9 Replies Latest reply on Feb 27, 2019 7:50 AM by mksft

Disabling Windows Defender Credential Guard helped not

mksft Jan 31, 2019 1:50 PM

Hi!

I updated Windows 1803 to 1809 and removed Hyper-V and all its components.

When I started virtual machine it reports incompatibility with Windows Defender Credential Guard.

So, I disabled it, then executed commands in instructions, reboot and confirmed at boot.

I tried again start virtual machine, nothing helped, I did it else one time - result isthe same.

I'm using VMware 15 Pro.

Where can be problem?

Thank you for all suggestions and help.

Miro

1. Re: Disabling Windows Defender Credential Guard helped not

Mohanr23 Feb 2, 2019 8:31 PM (in response to mksft)

I am facing same problem any ausuggestio for this

Thanks,
Murali
Like Show 0 Likes(0)

Actions
2. Re: Disabling Windows Defender Credential Guard helped not

bluefirestorm Feb 2, 2019 9:54 PM (in response to mksft)

I assume that you already followed the link and followed the steps.

http://www.vmware.com/go/turnoff_CG_DG
https://kb.vmware.com/s/article/2146361

One additional thing to check is whether Core Memory Isolation "Memory integrity"is turned on.

Go to Windows Security -> Device Security -> Core Isolation -> Core isolation details

Make sure that "Memory integrity" is turned off.
Like Show 0 Likes(0)

Actions
3. Re: Disabling Windows Defender Credential Guard helped not

mksft Feb 3, 2019 10:43 AM (in response to bluefirestorm)

Ok, but how to find this settings?
I'm lost - Windows Security is possible to find, but nowhere Core Isolation also details and Memory Integrity...

Thank you for help.
Miro
Like Show 0 Likes(0)

Actions
4. Re: Disabling Windows Defender Credential Guard helped not

bluefirestorm Feb 3, 2019 12:52 PM (in response to mksft)

I think it used to be called Windows Defender Security Center. With Windows 10 1809, it looks like it is just called Windows Security.

You should see the shield (hopefully with a green check) at the System Notification area. You double-click that shield icon and get to the Core isolation settings.

You can look at this link
https://www.windowscentral.com/whats-new-windows-defender-security-center-april-2018-update

I also pasted screenshots below.
The icon in the notification area.
The settings itself.
Like Show 0 Likes(0)

Actions
5. Re: Disabling Windows Defender Credential Guard helped not

mksft Feb 3, 2019 3:18 PM (in response to bluefirestorm)

Yes, I found it.
But found disabled.
I tried to enable and disable again - Windows reports: Your device is not compatible, Core isolation cannot work!
BUT - at device security is message:
Virtualization based security is running to prevent base device components (last word I'm not sure if is translated to English correctly).

I visited GPEDIT and Virtualization Based Security is disabled.

Where is now problem?

Thank you.
Miro
Like Show 0 Likes(0)

Actions
6. Re: Disabling Windows Defender Credential Guard helped not

mksft Feb 6, 2019 4:25 PM (in response to mksft)

So, is it not possible to get VMware to work?

Miro
Like Show 0 Likes(0)

Actions
7. Re: Disabling Windows Defender Credential Guard helped not

bluefirestorm Feb 6, 2019 6:01 PM (in response to mksft)

Before making any change, was the Memory Integrity "On" or "Off"? If the Windows 10 host belongs to a corporate network with domain policies, you may want to check with the Domain Admin(s) if these are being enforced at the domain GPO level.

If you are running an Insider build with Windows Sandbox enabled, take a look at this thread.

Windows Sandbox Feature enables windows defender credential guard feature sets. Does not play well with VMware Workstation
Like Show 0 Likes(0)

Actions
8. Re: Disabling Windows Defender Credential Guard helped not

mksft Feb 7, 2019 2:33 AM (in response to bluefirestorm)

1. Core isolation was turned off.
2. No part of corporate network or Insider buid

So, why problem belongs?

Miro
Like Show 0 Likes(0)

Actions
9. Re: Disabling Windows Defender Credential Guard helped not

mksft Feb 27, 2019 7:50 AM (in response to mksft)

Really nobody can help?

Miro
Like Show 0 Likes(0)

Actions