How to disable "Device Guard"

Question

How to disable "Device Guard"

Anonymous

Hi,

I am trying to install a software but i have to turn off "Device Guard" in my surface pro before i can do so.

Please provide steps on how to do so.

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

2 answers

Answer 1

you can disable via group policy editor

type GPEDIT.MSC in cmd and enter

expand computer configuration \administrative templates \system\ device guard \

right click on turn on virtualization based security , choose edit , then choose disabled

click apply , click ok, close group policy editor

type GPUPDATE /FORCE in cmd and enter

wait for 2 minutes to complete , then restart the windows

Answer 2

Hi SugarySalt,

Device Guard is a set of hardware and OS technologies that when configured together, allow enterprises to "lock down" the system and only allow authorized applications or programs to run. With that being said, it's best that you reach out to your local IT personnel on how to change your Device Guard's settings so that your software can be allowed to run on your Surface Pro.

If you're the local IT of your organization, I recommend that you raise your concern at our TechNet forums. TechNet is a community of IT professionals who share and discuss IT related concerns and on how to resolve them. Please click on this link to be redirected to the web page and then either look for similar threads or create a new thread so that the community can engage with your concern.

If you have additional questions, please let me know by replying to this thread. This way, I'll get notified and respond back to you as soon as I can.