Application Guard is deprecated in Windows 11, version 24H2

[LasseKrache]

Description

Starting with Windows 11, version 24H2, Microsoft Defender Application Guard, including the Windows Isolated App Launcher APIs, is no longer available:

https://learn.microsoft.com/en-us/windows/security/application-security/application-isolation/microsoft-defender-application-guard/configure-md-app-guard

What are the benefits?

Tests on 'Microsoft Defender Application Guard' should be disabled.

Acceptance Criteria!

none

Linked Issues?

No response

Additional Information!

No response

[TuemmlerKelch]

Hi @LasseKrache, thank you for your input. While Application guard is deprecated, CIS argues that it is still integrated into the OS and working, which I believe is a reasonable approach.
For Server 2025, Application Guard is not available anymore and this is reflected in the Benchmark. For older OS, we will keep checking application Guard, however we will add a little Note, stating its deprecated state.

Here is MS's take on the situation.
For organizations continuing to use Windows 10, MDAG remains available; however, it's important to note that Windows 10 will reach its end of support on October 14, 2025. After this date, MDAG will no longer receive updates or support on Windows 10 systems.

For Windows 11 users, MDAG will continue to be supported until the end of support for Windows 11 23H2, which is November 10, 2026. After this date, Microsoft may turn off APIs necessary for MDAG to function, which could render the feature non-operational.
https://techcommunity.microsoft.com/blog/coreinfrastructureandsecurityblog/deprecation-of-microsoft-defender-application-guard-transitioning-to-enhanced-se/4395724