VBS is not disabled on Windows 11, version 24H2, OS Build 26100.2161

Question

VBS is not disabled on Windows 11, version 24H2, OS Build 26100.2161

Edy Cumar 15

Hi,

I have tried all the methods to disable VBS, but it seems that Windows does not respond to it, and remains RUNNING in System Information.

PROGRAM

SYSTEM

CORE

REGEDIT

PROGRAM2

Christophe Marti 10 Reputation points

2024-11-03T03:45:42.89+00:00

Hi, I experience the same problem. For my case nested virtualisation (esxi, hyper-v) with VMWare Workstation or VirtualBox doesn't work
Stan Kasper 1,491 Reputation points

2024-11-13T19:24:29.08+00:00

I've done all of the above. The only solution I have so far is to go into BIOS and disable 'secure boot'. When that is disable VBS does not run. But this is a bad solution. Looking for a better one.
Yevhen 0 Reputation points

2024-12-02T01:37:49.6766667+00:00

Same problem, Microsoft give us an answer.
Mahmoud Kadoura Microsoft 5 Reputation points

2024-12-19T15:24:42.0666667+00:00
I am trying to build nested VMs in VMware workstation but can't.

disabled secure boot in BIOS.

disabled Memory integrity.

disabled device guard

removed all virtualization features

ran: bcdedit /set hypervisorlaunchtype off

still I am not able to disable VBS, it always running when I start my PC. I am using windows 11 pro 24H2 build 26100.2605. any help is appreciated.

thanks.
Robert Haugen 0 Reputation points

2024-12-19T22:21:20.62+00:00

I have the same problem. Microsoft should make this easier. I've tried the same settings without getting rid of this shit.
CPD 5 Reputation points

2025-03-11T15:30:25.0866667+00:00

I've tried all the tricks documented here and elsewhere (registry, gpedit, bcdedit, PIN, core isolation etc.). None of it works, VBS keeps running and I'm unable to use nested virtualization any longer.

Very disappointing ...
AM 0 Reputation points

2025-05-19T12:19:50.8966667+00:00

I had the same problem. Sometimes i get it of for 1 till 3 restarts, but then its on again.

3 answers

Your answer

Christophe Marti 10 Reputation points

2024-11-03T03:45:42.89+00:00

Hi, I experience the same problem. For my case nested virtualisation (esxi, hyper-v) with VMWare Workstation or VirtualBox doesn't work
Stan Kasper 1,491 Reputation points

2024-11-13T19:24:29.08+00:00

I've done all of the above. The only solution I have so far is to go into BIOS and disable 'secure boot'. When that is disable VBS does not run. But this is a bad solution. Looking for a better one.
Yevhen 0 Reputation points

2024-12-02T01:37:49.6766667+00:00

Same problem, Microsoft give us an answer.
Mahmoud Kadoura Microsoft 5 Reputation points

2024-12-19T15:24:42.0666667+00:00

I am trying to build nested VMs in VMware workstation but can't.

disabled secure boot in BIOS.

disabled Memory integrity.

disabled device guard

removed all virtualization features

ran: bcdedit /set hypervisorlaunchtype off

still I am not able to disable VBS, it always running when I start my PC. I am using windows 11 pro 24H2 build 26100.2605. any help is appreciated.

thanks.
Robert Haugen 0 Reputation points

2024-12-19T22:21:20.62+00:00

I have the same problem. Microsoft should make this easier. I've tried the same settings without getting rid of this shit.
CPD 5 Reputation points

2025-03-11T15:30:25.0866667+00:00

I've tried all the tricks documented here and elsewhere (registry, gpedit, bcdedit, PIN, core isolation etc.). None of it works, VBS keeps running and I'm unable to use nested virtualization any longer.

Very disappointing ...
AM 0 Reputation points

2025-05-19T12:19:50.8966667+00:00

I had the same problem. Sometimes i get it of for 1 till 3 restarts, but then its on again.

Answer 1

Many thanks to QuestYouCraft. This was the missing key I was looking for!

Initial situation:
Brand new, clean install of 24H2. VBS and Hyper-V was enabled by default.

Solution:

Turned off Core-Isolation Memory-Integrity (Memory-Integrity only)
Reg-Key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\DeviceGuard\EnableVirtualizationBasedSecurity" -> 0
Reg-Key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\WindowsHello\Enabled" -> 0

Restart and resetting Windows-Hello PIN (Windows prompts for it) - and that's it.

Sad that Microsoft is withholding this simple information from its loyal customers. Took a lot of time to gather the right and working informationen as there are so many posts in so many communites (including this one) about the topic without any satisfactory procedure or result.

Best regards

vitortechno 0 Reputation points

2025-06-19T22:47:39.6566667+00:00

Thank you man! Finally my problem with this was resolved. Really sad with Microsift hide the simple information for us. Thank youa lot!

Answer 2

QuestYouCraft 35

Apparently, Microsoft employs such unique people that they didn't bother to explain that now Windows Hello security, starting with version 24H2, is based on VBS. To disable VBS, all you had to do was disable Windows Hello in Device Guard in the registry in this way:

On the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\WindowsHello path, you need to change the value of the DWORD parameter "Enabled" to 0
After restarting your PC, VBS should be turned off
At the same time, oddly enough, the ability to log in to an account via Windows Hello (in particular, using a PIN code) still remains

Source: https://www.reddit.com/r/Amd/comments/1fums7b/comment/lycwbc2

Anonymous

2025-01-16T21:09:15.2433333+00:00
Many thanks to QuestYouCraft. This was the missing key I was looking for!

Initial situation:
Brand new, clean install of 24H2. VBS and Hyper-V was enabled by default.

Solution:

Turned off Core-Isolation Memory-Integrity (Memory-Integrity only)

Reg-Key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\DeviceGuard\EnableVirtualizationBasedSecurity" -> 0

Reg-Key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\WindowsHello\Enabled" -> 0

Restart and resetting Windows-Hello PIN (Windows prompts for it) - and that's it.

Sad that Microsoft is withholding this simple information from its loyal customers. Took a lot of time to gather the right and working informationen as there are so many posts in so many communites (including this one) about the topic without any satisfactory procedure or result.

Best regards
Santiago Bósquez 0 Reputation points

2025-02-19T15:05:03.4066667+00:00

Hello i have windows 11 home 24h2. please be carefull if you only have sign in option with pin and finger print.

i already do the windows hello enable = 0 step and i lost the way to login on my windows.

the system request to enter the pin again but, the service give an error and it doesnt work.

at the end i restore my OS because of that.

Regards.
Nova Tian 11 Reputation points Microsoft External Staff

2025-10-05T20:42:50.7466667+00:00
On the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\WindowsHello path, you need to change the value of the DWORD parameter "Enabled" to 0

This is the only solution.

All old ways are not working anymore.

Thank you so much!

Answer 3

Jing Zhou 7,810 Microsoft External Staff

Hello,

Thank you for posting in Q&A forum.

To further troubleshoot this issue, please kindly try below steps:

1.Open Group Policy Editor and navigate to Computer Configuration > Administrative Templates > System > Device Guard > set Turn On Virtualization Based Security as Disabled and restart Your computer.

2.Open CMD window and run below command:

bcdedit /set hypervisorlaunchtype off

to disable the hypervisor and VBS at the same time.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best regards，

Jill Zhou

If the Answer is helpful, please click "Accept Answer" and upvote it.

Edy Cumar 15 Reputation points

2024-11-04T21:48:16.9+00:00

Hi,

Attached images, I did what was indicated and the process is still running.