Microsoft releases Application Safeguard for Workplace to M365 customers
This week released Program Guard for Workplace microsoft, a defensive technology that quarantines untrusted Workplace documents so attack program code embedded in malicious data files can’t reach the operating-system or its applications.
The announcement of Application Guard’s general availability came five months after Microsoft kicked off a public preview of the technologies. At that right time, Microsoft’s roadmap pointed out a December 2020 debut for App Guard for Office.
“When you’ve enabled Software Guard and a consumer opens a document from the potentially unsafe location, Workplace opens the file within Application Safeguard; a secured, Hyper-V-allowed container isolated from the others of a user’s information through hardware-centered virtualization,” Emil Karafezov, senior program supervisor, said in a Jan. 27 post to a continuing company blog.
Application Guard for Workplace isolates certain documents opened within the suite’s three major applications: Word, PowerPoint and excel. Paperwork obtained from untrusted Web or intranet domains, data files pulled from unsafe places potentially, and attachments obtained through the Outlook e-mail client, are opened up in a virtualized atmosphere, or sandbox, where malicious program code can’t wreak havoc.
Unlike the a lot older Protected View, another Office defensive function – it opens possibly dangerous documents as read-only – files opened up in Application Guard could be manipulated. They may be printed, saved and edited. When saved, they stay in the isolation container so when reopened later, are quarantined within the sandbox again.
Outdated file types – which may be set by administrators within the File Prevent feature inside Word, Excel and PowerPoint – may also be shunted into Program Guard’s virtual machine.
Application Guard for Workplace will be open to clients licensing Microsoft 365 Microsoft or E5 365 Electronic5 Security, and for now, and then those on either the existing Month-to-month or Channel Enterprise Channel. (Those will be the Microsoft 365 upgrade channels that deliver probably the most frequent refreshes.)
This year customers who’ve selected the Semi-Annual Business Channel for updates may have the feature “later,” Microsoft said. Every year semi-annuals are released two times, january and July in, a July option of Application Safeguard pointing to.
Set as “off” automagically, Application Safeguard requires that IT admins start the feature, established and distribute group plans to individual users after that. More information about this process are available here (installation guide) and here (user guide).