Share via

I want to disable VBS in windows 11.

rikutotomizuka-6197 40 Reputation points
2025-02-24T13:47:42.1266667+00:00

I have tried every way to disable VBS(Virtualization-based security) on the internet. It is possible to temporarily disable VBS, but when I reboot, it is running again.

However, I was able to discover why it is not permanently disabled. It is because even if I set the “Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\CredentialGuard\Enabled” to 0, it reverts to 1 after a reboot.

Is there any way to permanently set this value to 0?

I don't know if this is relevant, but I will go ahead and tell you that it is probably not possible to disable the “tamper protection” feature through AD settings.

Windows for business | Windows Client for IT Pros | User experience | Other

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jose Benjamin Solis Nolasco 7,996 Reputation points Volunteer Moderator
    2025-02-24T15:25:01.3133333+00:00

    Welcome to the Microsoft Q&A. Thank you for reaching out & I hope you are doing well.

    Is your PC being domain joined must be a Policy however my favorite option to diable is using the BIOS, I made research for you, and you shall take a look at these.

    1. Disable VBS via the BIOS:
      • Restart your computer and enter the BIOS/UEFI settings (usually by pressing F2, F10, Delete, or Esc during startup).
      • Look for virtualization settings and disable them. This might be labeled as Intel VT-x, AMD-V, or Virtualization Technology.
      • Save the changes and exit the BIOS/UEFI settings.
      • Restart your computer.
    2. Turn off Windows Virtualization Features:
      • Open the Control Panel.
      • Click on Programs and then Turn Windows features on or off.
      • Uncheck the following features:
      • Hyper-V
      • Virtual Machine Platform
      • Windows Hypervisor Platform
      • Click OK and restart your computer.
    3. Use Command Prompt:
      • Open Command Prompt as an administrator.
      • Run the following commands: shell 
             bcdedit /set hypervisorlaunchtype off
      • Restart your computer.

    If this answer solves your issue, please vote for it so other community members know that this is a quality answer.

    2 people found this answer helpful.
  2. Anonymous
    2025-02-25T07:59:11.55+00:00

    Hello

    Thank you for posting in Q&A forum.

    Here are some additional steps to you can try to disable VBS:

    1. Disable Memory Integrity:

    • Press Win + I to open Settings.

    • Go to Privacy & security > Windows Security > Device security.

    • Click on Core isolation details.

    • Toggle off Memory integrity.

    • Restart your computer.

    1. Disable VBS via Group Policy Editor (Note: This is not available in Windows 11 Home):

    • Press Win + R, type gpedit.msc, and press Enter.

    • Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > System > Device Guard.

    • Double-click on Turn On Virtualization Based Security.

    • Select Disabled, then click Apply and OK.

    • Restart your computer.

    I hope the information above is helpful.

    If you have any questions or concerns, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.