Virtualization Based Security (VBS) is a robust security feature that uses hardware virtualization. Implemented by Microsoft, this “virtual secure mode” allows Windows to host various security solutions, ensuring that they are protected from potential vulnerabilities and malicious exploits. It acts as a shield, preventing unsigned drivers, codes, and software from infiltrating your system’s memory. This is achieved by creating a secure and separate segment of memory distinct from the main operating system. It provides an environment that hosts a variety of security protocols securely.
Originally introduced in Windows 10, VBS has made its way into Windows 11. Microsoft claims that with VBS activated, personal PCs can achieve the same security standards as commercial PCs. However, everything comes at a cost. Activating VBS can considerably slow down your PC. In fact, renowned platforms like PC Gamer and Tom’s Hardware have highlighted that enabling VBS could degrade your PC’s performance by up to 28%. For the average user, VBS’s extensive protection might be an overkill. Thus, if you’re aiming to harness the maximum performance from your Windows 11 PC, especially if you’re into gaming, deactivating VBS might be the way forward.
Continue reading to discover the steps to effectively turn off VBS on your Windows 11 machine.
How to Check Virtualization-Based Security (VBS) Status in Windows 11?
Do these steps to find whether Virtualization-Based Security (VBS) is enabled on your PC:-
Step 1. Hit the Windows + R keys on the keyboard to invoke the Run dialog box.
Step 2. Type msinfo32 in the Run box and then tap on Enter from the keyboard to open the System Information window.
Step 3. Pick System Summary on the left sidebar on the System Information window. Besides the “Virtualization-based security” item, you can visit its status. If it is “Running,” it means VBS is enabled on your Windows 11 PC. Though, if you find “Not enabled,” VBS is disabled on your PC.
How to Disable VBS by Removing Windows Components in Windows 11?
You can block the Windows Components responsible for VBS, and then VBS will be disabled automatically. Specifically, you need to disable Windows Hypervisor Platform, Virtual Machine Platform, and Microsoft Defender Application Guard on your Windows 11 PC.
Do these steps to turn off VBS by removing Windows Components in Windows 11:-
Step 1. Press the Windows + R keys simultaneously to open the Run dialog box.
Step 2. Type the following in the Run dialog box and hit Enter from the keyboard to call up the Windows Features dialog:-
Step 3. In the Windows Features, uncheck Windows Hypervisor Platform, Virtual Machine Platform, and Microsoft Defender Application Guard (If available, you will find Microsoft Defender Application Guard under Media Features).
Step 4. Hit OK.
Step 5. Reboot your Windows 11 machine to apply the changes.
How to Turn Off VBS (Virtualization Based Security) from Windows 11 Settings?
Do these steps to block the VBS via Windows 11 Settings:-
Step 1. Open Settings.
Step 2. Pick the Privacy & security option in the left sidebar of the Settings window.
Step 3. Tap on the Windows Security tile.
Step 4. Click the Open Windows Security button.
Step 5. Switch to the Device security tab on the Windows Security window.
Step 6. Tap on the Core isolation details link on the middle pane.
Step 7. In the following screen, turn off the toggle switch Memory Integrity to disable the feature.
Step 8. Reboot your computer to apply the changes.
After that, open some apps and games to check their performance.
How to Disable VBS using Command Prompt?
Do these steps to turn off VBS via Command Prompt:-
Step 2. Type the following in the Command Prompt window and hit the Enter key on the keyboard:-
bcdedit /set hypervisorlaunchtype off
Step 3. Reboot your PC to apply the changes.
How to Disable VBS using Local Group Policy Editor?
Do these steps to disable or turn off VBS through the Local Group Policy Editor:-
Step 1. Open Local Group Policy Editor.
Step 2. Browse to the following path in the left sidebar:-
Computer Configuration > Administrative Templates > System > Device Guard
Step 3. Double-click on the policy name Turn On Virtualization Based Security on the opposite side.
Step 4. Pick Disabled.
Step 5. Hit Apply.
Step 6. Hit OK.
Step 7. Restart your PC.
How to Disable VBS through Registry Editor?
Do these steps to turn off VBS using Registry Editor:-
Step 1. Open Registry Editor.
Step 2. Browse to the following path in the left sidebar of the Registry Editor window:-
Step 3. Right-click on the DeviceGuard folder to pick New > DWORD (32-bit) Value.
Step 4. Name the newly created REG_DWORD as EnableVirtualizationBasedSecurity.
Step 5. Double-click on the EnableVirtualizationBasedSecurity REG_DWORD to set its “Value data” to the following:-
- 0: To block VBS.
- 1: To allow VBS.
Step 6. Reboot your PC to apply the changes.
Virtualization-Based Security (VBS) is an integral feature implemented by Microsoft to enhance system security. However, while it offers a heightened layer of protection, it can potentially hamper the performance of your PC. For users seeking optimized performance over intensive security, especially those into gaming or other resource-heavy tasks, disabling VBS may be beneficial. The provided instructions above guide users on how to both check and disable the VBS feature through multiple methods, ensuring flexibility and options tailored to individual user expertise and preferences.