I want to disable VBS in windows 11.

Question

I have tried every way to disable VBS(Virtualization-based security) on the internet. It is possible to temporarily disable VBS, but when I reboot, it is running again.

However, I was able to discover why it is not permanently disabled. It is because even if I set the “Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\CredentialGuard\Enabled” to 0, it reverts to 1 after a reboot.

Is there any way to permanently set this value to 0?

I don't know if this is relevant, but I will go ahead and tell you that it is probably not possible to disable the “tamper protection” feature through AD settings.

Answer 1

Welcome to the Microsoft Q&A. Thank you for reaching out & I hope you are doing well.

Is your PC being domain joined must be a Policy however my favorite option to diable is using the BIOS, I made research for you, and you shall take a look at these.

1. Disable VBS via the BIOS:
   • Restart your computer and enter the BIOS/UEFI settings (usually by pressing F2, F10, Delete, or Esc during startup).
   • Look for virtualization settings and disable them. This might be labeled as Intel VT-x, AMD-V, or Virtualization Technology.
   • Save the changes and exit the BIOS/UEFI settings.
   • Restart your computer.
2. Turn off Windows Virtualization Features:
   • Open the Control Panel.
   • Click on Programs and then Turn Windows features on or off.
   • Uncheck the following features:
   • Hyper-V
   • Virtual Machine Platform
   • Windows Hypervisor Platform
   • Click OK and restart your computer.
3. Use Command Prompt:
   • Open Command Prompt as an administrator.
   • Run the following commands: shell

          bcdedit /set hypervisorlaunchtype off
     

   • Restart your computer.

If this answer solves your issue, please vote for it so other community members know that this is a quality answer.

Answer 2

Hello

Thank you for posting in Q&A forum.

Here are some additional steps to you can try to disable VBS:

1. Disable Memory Integrity:

• Press Win + I to open Settings.

• Go to Privacy & security > Windows Security > Device security.

• Click on Core isolation details.

• Toggle off Memory integrity.

• Restart your computer.

2. Disable VBS via Group Policy Editor (Note: This is not available in Windows 11 Home):

• Press Win + R, type gpedit.msc, and press Enter.

• Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > System > Device Guard.

• Double-click on Turn On Virtualization Based Security.

• Select Disabled, then click Apply and OK.

• Restart your computer.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.