Create a new Windows Defender Application Guard profile

Create the App Guard Profile for windows

Endpoints

post /api/v1/mdm/profiles/appguard

Copy full URL

Request URL

https://{server-hostname}:8383/api/v1/mdm/profiles/appguard

Scope

MDMDeviceMgmt.CREATECopied!

Header

Authorization: d92d4xxxxxxxxxxxxx15f52

Request Parameters

- Request Headers

Content-TypestringMandatory

application/jsonCopied!

AcceptstringMandatory

application/jsonCopied!

- Request Body

application/json

JSON Object

Hide Sub-Attributes

policy_namestringMandatory

Name of the App Guard profile

policy_descstringOptional

Description for the App Guard profile

perform_auditintegerMandatory

Enable auditing for Application Guard events. 0 - Disabled, 1 - Enabled

allow_camera_micintegerMandatory

Allow access to camera and microphone inside the Application Guard container. 0 - Blocked, 1 - Allowed

allow_persistenceintegerMandatory

Allow data persistence across Application Guard sessions (e.g., favorites, cookies). 0 - Disabled, 1 - Enabled

allow_gpuintegerOptional

Allow GPU-accelerated rendering inside the Application Guard container. 0 - Disabled (default), 1 - Enabled

allow_app_guardintegerMandatory

Enable or disable Windows Defender Application Guard. 0 - Disabled, 1 - Enabled (Enterprise mode), 2 - Enabled (Standalone mode)

block_non_enterpriseintegerOptional

Block access to non-enterprise content by enterprise apps. 0 - Not blocked (default), 1 - Blocked

cert_thumbprintsarrayOptional

List of certificate thumbprint strings to share with the Application Guard container for user authentication

clipboard_typeintegerMandatory

Direction of clipboard sharing. 1 - Host to container only, 2 - Container to host only, 3 - Both directions

clipboard_settingsintegerMandatory

Type of clipboard content allowed. 1 - Text only, 2 - Image only, 3 - Text and Image

print_settingsintegerMandatory

Printing options from the Application Guard container. Bitmask value: 0 - No printing, 1 - Allow XPS, 2 - Allow PDF, 4 - Allow local printers, 8 - Allow network printers. Combine values for multiple options (e.g., 15 - all allowed)

save_filesintegerMandatory

Allow users to save downloaded files from the Application Guard container to the host OS. 0 - Blocked, 1 - Allowed

primary_domain_namestringOptional

Primary enterprise domain name to be protected by Application Guard

other_domain_namesarrayOptional

List of other enterprise domain names to be treated as trusted resources

protected_domain_namesarrayOptional

List of domain names to be classified as enterprise network resources

enterprise_ip_rangearrayOptional

List of enterprise IP address ranges (e.g., 192.168.0.0-192.168.255.255)

enterprise_cloud_resourcesarrayOptional

List of enterprise cloud resource domains (e.g., www.zylker.com)

neutral_resourcesarrayOptional

List of neutral resource domains accessible from both enterprise and personal contexts

