Tidligere kendt som Office 365 Advanced Threat Protection , Microsoft Defender Application Guard for Office forhindrer potentielt risikable filer i at få adgang til pålidelige systemressourcer. Det åbner upålidelige dokumenter i et isoleret miljø med hardwarevirtualisering.

Microsoft Defender Application Guard for Office beskytter dit system mod ondsindet software i denne isolerede containersing-standalone og automatiserede tilstande. I den automatiserede tilstand, AKA Enterprise Management Mode , vil administratoren definere nogle pålidelige websteder.

Ethvert dokument, der stammer fra de definerede domæner, åbnes normalt på din computer. I mellemtiden lancerer Application Guard filer, der stammer fra websteder uden for disse definerede betroede websteder i det virtuelle miljø.

Microsoft Defender Application Guard for Office (Application Guard for Office) helps prevent untrusted files from accessing trusted resources, keeping your enterprise safe from new and emerging attacks. This article walks admins through setting up devices for a preview of Application Guard for Office. It provides information about system requirements and installation steps to enable Application Guard for Office on a device, says Microsoft.

BEMÆRK:^{(NOTE: )} For at aktivere Application Guard for Office skal du først opdatere dit system med den kumulative månedlige sikkerhedsopdatering til Windows 10 KB4571756 .

Aktiver eller deaktiver Microsoft Defender Application Guard for Office

Nu hvor du har et overblik over Microsoft Defender Application Guard til Windows , viser dette afsnit dig, hvordan du aktiverer og deaktiverer det på din Windows -computer. Vi vil undersøge følgende:

1. Aktiver eller deaktiver Application Guard for Office i Windows-funktioner^{(Windows Features)} .
2. Aktiver eller deaktiver Application Guard for Office ved hjælp af PowerShell .
3. Slå Microsoft Defender Application Guard til i gruppepolitik for administreret tilstand .^{(Managed Mode)}
4. Dobbelttjek, om Application Guard for Office er aktiveret og fungerer.

De første to løsninger er alternative måder at aktivere eller deaktivere Application Guard for Office . Den tredje del skal udføres efter at have fulgt en af ​​løsningerne. Og endelig vil du se, hvordan du bekræfter, at Application Guard for Office er aktiveret og fungerer.

1] Aktiver^(Enable) eller deaktiver Application Guard for Office i Windows -funktioner

 

Højreklik^{(Right-click)} på knappen Start , og vælg Kør^{(Run )} for at åbne dialogboksen Kør. Indtast  appwiz.cpl i dialogboksen Kør^(Run) , og klik på knappen  OK .

Klik på  linket Slå Windows^{(Turn Windows features on or off)} -funktioner til eller fra i panelet til venstre i vinduet Programmer^(Programs) og funktioner .^(Features)

Find  Microsoft Defender Application Guard  fra listen på Windows^{(Windows Features)} -funktionsskærmen, og marker afkrydsningsfeltet ud for denne mulighed for at aktivere den. Tryk på  OK-  knappen.

Når du har aktiveret Microsoft Defender Application Guard , skal du genstarte din maskine. For at deaktivere Microsoft Defender Application Guard skal du blot fjerne markeringen af ​​indstillingen på skærmen Windows-funktioner^{(Windows Features)} og genstarte din computer.

2] Aktiver^(Enable) eller deaktiver Application Guard for Office ved hjælp af PowerShell

Du kan også aktivere Microsoft Defender Application Guard for Office ved hjælp af PowerShell . For at åbne PowerShell som administrator skal du højreklikke på Start - knappen og vælge  Windows PowerShell (Admin) .

Kopier og indsæt følgende kommando i PowerShell- vinduet for at aktivere Windows Defender Application Guard , og tryk på ENTER- tasten:

Enable-WindowsOptionalFeature -online -FeatureName Windows-Defender-ApplicationGuard

Når du kører ovenstående kommando, ville du have aktiveret Application Guard for Office . Genstart din computer efter dette for at afslutte processen.

For at deaktivere Application Guard for Office skal du indtaste følgende kommando:

Disable-WindowsOptionalFeature -online -FeatureName Windows-Defender-ApplicationGuard

3] Slå ^(Turn)Microsoft Defender Application Guard til i gruppepolitik for administreret tilstand^{(Managed Mode)}

De to muligheder ovenfor er måder at aktivere eller deaktivere Application Guard for Office . Efter at have gennemført en af ​​de to ovenstående metoder, skal du nu slå funktionen til i gruppepolitikken for administreret tilstand .^{(Managed Mode)}

For at gøre dette skal du gå til  Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Application Guard .

