Skip to content

Detect and Disable Device Guard in Windows 10

Zero Tang edited this page May 29, 2020 · 4 revisions

In case you are using Windows 10, you might have accidentally enabled Device Guard that prevents you from running NoirVisor or other hypervisors like VMware Workstation.

Detect Device Guard

To diagnose the problem, run PowerShell and input following command:
Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard
Check the item VirtualizationBasedSecurityStatus. If it is 2 then DeviceGuard is running. You are supposed to turn it off.

Disable Device Guard

To disable the Device Guard, you are supposed to do the following:

  • Turn off Virtualization-Based Security.
  • Remove Hyper-V from system.
  • Reboot system.

Turn off Virtualization-Based Security.

Go to registry HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard.
Set every registry key values, including values in sub-keys, to zero. You may also turn off VBS via Group Policy Editor.

Remove Hyper-V

Go to Control Panel->Programs and Features->Turn Windows features on or off.
Uncheck the Hyper-V, Windows Subsystem for Linux, Virtual Machine Platform and Windows Hypervisor Platform option.

Reboot

After you removed Hyper-V, you should notice a dialog box asking you to reboot. Reboot system by clicking proper button.

If Hyper-V was not installed, simply reboot the system in regular method.
Check Device Guard running status by PowerShell command noted above again.

Further issues

If you find that the following steps fail to resolve the issue, and you find a way to resolve it. You may request edit by opening an issue in this repository.

Clone this wiki locally