From the Kaspersky article: The only browser that does this by default is Edge. In IE11, advanced EPM has to enabled. In Chrome, the applicable option for same has to be enable. I don't know if FireFox supports AppContainer at all. Additionally in IE11, only the spawned child instance is running in AppContainer; the parent process is not. I will also state this. If you are using Edge as your browser, I strongly advise you run as a SUA.