Her skal du ændre værdien under  Indstillinger^(Options) til  2  eller  3 . Klik på knappen  OK for at gemme dine indstillinger og lukke vinduet. Genstart din computer efter dette.

4] Dobbelttjek,^{(Double-check)} om Application Guard for Office er aktiveret og fungerer

Når du har aktiveret Microsoft Defender Application Guard for Office , får du ingen bekræftelse på, at den virker. Du vil måske bekræfte, at du har aktiveret det, og at det fungerer korrekt.

Før du går videre til at dobbelttjekke, at du har aktiveret Application Guard for Office , skal du åbne en Microsoft Office -app ( Word , PowerPoint , Excel osv.) på en computer, der har politikker implementeret, og sikre, at du har en aktiveret kopi af Microsoft Kontor^{(Microsoft Office)} . Hvis det ikke er aktiveret, skal du aktivere det for at bruge Application Guard for Office .

For at kontrollere, at Application Guard er aktiveret og fungerer, skal du downloade et dokument eller en e-mail-vedhæftet fil fra internettet, så den er klassificeret som en upålidelig^(untrusted) . Åbn det derefter i det tilsvarende Office- program.

Første gang du bruger Office -programmet til at åbne et dokument, du ikke har tillid til, vil du muligvis bemærke, at startskærmen vises i længere tid. Denne forsinkelse skyldes, at den aktiverer Application Guard for Office og åbner filen. Det sker dog kun første gang. Andre åbninger vil være hurtigere.

Hvis Microsoft Defender Application Guard er aktiveret, vil du se en indikation af det på startskærmen. For eksempel vil Microsoft Word sige,

To keep you safe, we’re opening this document in Application Guard…

Når filen endelig åbnes, er en anden indikator for en aktiv Application Guard for Office , at du vil se en billedforklaring på båndet, der siger:

File opened in Application Guard.

This file is from an untrusted soure. To keep you safe, we’ve opened it in a protected mode.

Du vil også bemærke et sort skjold på Microsoft -applikationens ikon på proceslinjen. Dette er endnu en indikator for, at Application Guard er aktiveret og fungerer.

Håber dette hjælper.

Enable or Disable Microsoft Defender Application Guard for Office

Formerly knows as Office 365 Advanced Threat Protection, Microsoft Defender Application Guard for Office prevents potentially risky files from gaining access to trusted system resources. It opens untrusted documents in an isolated environment with hardware virtualization.

Microsoft Defender Application Guard for Office protects your system from malicious software in this isolated container sing standalone and automated modes. In the automated mode, AKA Enterprise Management Mode, the administrator will define some trusted websites.

Any document originating from the defined domains will open normally on your computer. Meanwhile, Application Guard launches files originating from websites outside these defined trusted sites in the virtual environment.

Microsoft Defender Application Guard for Office (Application Guard for Office) helps prevent untrusted files from accessing trusted resources, keeping your enterprise safe from new and emerging attacks. This article walks admins through setting up devices for a preview of Application Guard for Office. It provides information about system requirements and installation steps to enable Application Guard for Office on a device, says Microsoft.

NOTE: To enable Application Guard for Office, you first have to update your system with the Windows 10 cumulative monthly security update KB4571756.

Enable or disable Microsoft Defender Application Guard for Office

Now that you have an overview of Microsoft Defender Application Guard for Windows, this section shows you how to enable and disable it on your Windows computer. We’ll explore the following:

1. Enable or disable Application Guard for Office in Windows Features.
2. Enable or disable Application Guard for Office using PowerShell.
3. Turn on Microsoft Defender Application Guard in Managed Mode group policy.
4. Double-check if Application Guard for Office is enabled and working.

The first two solutions are alternative ways to enable or disable the Application Guard for Office. The third part should be done after following one of the solutions. And finally, you’ll see how to confirm that the Application Guard for Office is enabled and working.

1] Enable or disable Application Guard for Office in Windows Features

 

Right-click on the Start button and select Run to open the Run dialog box. Enter appwiz.cpl in the Run dialog box and click on the OK button.

Click on the Turn Windows features on or off link at the left-hand panel of the Programs and Features window.