internal_proxy_serverarrayOptional

List of internal proxy server addresses used for enterprise resources

proxy_serverarrayOptional

List of proxy server addresses

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request POST \
  --url https://appdomain/api/v1/mdm/profiles/appguard \
  --header 'Accept: application/json' \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52' \
  --header 'Content-Type: application/json' \
  --data '{"save_files":0,"enterprise_ip_range":["192.168.0.0-192.168.255.255","10.0.0.0-10.255.255.255"],"print_settings":6,"allow_gpu":1,"block_non_enterprise":1,"proxy_server":["proxy.zylker.com:8080"],"policy_name":"Windows App Guard Policy","allow_app_guard":1,"clipboard_type":1,"other_domain_names":["partner.zylker.com"],"neutral_resources":["www.bing.com"],"clipboard_settings":1,"protected_domain_names":["intranet.zylker.com"],"policy_desc":"Application Guard profile for enterprise Windows devices","enterprise_cloud_resources":["www.zylker.com","cloud.zylker.com"],"allow_persistence":1,"primary_domain_name":"corp.zylker.com","perform_audit":1,"allow_camera_mic":0,"internal_proxy_server":["proxy.internal.zylker.com:8080"],"cert_thumbprints":["4F6B2E1A3C8D7E9F0A1B2C3D4E5F6A7B8C9D0E1F"]}'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomain/api/v1/mdm/profiles/appguard"))
        .header("Content-Type", "application/json")
        .header("Accept", "application/json")
        .header("Authorization", " d92d4xxxxxxxxxxxxx15f52")
        .method("POST", HttpRequest.BodyPublishers.ofString("{\"save_files\":0,\"enterprise_ip_range\":[\"192.168.0.0-192.168.255.255\",\"10.0.0.0-10.255.255.255\"],\"print_settings\":6,\"allow_gpu\":1,\"block_non_enterprise\":1,\"proxy_server\":[\"proxy.zylker.com:8080\"],\"policy_name\":\"Windows App Guard Policy\",\"allow_app_guard\":1,\"clipboard_type\":1,\"other_domain_names\":[\"partner.zylker.com\"],\"neutral_resources\":[\"www.bing.com\"],\"clipboard_settings\":1,\"protected_domain_names\":[\"intranet.zylker.com\"],\"policy_desc\":\"Application Guard profile for enterprise Windows devices\",\"enterprise_cloud_resources\":[\"www.zylker.com\",\"cloud.zylker.com\"],\"allow_persistence\":1,\"primary_domain_name\":\"corp.zylker.com\",\"perform_audit\":1,\"allow_camera_mic\":0,\"internal_proxy_server\":[\"proxy.internal.zylker.com:8080\"],\"cert_thumbprints\":[\"4F6B2E1A3C8D7E9F0A1B2C3D4E5F6A7B8C9D0E1F\"]}"))
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomain")

payload = "{\"save_files\":0,\"enterprise_ip_range\":[\"192.168.0.0-192.168.255.255\",\"10.0.0.0-10.255.255.255\"],\"print_settings\":6,\"allow_gpu\":1,\"block_non_enterprise\":1,\"proxy_server\":[\"proxy.zylker.com:8080\"],\"policy_name\":\"Windows App Guard Policy\",\"allow_app_guard\":1,\"clipboard_type\":1,\"other_domain_names\":[\"partner.zylker.com\"],\"neutral_resources\":[\"www.bing.com\"],\"clipboard_settings\":1,\"protected_domain_names\":[\"intranet.zylker.com\"],\"policy_desc\":\"Application Guard profile for enterprise Windows devices\",\"enterprise_cloud_resources\":[\"www.zylker.com\",\"cloud.zylker.com\"],\"allow_persistence\":1,\"primary_domain_name\":\"corp.zylker.com\",\"perform_audit\":1,\"allow_camera_mic\":0,\"internal_proxy_server\":[\"proxy.internal.zylker.com:8080\"],\"cert_thumbprints\":[\"4F6B2E1A3C8D7E9F0A1B2C3D4E5F6A7B8C9D0E1F\"]}"

headers = {
    'Content-Type': "application/json",
    'Accept': "application/json",
    'Authorization': " d92d4xxxxxxxxxxxxx15f52"
    }

conn.request("POST", "/api/v1/mdm/profiles/appguard", payload, headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Content-Type", "application/json");
    headersMap.put("Accept", "application/json");

    data=Map();
    data.put("policy_name","value");
    data.put("policy_desc","value");
    data.put("perform_audit","1");
    data.put("allow_camera_mic","1");
    data.put("allow_persistence","1");
    data.put("allow_gpu","1");
    data.put("allow_app_guard","1");
    data.put("block_non_enterprise","1");
    data_cert_thumbprints=List();
    data.put("cert_thumbprints",data_cert_thumbprints);
    data.put("clipboard_type","1");
    data.put("clipboard_settings","1");
    data.put("print_settings","1");
    data.put("save_files","1");
    data.put("primary_domain_name","value");
    data_other_domain_names=List();
    data.put("other_domain_names",data_other_domain_names);
    data_protected_domain_names=List();
    data.put("protected_domain_names",data_protected_domain_names);
    data_enterprise_ip_range=List();
    data.put("enterprise_ip_range",data_enterprise_ip_range);
    data_enterprise_cloud_resources=List();
    data.put("enterprise_cloud_resources",data_enterprise_cloud_resources);
    data_neutral_resources=List();
    data.put("neutral_resources",data_neutral_resources);
    data_internal_proxy_server=List();
    data.put("internal_proxy_server",data_internal_proxy_server);
    data_proxy_server=List();
    data.put("proxy_server",data_proxy_server);

