Windows Defender Application Guard ensures that any file you download remains within the virtual container. This ensures that malicious files don’t breach the host system. However, sometimes you need to download files to the host. Microsoft has offered this feature i.e. Download files to the host in Windows 11/10 Enterprise when using Edge. This feature is off by default, so let’s take a look at how you can enable download files to host with Microsoft Edge
Allow files to download to the Host in Edge
Please note that once you or the IT admin enable this feature, all files downloaded by the user will be available in the Downloads Folder. You will be able to open all files on the host and install it if applicable. This feature is available with Windows Enterprise with Microsoft Defender Application Guard feature installed, and Network Isolation policies configured.
- Run gpedit.msc to open the Local Group Policy Editor.
- Navigate to Administrative Templates > Windows Components > Windows Defender Application Guard.
- Select Allow files to download and save to the host operating system from the right hand side.
- Select Enabled and Apply.
- Restart Windows 11/10.
After this, all files which you download will be available in a folder called Untrusted files nested inside the Downloads folder. WDAG creates this folder when you download the first file post-policy activation.
When this feature is off, and you try to run an EXE Application Guard will block it. This is applicable to any file from the internet.
Application Guard ensures that enterprise devices are protected from malware and untrusted software. Specially designed for Windows 11/10 and Microsoft Edge, it makes sure only trusted websites and resources have access. However, with this option, users will be responsible for any risks associated with opening the files on the host.
That’s all! Hope it helped.
How do I allow Downloads on Microsoft Edge?
If you are unable to download or the downloads are blocked on Microsoft Edge, you need to change the default download folder path. To do this, open the Settings panel and navigate to the Downloads section. Click on the Change button and select a location where you want to save the file. Then, you will be able to download everything on the Edge browser.
How do I redirect Downloads to another drive in Windows 11?
To redirect Downloads to another drive in Windows 11, open the Settings panel in the Microsoft Edge browser. Then, switch to the Downloads section on the left-hand side. Here you can find an option called Change. You need to click on this option and select a path according to your requirements.
Read:
- How to Enable Microsoft Defender Application Guard on Windows 11
- Windows Defender Application Guard Extension for Chrome, Edge, & Firefox.
