Microsoft Edge: Retirement of Windows Information Protection (WIP) and Microsoft Defender Application Guard (MDAG)

Microsoft Edge will retire support for Windows Information Protection (WIP) and Microsoft Defender Application Guard (MDAG) by late September 2026. Organizations using these on Windows 10 must migrate to Microsoft Purview solutions and Edge's built-in security features, as these capabilities are already removed in Windows 11 version 24H2.

[What and why]

We are retiring support for Windows Information Protection (WIP) and Microsoft Defender Application Guard (MDAG) in Microsoft Edge.

These capabilities have already been deprecated in Windows and are no longer available in Windows 11, version 24H2.

Microsoft recommends the following alternatives:

• For WIP scenarios, use Microsoft Purview Information Protection, Microsoft Purview Data Loss Prevention (DLP), Endpoint DLP, and Intune app protection policies.
• For MDAG scenarios, use the built-in security capabilities available in Microsoft Edge and other supported isolation solutions appropriate for your environment.

[Rollout schedule]

• Worldwide: Beginning in late September 2026 and expected to complete in late September 2026

[Impact on your organization]

Who is affected

Organizations that have configured WIP or MDAG for Microsoft Edge on Windows 10 devices.

These features are off by default and require administrators to enable them. Organizations that have never enabled these features are not affected.

In practice, this affects a relatively small population of Windows 10 devices because both features were designed for Windows 10 and are already unavailable in Windows 11, version 24H2.

Platforms and services

• Microsoft Edge (including Edge for Business)
• Windows 10 devices using WIP or MDAG

What will happen

• Support for WIP and MDAG in Microsoft Edge will be removed.
• After rollout is complete, these capabilities will no longer function in Microsoft Edge 154 and later versions.
• Organizations using WIP or MDAG should transition to supported alternatives.
• Windows 11, version 24H2 devices are not expected to be affected because these capabilities have already been removed from the Windows platform.

[Action required and recommendations]

Review your current Microsoft Edge and Windows security configurations to determine whether WIP or MDAG is still in use.

If you use WIP, plan migration to:

• Microsoft Purview Information Protection.
• Microsoft Purview Data Loss Prevention and Endpoint DLP.
• Intune app protection policies, where appropriate.

If you use MDAG, evaluate supported Microsoft Edge security capabilities and alternative isolation technologies that meet your organization's requirements.

Plan migration activities before the rollout completes in late September 2026.

If you require additional time for migration, contact Microsoft Support or your Microsoft account team to discuss available options.

Learn more

• Announcing the sunset of Windows Information Protection (WIP) | Windows IT Pro Blog
• Browse more safely with Microsoft Edge | Microsoft Edge | Microsoft Learn
• Extended Security Updates (ESU) program for Windows 10 | What's new | Windows | Microsoft Learn
• Get started with endpoint data loss prevention | Microsoft Purview | Microsoft Learn
• Learn about data loss prevention | Microsoft Purview | Microsoft Learn
• Microsoft Edge security for your business | Microsoft Edge | Microsoft Learn
• Microsoft Edge support for Microsoft Defender Application Guard | Microsoft Edge | Microsoft Learn
• Microsoft Edge support for Microsoft Defender SmartScreen | Microsoft Edge | Microsoft Learn
• Protect your sensitive data with Microsoft Purview | Microsoft Purview | Microsoft Learn
• Understand Data Loss Prevention (DLP) in Microsoft Edge for Business | Microsoft Edge | Microsoft Learn
• Website typo protection | Microsoft
• Windows 10 Enterprise LTSC 2019 - Microsoft Lifecycle | Microsoft Learn
• Windows 10 Enterprise LTSC 2021 - Microsoft Lifecycle | Microsoft Learn

[Compliance considerations]

Question	Answer
Is administrative action required to maintain existing compliance or security controls?	Yes. Organizations using WIP or MDAG must assess current deployments and implement recommended replacement technologies before the retirement date to avoid disruption to existing security and data protection controls.