System requirements for Windows Defender Application Guard

Applies to:

  • Windows 10 Enterprise edition, version 1709

The threat landscape is continually evolving. While hackers are busy developing new techniques to breach enterprise networks by compromising workstations, phishing schemes remain one of the top ways to lure employees into social engineering attacks. Windows Defender Application Guard is designed to help prevent old, and newly emerging attacks, to help keep employees productive.

Note

Windows Defender Application Guard is not supported on VMs and VDI environment. For testing and automation on non-production machines, you may enable WDAG on a VM by enabling Hyper-V nested virtualization on the host.

Hardware requirements

Your environment needs the following hardware to run Windows Defender Application Guard.

Hardware Description
64-bit CPU A 64-bit computer with minimum 4 cores is required for hypervisor and virtualization-based security (VBS). For more info about Hyper-V, see Hyper-V on Windows Server 2016 or Introduction to Hyper-V on Windows 10. For more info about hypervisor, see Hypervisor Specifications.
CPU virtualization extensions Extended page tables, also called Second Level Address Translation (SLAT)

-AND-

One of the following virtualization extensions for VBS:

VT-x (Intel)

-OR-

AMD-V
Hardware memory Microsoft recommends 8GB RAM for optimal performance
Hard disk 5 GB free space, solid state disk (SSD) recommended
Input/Output Memory Management Unit (IOMMU) support Not required, but strongly recommended

Software requirements

Your environment needs the following software to run Windows Defender Application Guard.

Software Description
Operating system Windows 10 Enterprise edition, version 1709
Browser Microsoft Edge and Internet Explorer
Management system Microsoft Intune

-OR-

System Center Configuration Manager

-OR-

Group Policy

-OR-

Your current company-wide 3rd party mobile device management (MDM) solution. For info about 3rd party MDM solutions, see the documentation that came with your product.