Find Microsoft Defender Application Guard from the list on the Windows Features screen and mark the checkbox next to this option to enable it. Hit the OK button.

After enabling Microsoft Defender Application Guard, you’ll need to restart your machine. To disable Microsoft Defender Application Guard, simply uncheck the option on the Windows Features screen and restart your computer.

2] Enable or disable Application Guard for Office using PowerShell

You can also enable Microsoft Defender Application Guard for Office using PowerShell. To open PowerShell as an administrator, right-click on the Start button and select Windows PowerShell (Admin).

Copy and paste the following command in the PowerShell window to enable Windows Defender Application Guard and hit the ENTER key:

Enable-WindowsOptionalFeature -online -FeatureName Windows-Defender-ApplicationGuard

On running the above command, you’d have enabled Application Guard for Office. Restart your computer following this to finish the process.

To disable Application Guard for Office, enter the following command:

Disable-WindowsOptionalFeature -online -FeatureName Windows-Defender-ApplicationGuard

3] Turn on Microsoft Defender Application Guard in Managed Mode group policy

The two options above are ways to enable or disable the Application Guard for Office. After completing any of the two above methods, you now have to turn on the feature in the Managed Mode group policy.

To do this, go to Computer Configuration > Administrative Templates > Windows Components > Microsoft Defender Application Guard.

Here, change the value under Options to 2 or 3. Click on the OK button to save your settings and close the window. Restart your computer after this.

4] Double-check if Application Guard for Office is enabled and working

After enabling Microsoft Defender Application Guard for Office, you get no confirmation that it’s working. You may want to confirm that you’ve enabled it and it’s working correctly.

Before you go ahead to double-check that you’ve enabled Application Guard for Office, open a Microsoft Office app (Word, PowerPoint, Excel, etc.) on a computer that has policies deployed and ensure that you have an activated copy of Microsoft Office. If it’s not activated, you must activate it to use Application Guard for Office.

To check that Application Guard is enabled and working, download a document or email attachment off the internet so that it’s classed an untrusted. Next, open it in the corresponding Office application.

The first time you use the Office application to open an untrusted document, you might notice that the splash screen shows for a longer time. This delay is because it’s activating Application Guard for Office and opening the file. However, it happens only the first time. Other opens will be quicker.

If Microsoft Defender Application Guard is enabled, you’ll see an indication of that in the splash screen. For example, Microsoft Word will say,

To keep you safe, we’re opening this document in Application Guard…

When the file finally opens, another indicator of an active Application Guard for Office is that you’ll see a callout in the ribbon that says,

File opened in Application Guard.

This file is from an untrusted soure. To keep you safe, we’ve opened it in a protected mode.

Also, you’ll notice a black shield on the Microsoft application’s icon in the taskbar. This is another indicator that Application Guard is enabled and working.

Hope this helps.

Related posts

• Microsoft Defender Application Guard for Office - Krav, FAQ osv.

• Windows Defender Application Guard Extension til Chrome og Firefox

• Hvad er Control Flow Guard i Windows 10 - Sådan slår du den til eller fra

• Fejl 0x800106ba, Windows Defender-applikationen kunne ikke initialiseres

• Hvordan man manuelt scanner individuelle filer og bruger Microsoft Defender

• Sådan blokerer du Microsoft Bing Search-installation i Office 365

• Download Grammarly gratis til Firefox, Chrome, Microsoft Office

• Sådan bruger du Accessibility Checker i Microsoft Office

• Den nyttige Office-app i Windows 10 er en af ​​de mest underbrugte apps

• Sådan kører du Microsoft Defender fra kommandolinjen med MpCmdRun.exe

• Kør Microsoft Defender i henhold til din egen scanningsplan

• Sådan ændrer du filblokindstillinger i Microsoft Office-programmer

• Sådan bruger du Measurement Converter i Microsoft Office

• Sådan aktiverer og bruger du Panning Hand i Microsoft Office-apps

• Konfigurer Microsoft Defender til at scanne .zip .rar .cab-filer i Windows 11/10

• Hvordan nulstiller jeg Microsoft Office Ribbon Customizations til standard?

• Adgang nægtet til installationskilden - Microsoft Office-fejl

• Sådan fjerner du søgelinjen i Office 365-titellinjen

• Mangler Tegneværktøjsfanen i Microsoft Office-båndet? Tilføj det således!

• Sådan fjerner du brugernavn fra Office 365-titellinjen