Reliable way to permanently disable VBS

Question

Greetings,

i'm writing this for help with the request in the title.

For context i have a laptop workstation with Windows 11 24H2 and the latest release of Oracle VIrtualbox, after updating to 24H2 the VMs started being sluggish and crashing and the only fix i found was to disable "Virtualization Based Security".

The issue is that after every reboot this security feature re-enables itself, no matter what i try.

I've searched for possible fixes on the internet before writing this but to no avail, i'll list some of them at the end of the message.

I kindly ask for nay kind of help since this device is no longer working like it needs to and the only other option left for me is to downgrade to Windows 10 22H2.

Fixes tried:

• Adding registry keys to disable DevieGuard, Hyper-V and WindowsHello
• Disabled Core Isolation and Memory Integrity
• Disabled Secure Boot, TPM and security based virtualization via BIOS settings
• ran the disabledeviceguard.ps1 script (Which works, but only until the next reboot)
• disable the startup of HyperVisor with cdedit /set hypervisorlaunchtype off

Answer 1

Hi There,

Thanks for the follow up response and clarification that you are a technician.

Since you already tried the basic standard process. Let us work on the next step:

⬤ Use Task Scheduler to run the script at startup (with admin rights)

You can schedule the script once as admin so it runs at every boot without requiring the user to have admin privileges.

► Open Task Scheduler

• Press Windows + S
• Then type: Task Scheduler
• And open

► Create Task

• Click Create Task
• not Basic Task

► Set up the Task

• Under General tab
• At startup
• Name: Disable VBS
• Then select
Run whether user is logged on or not
• Use your admin account
(or SYSTEM account)

► Add a Trigger

• Go to Triggers tab
• Click New
• Then choose At startup
• Click OK

► Under Actions

• Go to the Actions tab
• Click New
• Choose Start a Program
• Then type: powershell.exe
• Add arguments:
-ExecutionPolicy Bypass -File "C:\Scripts\DisableVBS.ps1"
(Update the path to match your script location)

► Save the Task

• Click OK
• Then enter admin password if asked

Hopefully this solves the issue for now.

Best Regards,
Kelvin || Independent Adviser

Thank you kindly for your support, while this still needs to be checked by Microsoft for a full fix, your procedure is the only one that actually manages to disable VBS for a longer period of time.
I had to tinker a little in he task manager in order for it to fully recognize the scripts and permissions but it worked in the end.
Right now the user is only presented with a DeviceGuard Disable confirmation screen before Windows is loaded, but after confirming that no admin passwords are asked and the VBS is permanently in it's "Not Enabled" State.
Once again thank you for your time and your help, i was losing sanity trying to get VB and VMWare to work in Windows 11.