.microsoft.com Returns untrusted.
I have tried several others sites and one or two dots with out any positive results.
-
BILL POTHEN 0 Reputation points
2023-03-17T17:46:16.1366667+00:00 I started over. In Managed mode 1. Does nothing other than provide the option within Edge. All other programs With option 3, The AG window will send me back to Edge if the domain is trusted. Within Edge it will allow untrusted sites to be accesses. I also experienced a couple of programs (Not Office 360) that no longer worked(.
Sign in to comment -
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 68%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELT%3C/text%3E%3C/svg%3E)
Limitless Technology 44,766 Reputation points2023-02-23T09:27:40.5166667+00:00 Hello,
Application Guard will not automatically start by itself. It’s you who have to decide when to start a secure browsing session with Application Guard.
To start application guard in Edge, click on menu icon at the top right corner of the screen and select the option New Application Guard Window.
This will open a new secure window of the Edge browser that is confirmed by the Application Guard text written in orange color at the top left corner of the browser screen.
Now you can browse the web normally through Edge browser secured with Application Guard. You can also start a private browsing session that too secured with Application Guard.
In the task bar also, you will find a new icon of Edge with a shield on it. Moreover, some features like reading list and favorites cannot be used when you are using Edge browser with Application Guard. Also, browser history, download files and cookies will clear automatically once you log out from your system.
Additionally I can recommend the next official article for Microsoft Edge support on Application Ward to expand the information provided:
--If the reply is helpful, please Upvote and Accept as answer--
-
BILL POTHEN 0 Reputation points
2023-02-24T14:38:41.07+00:00 As you can see, I have Turn on Microsoft Defender Application Guard in Managed Mode.
When I go to a site not listed in the network settings Edge opens a normal browser window.
I also tried turning it on, on another PC running win 11 pro. It also acts as if MDAG is not turned on.
I want to be able to use it in Managed Mode, not Stand-Alone mode.
I have researched all of the articles I can find. This appears to be very strait forward with a limited amount of setup.
I just found this in the event log under WDAG-Service/Operational
A Failure has occurred: HResult = The system cannot find the file specified., File = windows\hvsi\csp\hvsipolicytracking\hvsipolicytracking.cpp, LineNumber = 51, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsicontainerservice.dll, Code = NULL,
A Failure has occurred: HResult = Catastrophic failure, File = windows\hvsi\hvsics\lib\cmcontainer.cpp, LineNumber = 685, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsicontainerservice.dll, Code = NULL,
A Failure has occurred: HResult = Catastrophic failure, File = windows\hvsi\hvsics\lib\cmcontainer.cpp, LineNumber = 1773, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsicontainerservice.dll, Code = NULL,
A Failure has occurred: HResult = Data supplied is of wrong type., File = windows\hvsi\hvsics\dll\hvsicontainermanager.cpp, LineNumber = 548, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsicontainerservice.dll, Code = NULL,
A Failure has occurred: HResult = Data supplied is of wrong type., File = windows\hvsi\hvsics\dll\hvsicontainermanager.cpp, LineNumber = 1056, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsicontainerservice.dll, Code = NULL,
Not sure if this is related or not. If it is Not sure what I could do to fix these errors.
Why would Edge act like AG is not turned on?
Sign in to comment -
-
Limitless Technology 44,766 Reputation points
2023-02-23T09:28:37.5566667+00:00 Double post
-
BILL POTHEN 0 Reputation points
2023-02-23T21:11:58.0033333+00:00 As you can see, I have Turn on Microsoft Defender Application Guard in Managed Mode.
When I go to a site not listed in the network settings Edge opens a normal browser window.
I also tried turning it on, on another PC running win 11 pro. It also acts as if MDAG is not turned on.
I want to be able to use it in Managed Mode, not Stand-Alone mode.
I have researched all of the articles I can find. This appears to be very strait forward with a limited amount of setup.
I just found this in the event log under WDAG-Service/Operational
A Failure has occurred: HResult = The system cannot find the file specified., File = windows\hvsi\csp\hvsipolicytracking\hvsipolicytracking.cpp, LineNumber = 51, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsicontainerservice.dll, Code = NULL,
A Failure has occurred: HResult = Catastrophic failure, File = windows\hvsi\hvsics\lib\cmcontainer.cpp, LineNumber = 685, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsicontainerservice.dll, Code = NULL,
A Failure has occurred: HResult = Catastrophic failure, File = windows\hvsi\hvsics\lib\cmcontainer.cpp, LineNumber = 1773, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsicontainerservice.dll, Code = NULL,
A Failure has occurred: HResult = Data supplied is of wrong type., File = windows\hvsi\hvsics\dll\hvsicontainermanager.cpp, LineNumber = 548, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsicontainerservice.dll, Code = NULL,
A Failure has occurred: HResult = Data supplied is of wrong type., File = windows\hvsi\hvsics\dll\hvsicontainermanager.cpp, LineNumber = 1056, Function = NULL, Message = NULL, CallingContext = NULL, Module = hvsicontainerservice.dll, Code = NULL,
Not sure if this is related or not. If it is Not sure what I could do to fix these errors.
Why would Edge act like AG is not turned on?
Sign in to comment -