Virtualization Based Security

🔧 How to Disable VBS in BIOS

---

📌 Step 1: Check Whether VBS is Enabled

Before changing anything, verify if VBS is enabled:

1. Press Windows + R, type msinfo32, and press Enter.

2. In the System Information window, scroll down and look for:

   • Virtualization-based Security → If it says "Running", it's enabled.

   • Device Guard and Credential Guard may also be relevant.

---

🔧 Step 2: Turn Off Core Isolation in Windows (Optional but Recommended)

1. Open Settings → Privacy & Security → Windows Security.

2. Click Device Security.

3. Under Core Isolation, click Core isolation details.

4. Turn Memory Integrity to Off.

5. Reboot the system.

---

🖥 Step 3: Enter BIOS/UEFI Settings

1. Reboot your PC.

2. During startup, press the correct key to enter BIOS/UEFI (common keys: Del, F2, F10, Esc, or F12 depending on your motherboard or PC brand).

3. If unsure, look for a message like “Press F2 to enter Setup” during boot.

---

⚙️ Step 4: Disable Virtualization Features in BIOS

Inside the BIOS/UEFI interface:

1. Navigate to Advanced, Security, or CPU Configuration section (varies by manufacturer).

2. Look for and disable the following options:

   • Intel Virtualization Technology (VT-x) or AMD-V

   • Intel VT-d (for I/O virtualization)

   • SVM Mode (on AMD systems)

   • Memory Protection Extensions (MPX)

   • Hyper-V or Virtualization Support

📌 Tip: The exact names may differ by motherboard (check manual or on-screen help).

1. Save changes and exit (usually F10, then confirm "Yes").

---

🔁 Step 5: Reboot and Confirm

1. After the system restarts, open msinfo32 again.

2. Confirm that Virtualization-based Security is now Not enabled.

---

📝 Additional Notes

• On some systems (like laptops from Dell, HP, Lenovo), BIOS settings may be under vendor-specific menus like:

  • System Configuration

  • Advanced Security

  • Virtualization Technology

• You might also need to disable Secure Boot in BIOS if it's tied to VBS.

• If the VBS settings still persist, you may need to adjust Group Policy or Registry settings in Windows. Let me know if you need those steps too.