Microsoft Defender Application Guard for Office是一项安全功能，可使用虚拟化技术^{(virtualization technology)}保护您的系统免受恶意软件的侵害。它通过基于硬件的虚拟化在隔离容器中打开粗略的Microsoft Office文件，这样它们就不会损害或感染您的计算机。

用户可能对 Microsoft Office 的Protected View^{(Protected View)}很熟悉 ，但Application Guard则不同。受保护的视图^(View)会正常打开文件，但会限制您对其进行编辑。

但是，Application Guard在虚拟容器中打开文档，您无需在虚拟容器外重新打开即可读取和编辑文件。

^{(Microsoft Defender Application Guard)}适用于Office的^(Office)Microsoft Defender 应用程序防护

以下是我们将在Microsoft Defender Application Guard for Office中探索的以下方面：

1. 应用程序防护^{(Application Guard)}的最低要求。
2. 如何为Office部署^(Office)应用程序防护^{(Application Guard)}。
3. 如何从文档中删除保护。
4. 如何在文件上恢复应用程序防护^{(Application Guard)}保护。
5. 常见问题解答 (FAQ)。

阅读这篇文章，了解您需要了解的有关Windows Defender Application Guard for Office的所有信息。

1]应用程序防护的^{(Application Guard)}最低^(Minimum)要求

软件先决条件

• Microsoft Office 频道内部^{(Microsoft Office Channel Build)}版本 2008 16.0.13212 及更高版本。
• Windows 10企业^(Enterprise)版，客户端内部^{(Client Build)}版本 2004 (20H1) 内部版本 19041。
• Windows 10 累积每月安全更新KB4571756。

硬件先决条件

• 8 GB 内存。
• 10 GB 系统驱动器可用空间。推荐使用固态硬盘^(SSD)。
• 处理器：^{(Processor: )} 64 位，物理或虚拟四核，AMD-V或Intel VT-x虚拟化扩展，Core i5 及以上。

2]如何^(How)为Office部署应用程序防护^{(Application Guard)}

目前，Microsoft Defender Application Guard for Office仅适用于拥有  Microsoft 365 E5 或 Microsoft 365 E5 Mobility + Security许可证的组织，并且提供公共预览版。

首先，下载并安装最新的 Windows 10 累积每月安全更新。

按 Windows key + R并键入 appwiz.cpl 并敲击ENTER。这将带您进入 程序和功能^{(Programs and Features)}皮肤。

单击 左侧的打开或关闭 Windows 功能链接。^{(Turn Windows features on or off)}选中Microsoft Defender Application Guard^{(Microsoft Defender Application Guard)}旁边^(Mark)的复选框，然后单击 OK。

激活Microsoft Defender Application Guard^{(Microsoft Defender Application Guard)}后，允许计算机重新启动或手动执行。

3]如何^(How)从文档中删除保护

虽然Application Guard为您提供文件的编辑权限，但可能存在一些限制。如果您确定文件是安全的，您可以从文件中删除保护。

首先^(Start)打开文档，然后单击“文件 ^(File )”菜单。转到 信息^(Info)并单击 删除保护^{(Remove protection)}选项。

4]如何^(How)在文件上恢复应用程序防护保护^{(Application Guard)}

Windows Defender Application Guard for Office还允许您在删除文件保护后恢复它。为此，请打开Microsoft Office应用程序并单击文件 ^(File )菜单。转到 Trust Center > Trust Center Settings > Trusted Documents。在这里，单击 清除所有受信任的文档，使它们不再受信任^{(Clear all Trusted Documents so that they are no longer trusted)}。

注意：^(NOTE:)按照上述步骤恢复保护将适用于您之前删除保护的 PC 上的所有文档。

常见问题 (FAQ)

哪些文件在Windows Defender Application Guard for Office中打开？

Application Guard通常会打开以下类型的文件：

• 从网上下载的文件。
• 来自潜在不安全位置的文件，例如Internet 临时^{(Temporary Internet)}文件夹。
• 文件阻止^{(File Block)}阻止打开的文档。

Application Guard有哪些限制？

如果文档在Windows Defender Application Guard中打开，则对其的限制包括：

• 无法访问任意系统位置。
• 无法访问用户的身份。
• 无法访问企业安全边界内的网络位置。
• 受限于依赖上述功能的Microsoft Office功能。^{(Microsoft Office)}
• 扩展Microsoft Office应用程序功能的功能不可用。一些示例包括宏^(Macros)、VSTO、COM和Web 插件^{(Web Add-ins)}。

阅读下一篇^{(Read next)}：如何为 Office 启用或禁用 Microsoft Defender 应用程序防护^{(Enable or Disable Microsoft Defender Application Guard for Office)}。

我们希望你觉得这篇文章有用。

Microsoft Defender Application Guard for Office - Requirements, FAQ, etc.

