For the fourth post in this series, we’re going to look at what’s probably my favourite new feature of Client Hyper-V: Windows Defender Application Guard. This is really cool, as it allows you to isolate the biggest threat to your machine…Surfing the web. Either manually or through defined policies, Microsoft Edge will launch its session inside a protected Virtual Machine that has no (or configurable, like copy/paste) access to the host computer or operating system. Any malware that inadvertently gets downloaded during the browsing session has zero access to the computer, and is automatically purged as soon as Edge is closed. Like Hyper-V itself, Windows Defender Application Guard is available to be installed as a Windows Feature. We enable it by first going to appwiz.cpl and clicking Turn Windows features on or off on the left-hand side. In the Windows Features window, scroll all the way to the bottom and you will find Windows Defender Application Guard. If you don’t see it, your version of Windows is no longer supported. As of Windows 10 1709, Enterprise edition is required to enable Windows Defender Application Guard, so if you don’t have that edition than it will be greyed out.  By 1803, Microsoft will allow you to implement Application Guard on Windows Pro, having recognized the large benefit to consumer users as well. If all is good, check the box to...