Retrieve the details of a specific Windows Defender Application Guard profile

Get the app guard profile details windows

Endpoints

get /api/v1/mdm/profiles/appguard/policies/{policy_id}

Copy full URL

Request URL

https://{server-hostname}:8383/api/v1/mdm/profiles/appguard/policies/{policy_id}

Scope

MDMDeviceMgmt.READCopied!

Header

Authorization: d92d4xxxxxxxxxxxxx15f52

Request Parameters

- Request Headers

AcceptstringMandatory

application/jsonCopied!

- Path Parameters

policy_idstringMandatory

Unique identifier of the App Guard profile. Obtain from the Create App Guard Policy response

Sample Request

Curl

Java

Python

Deluge

PowerShell

Copied!

curl --request GET \
  --url https://appdomain/api/v1/mdm/profiles/appguard/policies/{policy_id} \
  --header 'Accept: application/json' \
  --header 'Authorization:  d92d4xxxxxxxxxxxxx15f52'

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.io.IOException;
import java.net.http.HttpTimeoutException;

public class Main {
  public static void main(String[] args) {

    HttpRequest request = HttpRequest.newBuilder()
        .uri(URI.create("https://appdomain/api/v1/mdm/profiles/appguard/policies/{policy_id}"))
        .header("Accept", "application/json")
        .header("Authorization", " d92d4xxxxxxxxxxxxx15f52")
        .method("GET", HttpRequest.BodyPublishers.noBody())
        .build();
    HttpResponse response = HttpClient.newHttpClient().send(request, HttpResponse.BodyHandlers.ofString());
    System.out.println(response.body());
  
  }
}

import http.client

conn = http.client.HTTPSConnection("appdomain")

headers = {
    'Accept': "application/json",
    'Authorization': " d92d4xxxxxxxxxxxxx15f52"
    }

conn.request("GET", "/api/v1/mdm/profiles/appguard/policies/{policy_id}", headers=headers)

res = conn.getresponse()
data = res.read()

print(data.decode("utf-8"))


    headersMap = Map();
    headersMap.put("Accept", "application/json");

    response = invokeUrl
    [
        url: "https://appDomain/api/v1/mdm/profiles/appguard/policies/{policy_id}"
        type: GET
        headers: headersMap
        connection: connection_name
    ]

    info response;

$headers=@{}
$headers.Add("Accept", "application/json")
$headers.Add("Authorization", " d92d4xxxxxxxxxxxxx15f52")
$response = Invoke-WebRequest -Uri 'https://appdomain/api/v1/mdm/profiles/appguard/policies/{policy_id}' -Method GET -Headers $headers

Response Parameters

- HTTP code 200

Response Body - application/json

JSON Object

Hide Sub-Attributes

policy_idstring

Unique ID of the App Guard profile

policy_namestring

Name of the App Guard profile

policy_descstring

Description for the App Guard profile

perform_auditstring

Auditing for Application Guard events. 0 - Disabled, 1 - Enabled

allow_camera_micstring

Access to camera and microphone inside the Application Guard container. 0 - Blocked, 1 - Allowed

allow_persistencestring

Data persistence across Application Guard sessions (e.g., favorites, cookies). 0 - Disabled, 1 - Enabled

allow_gpustring

GPU-accelerated rendering inside the Application Guard container. 0 - Disabled, 1 - Enabled

allow_app_guardstring

Windows Defender Application Guard state. 0 - Disabled, 1 - Enabled (Enterprise mode), 2 - Enabled (Standalone mode)

block_non_enterprisestring

Block access to non-enterprise content by enterprise apps. 0 - Not blocked, 1 - Blocked

cert_thumbprintsarray

List of certificate thumbprint strings shared with the Application Guard container for user authentication

clipboard_typestring

Direction of clipboard sharing. 1 - Host to container only, 2 - Container to host only, 3 - Both directions

clipboard_settingsstring

Type of clipboard content allowed. 1 - Text only, 2 - Image only, 3 - Text and Image

print_settingsstring

Printing options from the Application Guard container. Bitmask value: 0 - No printing, 1 - Allow XPS, 2 - Allow PDF, 4 - Allow local printers, 8 - Allow network printers

save_filesstring

Allow users to save downloaded files from the Application Guard container to the host OS. 0 - Blocked, 1 - Allowed

primary_domain_namestring

Primary enterprise domain name to be protected by Application Guard. Present only when configured

other_domain_namesarray

List of other enterprise domain names treated as trusted resources. Present only when configured

protected_domain_namesarray

List of domain names classified as enterprise network resources. Present only when configured

enterprise_ip_rangearray

List of enterprise IP address ranges. Present only when configured

enterprise_cloud_resourcesarray

List of enterprise cloud resource domains. Present only when configured

neutral_resourcesarray

List of neutral resource domains accessible from both enterprise and personal contexts. Present only when configured

internal_proxy_serverarray

List of internal proxy server addresses used for enterprise resources. Present only when configured

proxy_serverarray

List of proxy server addresses. Present only when configured

Possible Response Codes

200HTTP code

Sample Response: HTTP 200

App Guard payload response

Copied!

  {
    "save_files": "0",
    "policy_id": "4",
    "print_settings": "0",
    "allow_gpu": "0",
    "block_non_enterprise": "0",
    "policy_name": "windowsappguardpolicy",
    "allow_app_guard": "0",
    "clipboard_type": "1",
    "clipboard_settings": "0",
    "policy_desc": "",
    "allow_persistence": "0",
    "perform_audit": "1",
    "allow_camera_mic": "0",
    "cert_thumbprints": []
  }

▼ Show full

Duration: 1 minute | Threshold: 120 | Lock period: 5 minutes

Duration - Time window for the threshold.
Threshold - Number of API calls allowed within the specified duration.
Lock Period - Wait time before consecutive API requests.