VMware Communities
mksft
Enthusiast
Enthusiast

Disabling Windows Defender Credential Guard helped not

Hi!

I updated Windows 1803 to 1809 and removed Hyper-V and all its components.

When I started virtual machine it reports incompatibility with Windows Defender Credential Guard.

So, I disabled it, then executed commands in instructions, reboot and confirmed at boot.

I tried again start virtual machine, nothing helped, I did it else one time - result isthe same.

I'm using VMware 15 Pro.

Where can be problem?

Thank you for all suggestions and help.

Miro

Reply
0 Kudos
9 Replies
Mohanr23
Contributor
Contributor

I am facing same problem any ausuggestio for this

Thanks,

Murali

Reply
0 Kudos
bluefirestorm
Champion
Champion

I assume that you already followed the link and followed the steps.

http://www.vmware.com/go/turnoff_CG_DG

https://kb.vmware.com/s/article/2146361

One additional thing to check is whether Core Memory Isolation "Memory integrity"is turned on.

Go to Windows Security -> Device Security -> Core Isolation -> Core isolation details

Make sure that "Memory integrity" is turned off.

Reply
0 Kudos
mksft
Enthusiast
Enthusiast

Ok, but how to find this settings?

I'm lost - Windows Security is possible to find, but nowhere Core Isolation also details and Memory Integrity...

Thank you for help.

Miro

Reply
0 Kudos
bluefirestorm
Champion
Champion

I think it used to be called Windows Defender Security Center. With Windows 10 1809, it looks like it is just called Windows Security.

You should see the shield (hopefully with a green check) at the System Notification area. You double-click that shield icon and get to the Core isolation settings.

You can look at this link

https://www.windowscentral.com/whats-new-windows-defender-security-center-april-2018-update

I also pasted screenshots below.

The icon in the notification area.

pastedImage_0.png

The settings itself.

pastedImage_1.png

Reply
0 Kudos
mksft
Enthusiast
Enthusiast

Yes, I found it.

But found disabled.

I tried to enable and disable again - Windows reports: Your device is not compatible, Core isolation cannot work!

BUT - at device security is message:

Virtualization based security is running to prevent base device components (last word I'm not sure if is translated to English correctly).

I visited GPEDIT and Virtualization Based Security is disabled.

Where is now problem?

Thank you.

Miro

Reply
0 Kudos
mksft
Enthusiast
Enthusiast

So, is it not possible to get VMware to work?

Miro

Reply
0 Kudos
bluefirestorm
Champion
Champion

Before making any change, was the Memory Integrity "On" or "Off"? If the Windows 10 host belongs to a corporate network with domain policies, you may want to check with the Domain Admin(s) if these are being enforced at the domain GPO level.

If you are running an Insider build with Windows Sandbox enabled, take a look at this thread.

Windows Sandbox Feature enables windows defender credential guard feature sets. Does not play well w...

Reply
0 Kudos
mksft
Enthusiast
Enthusiast

1. Core isolation was turned off.

2. No part of corporate network or Insider buid

So, why problem belongs?

Miro

Reply
0 Kudos
mksft
Enthusiast
Enthusiast

Really nobody can help?

Miro

Reply
0 Kudos