Configure Microsoft Defender Application Guard clipboard settings
Supported on: Microsoft Edge on Windows 10 Enterprise or Windows 10 Education with Microsoft Defender Application Guard in Enterprise mode
Registry
SOFTWARE\Policies\Microsoft\AppHVSI Options
AppHVSIClipboardSettings enum - Block clipboard operations(default)
->
0 - Enable clipboard operation from an isolated session to the host
->
1 - Enable clipboard operation from an host to the isolated session
->
2 - Enable clipboard operation both directions
->
3
AppHVSIClipboardFileType decimal
- range 1-3 Description
This policy setting allows you to decide how the clipboard behaves while in Microsoft Defender Application Guard. If you enable this setting, you must choose from the following behaviors: - Disable clipboard functionality completely between the host and Application Guard - Enable the clipboard to copy content from Application Guard to the host - Enable the clipboard to copy content from the host to Application Guard. Note: We recommend that you don't enable copying from the host to Application Guard. If you enable this functionality, a potentially compromised Application Guard session will have access to the host device’s clipboard and its content. If you choose to enable copying, you must also choose the type of content that can be copied, by using the content options: - 1. Allows text copying. - 2. Allows image copying. - 3. Allows both text and image copying. If you disable or don't configure this setting, all clipboard functionality is turned off in Application Guard.