Share via

Windows Defender App Guard(wdag) not working with Edge

Question

Thursday, March 29, 2018 2:31 AM

An error always occur when enabling WDAG in edge.(getting error 0xc0000428zz extended error 0x00000000; location: CHvsiSession::StartRemoteSession; MgrSid: (6C2ADB38-F2A8-4122-9962-2A7C585021450; rDPsID(00000000-0000-0000-0000-000000000000)

 Does anyone have any idea what this error means?I did look around but cant find much bout this error.Any help is very much appreciated.

If im in the wrong place apologies in advance*

All replies (6)

Friday, March 30, 2018 2:34 AM

Hi,

Open Control Panel>Programs and Features>Turn Windows features on or off.

Check both the Hyper-V and Windows Defender Application Guard box.

Windows Defender Application Guard requires Hyper-V to also be turned on.

If either feature is grayed out, then you will need to enable virtualization in your UEFI firmware settings.

It may be caused by some files or components that are missing in the system. I suggest that you could update to Windows 10 1709 (OS Build 16299.248) to check. You need to install KB4074588.

Hope it will be helpful to you

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

Friday, March 30, 2018 6:36 AM

Hi,

Thank you for the suggestion.Will try out your solution and i'll post again once i've got the results.Thank you again very much!

Friday, March 30, 2018 10:18 AM

Hi,

Here are the result. 

Check both the Hyper-V and Windows Defender Application Guard box.(both are checked and ticked)

Windows Defender Application Guard requires Hyper-V to also be turned on.)both are turned on)

If either feature is grayed out, then you will need to enable virtualization in your UEFI firmware settings.(I've checked just in case but apparently it is turned on also)

It may be caused by some files or components that are missing in the system. I suggest that you could update to Windows 10 1709 (OS Build 16299.248) to check. You need to install KB4074588.(there is an update for this Wondows 10 1709 but im not sure what build.There is also update for KB4074588 but the most recent update is failed.I launched a standalone update but that one also failed as it say not compatible with running system.)

FYI, this is a fresh new PC.I'm still getting this error after doing what was suggested.Kinda out of idea here.

Tuesday, April 3, 2018 6:12 AM

Hi,

Was wondering about something.Do i have to include Windows Defender App Guard into Hyper V.Reason is that last time when i checked the Hyper V Manager it was practically empty.I wonder if this is the cause?

Tuesday, April 3, 2018 7:57 AM

Please know that Application Guard provides unprecedented protection against targeted threats using Microsoft’s Hyper-V virtualization technology. We need Hypervisor to work for it:

Also, make sure you have meet the requirement:

  • A 64-bit computer with minimum 4 cores is required for hypervisor and virtualization-based security (VBS). 
  • CPU virtualization extensions: Extended page tables, also called Second Level Address Translation (SLAT) and VT-x (Intel) or AMD-V
  •  8GB RAM 
    5 GB free space, solid state disk (SSD) recommended
  • Software:
    Windows 10 Enterprise edition, version 1709
    Microsoft Edge and Internet Explorer
    Management system： Microsoft Intune -OR- System Center Configuration Manager -OR- Group Policy -OR-　Your current company-wide 3rd party mobile device management (MDM) solution

If all meet the requirements, we need to reset the container environment to check the results.

The container environment is reset, including discarding all user-generated data. Run below command：

wdagtool.exe cleanup RESET_PERSISTENCE_LAYER.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

Wednesday, April 4, 2018 8:19 AM

Hi,

You don't have to install Hyper-V OS component. Application Guard installation will take care of enabling underlying dependencies on Hyper-V and other OS components. That said, please make sure virtualization support is enabled on the device (check BIOS).

As you said, Hyper-V Manager it is practically empty. I consider that two things we could try to check.

1. System requirements for Windows Defender Application Guard

/en-us/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview

2. I suggest that you could perform an in-place upgrade to repair system files to check by using the Windows 10 ISO file.

https://www.tenforums.com/tutorials/16397-repair-install-windows-10-place-upgrade.html

Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Hope it will be helpful to you

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].