Microsoft Defender Application Guard for Office is a security feature that protects your system from malware using virtualization technology. It opens sketchy Microsoft Office files in an isolated container through hardware-based virtualization so that they can’t harm or infect your computer.

Users may be familiar with Microsoft Office’s Protected View, but Application Guard is different from that. Protected View opens the file normally but restricts you from editing it.

However, Application Guard opens the documents in a virtual container, and you can read and edit the files without re-opening it outside the virtual container.

Microsoft Defender Application Guard for Office

Here are the following aspects we’ll explore in Microsoft Defender Application Guard for Office:

1. Minimum requirements for Application Guard.
2. How to deploy Application Guard for Office.
3. How to remove protection from a document.
4. How to restore Application Guard protection on a file.
5. Frequently asked questions (FAQs).

Read this post to the end to learn all you need to know about Windows Defender Application Guard for Office.

1] Minimum requirements for Application Guard

Software prerequisites

• Microsoft Office Channel Build version 2008 16.0.13212 and higher.
• Windows 10 Enterprise edition, Client Build version 2004 (20H1) build 19041.
• Windows 10 cumulative monthly security updates KB4571756.

Hardware prerequisites

• 8 GB RAM.
• 10 GB system drive free space. SSD is recommended.
• Processor: 64-bit, physical or virtual four cores, AMD-V or Intel VT-x virtualization extensions, Core i5 and above.

2] How to deploy Application Guard for Office

Currently, Microsoft Defender Application Guard for Office is only available to organizations with  Microsoft 365 E5 or Microsoft 365 E5 Mobility + Security licenses and is available in public preview.

First, download and install the latest Windows 10 cumulative monthly security updates.

Press Windows key + R and type appwiz.cpl and strike ENTER. This takes you to the Programs and Features skin.

Click on the Turn Windows features on or off link on the left. Mark on the checkbox next to Microsoft Defender Application Guard and click OK.

Allow the computer to restart or do it manually after activating Microsoft Defender Application Guard.

3] How to remove protection from a document

While Application Guard gives you edit rights to the file, there may be some restrictions. If you’re sure the document is safe, you can remove the protection from the file.

Start by opening the document and click on the File menu. Go to Info and click on the Remove protection option.

4] How to restore Application Guard protection on a file

Windows Defender Application Guard for Office also lets you restore the file protection after removing it. To do this, open the Microsoft Office application and click on the File menu. Go to Trust Center > Trust Center Settings > Trusted Documents. Here, click on Clear all Trusted Documents so that they are no longer trusted.

NOTE: Restoring protection following the above steps will apply for all the documents on your PC from which you previously removed protection.

Frequently asked questions (FAQs)

Which files open in Windows Defender Application Guard for Office?

Application Guard will typically open the following types of files:

• Documents downloaded from the internet.
• File originating from potentially unsafe locations, such as the Temporary Internet folder.
• Documents that File Block has prevented from opening.

What are the restrictions in Application Guard?

If a document opens in Windows Defender Application Guard, the restrictions on it include:

• Can’t access arbitrary system locations.
• Can’t access the identity of the user.
• Can’t access network locations within the boundary of the enterprise security.
• Restricted from Microsoft Office features that depend on the above capabilities.
• Capabilities that extend Microsoft Office applications’ functionalities are unavailable. Some examples include Macros, VSTO, COM, and Web Add-ins.

Read next: How to Enable or Disable Microsoft Defender Application Guard for Office.

We hope you find the post useful.

Related posts

• 为Office启用或禁用Microsoft Defender Application Guard

• 视窗Defender Application Guard Extension为Chrome & Firefox

• 什么是Windows 10中的Control Flow Guard - 如何打开或关闭它

• Error 0x800106ba，Windows Defender Application未能初始化

• 如何手动扫描单独的文件和使用Microsoft Defender

• 如何在Microsoft Office程序中更改文档主题颜色

• Microsoft Office缺少Ribbon中的Draw Tool Tab？加入它！

• 如何阻止Office 365中的Microsoft Bing Search installation

• 配置Windows Defender以扫描Windows 10中的.zip .rar .cab文件

• 如何在Microsoft Defender停止Automatic Sample Submission

• 如何为Office程序提供给Microsoft的反馈

• 如何删除Office 365 Title Bar中的Search Bar

• 如何使用Office 365 DNS Diagnostic Tool

• 访问拒绝安装源 - Microsoft Office error

• 在Windows 10有用Office App是最未充分利用的应用程序之一

• 如何从Office 365 Title Bar删除User Name

• 如何使用Command Line运行Microsoft Defender与MpCmdRun.exe

• 如何在Office 365应用中关闭Picture Compression

• Fix Microsoft Defender error 0x80073b01在Windows 10上

• Mac的Microsoft Defender ATP现在可用于企业