EnableVirtualizationBasedSecurity

Use to enable virtualization-based security.

Values

Value Description

0

Disables virtualization-based security.

This is the default OS value.

1

Enables virtualization-based security.

If this setting is set to 0 or is not present, the system doesn't read other values and VSM is not enforced. In this case, existing BCD settings are used.

Parent Hierarchy

Microsoft-Windows-DeviceGuard-Unattend | EnableVirtualizationBasedSecurity

Valid Configuration Passes

offlineServicing

Applies To

Windows 10 Enterprise

Windows Server 2016

For a list of the Windows editions and architectures that this component supports, see Microsoft-Windows-DeviceGuard-Unattend.