How to Turn On or Off Advanced Graphics in Application Guard for Microsoft Edge in Windows 10


Microsoft has adopted the Chromium open source project in the development of Microsoft Edge on the desktop to create better web compatibility. This new Microsoft Edge runs on the same Chromium web engine as the Google Chrome browser, offering you best in class web compatibility and performance.

Windows Defender Application Guard (Application Guard) is designed to help prevent old and newly emerging attacks to help keep users or employees productive. Using Microsoft's unique hardware isolation approach, Microsoft's goal is to destroy the playbook that attackers use by making current attack methods obsolete.

Designed for Windows 10 and Microsoft Edge, Application Guard helps to isolate enterprise-defined untrusted sites, protecting you or your company while browsing the Internet. As an administrator, you define what is among trusted web sites, cloud resources, and internal networks. Everything not on your list is considered untrusted.

If a user goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated Hyper-V-enabled container, which is separate from the host operating system. This container isolation means that if the untrusted site turns out to be malicious, the host PC is protected, and the attacker can't get to your data. For example, this approach makes the isolated container anonymous, so an attacker can't get to your user's credentials.

Microsoft Edge running in Application Guard provides enterprises the maximum level of protection from malware and zero day attacks against Windows. Windows Defender Application Guard for Microsoft Edge is a lightweight virtual machine that helps isolate potentially malicious website activity from reaching your operating systems, apps, and data.

There is no persistence of any cookies or local storage when an Application Guard window is closed in Microsoft Edge.

Three core features of Windows Defender Application Guard:
  • Isolated Browsing - Windows Defender Application Guard uses the latest virtualization technology to help protect your operating system by creating an isolated environment for your Microsoft Edge session.
  • Help Safeguard your PC - Windows Defender Application Guard starts up every time you visit a non-work-related site to help keep potentially malicious attacks away from your PC.
  • Malware Removal - Any websites you visit, files you download, or settings you change while in this isolated environment are deleted when you sign out of Windows, wiping out any potential malware.

Starting with Windows 10 build 17713, Windows Defender Application Guard introduced a new user interface inside Windows Security to allow you to easily turn on or off the save data, copy and paste, print files, and advanced graphics actions in Application Guard settings. As long as devices meet the minimum requirements, these settings will appear in Windows Security.

The advanced graphics setting allows turning on or off to improve video and graphics performance with Hyper-V virtualization technology while users are browsing in Application Guard for Microsoft Edge.

This tutorial will show you how to turn on or off advanced graphics while browsing in Windows Defender Application Guard for Microsoft Edge for all users in Windows 10 Pro, Windows 10 Education, and Windows 10 Enterprise.

You must be signed in as an administrator to turn on of off advanced graphics in Application Guard for Microsoft Edge.

When users browse in Application Guard for Microsoft Edge, certain actions are disabled by default. You can choose to turn on the advanced graphics action, but be aware that browsing might be less secure.



Contents

  • Option One: Turn On or Off Advanced Graphics in Application Guard for Microsoft Edge in Windows Security
  • Option Two: Turn On or Off Advanced Graphics in Application Guard for Microsoft Edge using a REG file






OPTION ONE

Turn On or Off Advanced Graphics in Application Guard for Microsoft Edge in Windows Security


1 Open Windows Security, and click/tap on the App & browser control icon. (see screenshot below)

Turn On Advanced Graphics in Application Guard for Microsoft Edge-windows_security-1.jpg

2 Click/tap on the Change Application Guard settings link under the Isolated browsing section. (see screenshot below)

Turn On Advanced Graphics in Application Guard for Microsoft Edge-windows_security-2.jpg

3 Turn on or off (default) Advanced graphics for what you want. (see screenshot below)

Turn On Advanced Graphics in Application Guard for Microsoft Edge-wdag_advanced_graphics.png

4 If prompted by UAC, click/tap on Yes to approve.

5 When finished, close Windows Security.

6 Restart the computer to apply.






OPTION TWO

Turn On or Off Advanced Graphics in Application Guard for Microsoft Edge using a REG file


The downloadable .reg files below will modify the DWORD value in the registry key below.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Hvsi

EnableVirtualGPU DWORD

0 = Off
1 = On


1 Do step 2 (on) or step 3 (off) below for what you would like to do.


2 To Turn On Advanced Graphics in Application Guard for Microsoft Edge

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Turn_ON_advanced_graphics_in_Application_Guard_for_Microsoft_Edge.reg

Download


3 To Turn Off Advanced Graphics in Application Guard for Microsoft Edge

This is the default setting.

A) Click/tap on the Download button below to download the file below, and go to step 4 below.

Turn_OFF_advanced_graphics_in_Application_Guard_for_Microsoft_Edge.reg

Download


4 Save the .reg file to your desktop.

5 Double click/tap on the downloaded .reg file to merge it.

6 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

7 Restart the computer to apply.

8 If you like, you can now delete the downloaded .reg file.


That's it,
Shawn