Disable Windows Hypervisor
copy-pasted from: https://community.broadcom.com/vmware-cloud-foundation/discussion/how-to-disable-hyper-v-in-windows-11-24h2
Step 1: Stop Any Currently Running Hyper-V Services
1. Click on the Start menu.
2. Type services (without quotes) and press [ENTER].
3. In the Services window, browse through the list and look for any services that include "Hyper-V" (e.g., "HV Host Service").
4. If any of these services are running, right-click on them and select Stop.
5. Close the Services window.
________________________________________
Step 2: Ensure Hyper-V and Related Features Are Not Installed
1. Click on the Start menu.
2. Type Features (without quotes) and select "Turn Windows Features on or off".
3. In the Windows Features window, ensure the following options are unchecked:
o Hyper-V (including all sub-items).
o Windows Hypervisor Platform.
o Linux subsystem for windows
4. Click OK and wait for the changes to apply.
5. Restart your computer if prompted.
________________________________________
Step 3: Disable "hypervisorlaunchtype"
1. Click on the Start menu.
2. Type powershell (without quotes), right-click on Windows PowerShell, and select Run as administrator.
3. In the PowerShell window, type the following command and press [ENTER]:
4. bcdedit /set hypervisorlaunchtype off
5. Close the PowerShell window.
________________________________________
Step 4: Disable Device Guard (If Applicable)
Note:
• This step may not apply to all versions of Windows.
• The Group Policy Editor (gpedit.msc) is not available in Windows 11 Home.
1. Click on the Start menu.
2. Type gpedit.msc (without quotes) and press [ENTER].
3. In the Group Policy Editor, navigate to:
4. Local Computer Policy > Computer Configuration > Administrative Templates > System > Device Guard
5. Double-click on "Turn on Virtualization Based Security".
6. Select Disabled and click OK.
________________________________________
Step 5: Disable "Memory Integrity" in Core Isolation
1. Click on the Start menu.
2. Type core isolation (without quotes) and press [ENTER].
3. In the Core Isolation window, ensure that "Memory Integrity" is turned Off.
4. Close the window.
________________________________________
Step 6: Mandatory step for Windows 11 24H2
Windows 11 24H2 has a known issue where Hyper-V might still interfere even after following the above steps. To resolve this, you'll need to use the Microsoft Device Guard and Credential Guard Hardware Readiness Tool:
1. Download the Device Guard and Credential Guard hardware readiness tool from Microsoft.
o https://www.microsoft.com/en-us/download/details.aspx?id=53337
2. Extract the downloaded ZIP file.
3. Use the tool to disable Device Guard and Credential Guard:
o Open PowerShell window as an administrator.
o Navigate to the folder where you extracted the tool.
o Firs run this command to get Execution Policy:
o Set-ExecutionPolicy Unrestricted -Scope Process
o Now run the script with the -disable parameter to disable Device and Credential Guard
o DG_Readiness_Tool_v3.6.ps1 -Disable
4. Reboot your computer.
5. During the boot process, Windows will ask you to confirm the changes. Follow the on-screen instructions to proceed (Just press F3).
Note: Disabling Device Guard and Credential Guard will temporarily disable your Windows Hello PIN. However, you can re-enable it later without any issues.
________________________________________
Step 7: Confirm Hyper-V is Fully Disabled
1. After rebooting, open a PowerShell window as an administrator.
2. Run the following command to ensure Hyper-V is fully disabled:
3. bcdedit /set hypervisorlaunchtype off
4. Reboot your computer again.
Step 1: Stop Any Currently Running Hyper-V Services
1. Click on the Start menu.
2. Type services (without quotes) and press [ENTER].
3. In the Services window, browse through the list and look for any services that include "Hyper-V" (e.g., "HV Host Service").
4. If any of these services are running, right-click on them and select Stop.
5. Close the Services window.
________________________________________
Step 2: Ensure Hyper-V and Related Features Are Not Installed
1. Click on the Start menu.
2. Type Features (without quotes) and select "Turn Windows Features on or off".
3. In the Windows Features window, ensure the following options are unchecked:
o Hyper-V (including all sub-items).
o Windows Hypervisor Platform.
o Linux subsystem for windows
4. Click OK and wait for the changes to apply.
5. Restart your computer if prompted.
________________________________________
Step 3: Disable "hypervisorlaunchtype"
1. Click on the Start menu.
2. Type powershell (without quotes), right-click on Windows PowerShell, and select Run as administrator.
3. In the PowerShell window, type the following command and press [ENTER]:
4. bcdedit /set hypervisorlaunchtype off
5. Close the PowerShell window.
________________________________________
Step 4: Disable Device Guard (If Applicable)
Note:
• This step may not apply to all versions of Windows.
• The Group Policy Editor (gpedit.msc) is not available in Windows 11 Home.
1. Click on the Start menu.
2. Type gpedit.msc (without quotes) and press [ENTER].
3. In the Group Policy Editor, navigate to:
4. Local Computer Policy > Computer Configuration > Administrative Templates > System > Device Guard
5. Double-click on "Turn on Virtualization Based Security".
6. Select Disabled and click OK.
________________________________________
Step 5: Disable "Memory Integrity" in Core Isolation
1. Click on the Start menu.
2. Type core isolation (without quotes) and press [ENTER].
3. In the Core Isolation window, ensure that "Memory Integrity" is turned Off.
4. Close the window.
________________________________________
Step 6: Mandatory step for Windows 11 24H2
Windows 11 24H2 has a known issue where Hyper-V might still interfere even after following the above steps. To resolve this, you'll need to use the Microsoft Device Guard and Credential Guard Hardware Readiness Tool:
1. Download the Device Guard and Credential Guard hardware readiness tool from Microsoft.
o https://www.microsoft.com/en-us/download/details.aspx?id=53337
2. Extract the downloaded ZIP file.
3. Use the tool to disable Device Guard and Credential Guard:
o Open PowerShell window as an administrator.
o Navigate to the folder where you extracted the tool.
o Firs run this command to get Execution Policy:
o Set-ExecutionPolicy Unrestricted -Scope Process
o Now run the script with the -disable parameter to disable Device and Credential Guard
o DG_Readiness_Tool_v3.6.ps1 -Disable
4. Reboot your computer.
5. During the boot process, Windows will ask you to confirm the changes. Follow the on-screen instructions to proceed (Just press F3).
Note: Disabling Device Guard and Credential Guard will temporarily disable your Windows Hello PIN. However, you can re-enable it later without any issues.
________________________________________
Step 7: Confirm Hyper-V is Fully Disabled
1. After rebooting, open a PowerShell window as an administrator.
2. Run the following command to ensure Hyper-V is fully disabled:
3. bcdedit /set hypervisorlaunchtype off
4. Reboot your computer again.
---
All steps in one go! Otherwise settings might get undone upon reboot...
Hypervisor load status: Get-WinEvent -LogName system | Where-Object { $_.ProviderName -like 'Microsoft-Windows-Hyper*' }
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\CredentialGuard]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\KeyGuard\Status]
"KeyGuardEnabled"=dword:00000000
"CredGuardEnabled"=dword:00000000
(Look for other enablements within Control\DeviceGuard -- set to '0' where found)
Key path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
Key name: LsaCfgFlags
Type: REG_DWORD
Value: 0
Key path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard
Key name: LsaCfgFlags
Type: REG_DWORD
Value: 0
Clear this?: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0\IsolatedCredentialsRootSecret
No comments to display
No comments to display