The session will describe the Windows application guard which helps to protect end user devices within an organization from attacks by opening untrusted sites in an application guard browser which is isolated from our host hardware. It does so by creating a container instance using Hyper-V. Also, I will show its practical implementation and how it can help many organizations and their employees to secure their environment. Also, i will be discussing the best practices on how to implement it as there are various methods to deploy it.