    response = invokeUrl
    [
        url: "https://appDomain/api/v1/mdm/profiles/appguard"
        type: POST
        headers: headersMap
        body: data
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Content-Type", "application/json")
$headers.Add("Accept", "application/json")
$headers.Add("Authorization", " d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomain/api/v1/mdm/profiles/appguard' -Method POST -Headers $headers -ContentType 'application/json' -Body '{"save_files":0,"enterprise_ip_range":["192.168.0.0-192.168.255.255","10.0.0.0-10.255.255.255"],"print_settings":6,"allow_gpu":1,"block_non_enterprise":1,"proxy_server":["proxy.zylker.com:8080"],"policy_name":"Windows App Guard Policy","allow_app_guard":1,"clipboard_type":1,"other_domain_names":["partner.zylker.com"],"neutral_resources":["www.bing.com"],"clipboard_settings":1,"protected_domain_names":["intranet.zylker.com"],"policy_desc":"Application Guard profile for enterprise Windows devices","enterprise_cloud_resources":["www.zylker.com","cloud.zylker.com"],"allow_persistence":1,"primary_domain_name":"corp.zylker.com","perform_audit":1,"allow_camera_mic":0,"internal_proxy_server":["proxy.internal.zylker.com:8080"],"cert_thumbprints":["4F6B2E1A3C8D7E9F0A1B2C3D4E5F6A7B8C9D0E1F"]}'

Sample Request Body

Create App Guard profile with full configuration

Copied!

  {
    "save_files": 0,
    "enterprise_ip_range": [
      "192.168.0.0-192.168.255.255",
      "10.0.0.0-10.255.255.255"
    ],
    "print_settings": 6,
    "allow_gpu": 1,
    "block_non_enterprise": 1,
    "proxy_server": [
      "proxy.zylker.com:8080"
    ],
    "policy_name": "Windows App Guard Policy",
    "allow_app_guard": 1,
    "clipboard_type": 1,
    "other_domain_names": [
      "partner.zylker.com"
    ],
    "neutral_resources": [
      "www.bing.com"
    ],
    "clipboard_settings": 1,
    "protected_domain_names": [
      "intranet.zylker.com"
    ],
    "policy_desc": "Application Guard profile for enterprise Windows devices",
    "enterprise_cloud_resources": [
      "www.zylker.com",
      "cloud.zylker.com"
    ],
    "allow_persistence": 1,
    "primary_domain_name": "corp.zylker.com",
    "perform_audit": 1,
    "allow_camera_mic": 0,
    "internal_proxy_server": [
      "proxy.internal.zylker.com:8080"
    ],
    "cert_thumbprints": [
      "4F6B2E1A3C8D7E9F0A1B2C3D4E5F6A7B8C9D0E1F"
    ]
  }

▼ Show full

Create App Guard profile with minimal required fields

Copied!

  {
    "save_files": 0,
    "enterprise_ip_range": [],
    "print_settings": 0,
    "allow_gpu": 0,
    "block_non_enterprise": 0,
    "proxy_server": [],
    "policy_name": "Basic App Guard Policy",
    "allow_app_guard": 1,
    "clipboard_type": 1,
    "other_domain_names": [],
    "neutral_resources": [],
    "clipboard_settings": 1,
    "protected_domain_names": [],
    "enterprise_cloud_resources": [],
    "allow_persistence": 0,
    "primary_domain_name": "",
    "perform_audit": 0,
    "allow_camera_mic": 0,
    "internal_proxy_server": [],
    "cert_thumbprints": []
  }

▼ Show full

Response Parameters

- HTTP code 200

Response Body - application/json

JSON Object

Hide Sub-Attributes

policy_idstring

Unique ID of the newly created App Guard profile

policy_namestring

Name of the created App Guard profile

Possible Response Codes

200HTTP code

Sample Response: HTTP 200

App Guard profile successfully created

Copied!

  {
    "policy_id": "9007199254741295",
    "policy_name": "Windows App Guard Policy"
  }

▼ Show full

Duration: 1 minute | Threshold: 30 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.