check before: 2026-02-01
Product:
Defender, Defender for Endpoint, Microsoft 365 suite, Windows
Platform:
Online, Windows Desktop, World tenant
Status:
Change type:
User impact, Admin impact, Retirement
Links:
Details:
Summary:
Microsoft Defender Application Guard for Office, retired in April 2024, will be removed from Office by December 2027. Files will open in Protected View instead. Admins should enable Microsoft Defender for Endpoint ASR rules and Windows Defender Application Control to maintain security. No admin action is required for removal.
Details:
Microsoft Defender Application Guard for Office was retired in April 2024 and is now being removed from Office. This change aligns with the end of support for Windows 11 version 23H2 and helps streamline the security experience for users. Documents that previously opened in Application Guard will now open in Protected View, maintaining strong protection against threats.
When this will happen:
Phase 1: Removal begins with Office version 2602
Current Channel: early February 2026
Monthly Enterprise Channel: April 2026
Semi-Annual Enterprise Channel: July 2026
Phase 2: Full removal with Office version 2612
Current Channel: early December 2026
Monthly Enterprise Channel: February 2027
Semi-Annual Enterprise Channel: July 2027
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2025-11-04
updated:
2025-11-04
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
XXXXXXX ... free basic plan only
Direct effects for Operations**
Removal of Application Guard
Users will lose the enhanced security features provided by Application Guard, leading to potential exposure to threats when opening documents.
- roles: End Users, IT Administrators
- references: https://learn.microsoft.com/defender-office-365/app-guard-for-office-install, https://support.microsoft.com/office/what-is-protected-view-d6f09ac7-e6b9-4495-8e43-2bbcdbcb6653
Transition to Protected View
Files will now open in Protected View, which may not provide the same level of security as Application Guard, potentially increasing risk.
- roles: End Users, Security Analysts
- references: https://learn.microsoft.com/defender-office-365/app-guard-for-office-install, https://support.microsoft.com/office/what-is-protected-view-d6f09ac7-e6b9-4495-8e43-2bbcdbcb6653
Increased Admin Responsibilities
Admins will need to enable ASR rules and WDAC to maintain security, increasing workload and potential for misconfiguration.
- roles: IT Administrators, Security Officers
- references: https://learn.microsoft.com/defender-endpoint/overview-attack-surface-reduction, https://learn.microsoft.com/windows/security/application-security/application-control/windows-defender-application-control/wdac
User Training and Documentation
Users may require additional training and updated documentation to adapt to the changes, leading to temporary productivity loss.
- roles: End Users, Training Coordinators
- references: https://learn.microsoft.com/defender-office-365/app-guard-for-office-install, https://learn.microsoft.com/defender-office-365/app-guard-for-office-install#confirm-that-application-guard-for-office-is-enabled-and-working
" target="_blank" rel="nofollow noopener noreferrer">https://learn.microsoft.com/defender-office-365/app-guard-for-office-install#confirm-that-application-guard-for-office-is-enabled-and-working
Potential Compliance Risks
Without Application Guard, organizations may face compliance risks if they do not implement alternative security measures effectively.
- roles: Compliance Officers, IT Administrators
- references: https://learn.microsoft.com/defender-endpoint/overview-attack-surface-reduction, https://learn.microsoft.com/windows/security/application-security/application-control/windows-defender-application-control/wdac
Configutation Options**
XXXXXXX ... paid membership only
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
