How to Enable Microsoft Defender Application Guard for Edge

What Causes This?

Microsoft Defender Application Guard for Edge only works when the right Windows edition, virtualization features, and optional Windows components are enabled. If hardware virtualization is turned off in BIOS/UEFI, Hyper-V-related features are missing, or your PC is running an unsupported edition of Windows, Application Guard will not turn on. In some cases, company policies or incomplete Windows updates can also block it from working properly.

Common Symptoms

• The Microsoft Defender Application Guard option is missing in Windows Features
• Edge does not show an option to open a site in Application Guard
• You see errors saying virtualization or Hyper-V is required
• Application Guard opens briefly, then fails or closes
• The feature appears enabled, but isolated browsing never starts

How to Fix It Manually

1. Check that your Windows edition supports Application Guard

   • Press Windows + I to open Settings.
   • Go to System > About.
   • Under Windows specifications, check your edition.
   • Application Guard is generally available on supported Pro, Enterprise, and Education editions. If you are using Home, the feature may not be available.

2. Make sure hardware virtualization is enabled

   • Press Ctrl + Shift + Esc to open Task Manager.
   • Click the Performance tab, then select CPU.
   • Look for Virtualization in the lower-right area.
   • If it says Disabled, restart your PC and enter BIOS/UEFI settings.
   • Enable Intel VT-x, Intel Virtualization Technology, AMD-V, or a similarly named setting, then save changes and restart.

3. Turn on the required Windows features

   • Press Windows + S, type windows features, and open Turn Windows features on or off.
   • Check Microsoft Defender Application Guard.
   • Also make sure required virtualization components are enabled if available, such as:
     • Hyper-V
     • Virtual Machine Platform
     • Windows Hypervisor Platform
   • Click OK and let Windows install the components.
   • Restart your PC when prompted.

4. Update Windows fully

   • Open Settings > Windows Update.
   • Click Check for updates.
   • Install all pending updates, including optional feature-related updates if offered.
   • Restart your PC after updates finish.

5. Enable Application Guard in Edge

   • Open Microsoft Edge.
   • Type edge://settings in the address bar and press Enter.
   • Use the settings search box to look for Application Guard if your version exposes the option.
   • On managed work PCs, this may be controlled by your organization, so the option may be locked or hidden.

6. Test that it works

   • Open Edge and look for the option to open an untrusted site in Application Guard.
   • When it launches correctly, Edge should open a separate isolated browsing window.
   • If it still fails, restart once more and recheck Windows Features to confirm the component stayed enabled.

7. Check for policy restrictions if you’re on a work PC

   • Press Windows + R, type gpedit.msc, and press Enter.
   • Go to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Application Guard.
   • Review any settings that may disable or restrict the feature.
   • If your device is managed by IT, you may need your administrator to allow it.

Fix It Automatically with Kudu

Kudu can help verify whether the Windows features, virtualization settings, and supporting components needed for Application Guard are properly configured. Instead of checking each requirement manually, Kudu can quickly detect common setup problems and help you fix them faster.

Download Kudu Free →