Table of Contents
In this article we will show you how to disable VBS in Windows 11. A security setting that is turned on by default in Windows 11 and at least some installations of Windows 10 could be slowing some computers‘ speed by up to 15%. VBS, which stands for “virtualization-based security,” lets Windows make a safe memory area that is separate from dangerous code. Hypervisor-Enforced Code Integrity (HVCI) is another built-in tool that uses VBS to stop drivers and software that aren’t signed or aren’t trusted from getting into memory. Even if malware gets past your antivirus software, VBS and HVCI add an extra layer of safety that limits how much damage it can do.
Unfortunately, VBS and HVCI slow down speed a lot, especially when playing games. In our tests, games ran up to 15% slower when these settings were on than when they were off. This is true even if you are using a fast RTX 4090 or an old graphics card. Before, upgrading from Windows 10 to Windows 11 did not turn on VBS. However, we’ve seen it turn on after updates, so you shouldn’t assume it’s turned off on your machine, even if you had it turned off before. We mentioned below are the ways how to disable VBS in Windows 11. If you want to know more information about this visit official Microsoft Website.
What is VBS (Virtualization-Based Security)?
Virtualization-Based Security (VBS) uses Windows Hypervisor to separate a section of main memory from the rest of the operating system. Windows stores important security solutions, like log-in passwords and code that is responsible for Windows security, in this safe, separate part of memory. Putting security solutions in a separate part of memory is done to protect them from exploits that try to get around these defences.
Malware often goes after the security features built into Windows to get to important system resources. For example, malicious code can get around Windows’ code authentication ways to gain access to resources at the kernel level. This problem is fixed by VBS, which separates Windows security methods from the rest of the OS. This makes Windows safer because vulnerabilities can’t get around the OS defences if they can’t reach them. Hypervisor-Enforced Code Integrity (HVCI) or Memory Integrity is one of these defences.
Reasons to Disable VBS in Windows 11
- Compatibility Issues: Some software or hardware components may not be compatible with VBS, causing functionality or performance issues. Disabling VBS can help resolve compatibility conflicts.
- Legacy Software: Older software applications or drivers that do not support VBS may encounter issues or fail to run properly. Disabling VBS can enable the use of such legacy software.
- Performance Optimization: In certain scenarios, disabling VBS can provide a performance boost by reducing the overhead associated with virtualization and security features.
- Testing and Development: Disabling VBS can be beneficial for testing purposes or when developing software that requires specific configurations without VBS enabled.
- System Resource Allocation: Virtualization features like VBS consume system resources, including CPU and memory. Disabling VBS can free up these resources for other demanding tasks or applications.
How to disable VBS in Windows 11
From the Windows Settings
- To open the Settings app, press Win + I.
- Click on the Privacy and Security choice in the menu on the left.
- Click Windows Security, then click the button that says “Open Windows Security.”
- It will start up the Windows Security tool. Select Device Security from the choices on the left.
- Find the part called “Core isolation,” and then click on “Core isolation details.”
- Now, see if the Memory Integrity switch is turned on or off. If it is turned on, click on it to turn it off.
- Start up your machine again. Try out some apps and games to see how well they work.
From the Local Group Policy Editor
You can turn off VBS for good with the help of the Group Policy Editor. Keep in mind that Windows 11 Home users can’t use GPE. To turn on GPE, you need to run a batch script. Check out our full guide to the Group Policy Editor to learn more about this. Follow these steps in the Group Policy Editor to turn off VBS:
- Open the Run command box by pressing Win + R.
- Type gpedit.msc and hit the enter key to open the Group Policy Editor.
- Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > System > Device Guard.
- Locate the Turn On Virtualization Based Security setting under Device Guard.
- Double-click on the Turn On Virtualization Based Security setting.
- Select the “Disabled” option in the policy box.
- Click the “Apply” button.
- Click the OK button to close the Group Policy Editor.
- Restart your machine to apply the changes.
- To turn VBS back on, select the “Enabled” option in the Turn On Virtualization Based Security setting.
With the Command Prompt
The command prompt is another way to turn off VBS. Remember that you have to give administrator permission before you can run the commands. Repeat the steps below at the command line to turn off VBS:
- To open the Run command box, press Win + R.
- Now type cmd and press Ctrl + Shift + Enter to open the command prompt with elevated rights.
- In the text area, type bcdedit /set hypervisorlaunchtype off.
- To carry out the order, press the enter key.
- Wait until the action is done.
- Start up your machine again. No more VBS will worry you.
Turn Off Windows’ Virtualization Features
Only if virtualization is turned on can VBS run on your machine. If you turn off everything in Windows that has to do with virtualization, VBS won’t work. So, you have to get rid of some Windows programs. Follow these steps to turn off Virtualization in Windows 11:
- Press the Win key, type “Control Panel,” and then open the first result.
- Find “Programs and Features” and then click “Uninstall a Program.”
- Go to the top left and click on the choice that says Turn Windows Features on or off.
- It will start up Windows Features. Find Microsoft Defender Application Guard, Virtual Machine Platform, and Windows Hypervisor Platform on the list.
- Uncheck all of these options, and then click OK. Wait for the setup to tell your device to turn off these features. To use the changes, click the Restart Now button.
- Check the Windows Features again to see if all the Virtualization features are turned off.
The risks of disabling VBS
Virtualization Based Security (VBS) can be turned off, which can have some risks and effects. Here are some things you should think about:
- Security holes: VBS adds a layer of security by isolating the most important parts and processes of a system. If you turn off VBS, your system might have security holes that make it more vulnerable to malware, attacks, and illegal access.
- Exploitation of Hardware Vulnerabilities: To improve security, VBS uses hardware virtualization features. If you turn off VBS, you might not be able to use these hardware-based security features, leaving your system open to hardware flaws being exploited.
- Compromised System Integrity: VBS helps keep the system’s integrity by protecting its most important parts and stopping illegal changes. Disabling VBS can make the system less secure by letting illegal changes happen, which could make the system unstable or vulnerable.
- Weakened Malware Defence: VBS is a key part of protecting against kernel-level attacks and other kinds of malware. If you turn off VBS, your system’s defences against these advanced dangers may be weakened. This makes it more likely that malware will get into your system and cause damage.
- Loss of Security-Related Features: If you turn off VBS, you may lose certain security-related features and functions that use VBS to work. This can make it hard for you to use better security methods and harder for you to protect your system effectively.
How to enable VBS again
- Click the “Start” button or press the “Windows” key on your computer.
- To open the Settings app, click on the gear–shaped Settings button in the Start menu.
- In the Settings app, go to the “System” section and click on it.
- In the tab on the left, click “Power & sleep.”
- Click the “Additional power settings” link at the bottom.
- The window for Power Options will open. In the left tab, click “Choose what the power buttons do.”
- Click the “Change settings that are currently unavailable” link on the next screen.
- Scroll down until you see the “Shutdown settings” part.
- “Turn on virtualization-based security (VBS)” will be a choice. Mark the box beside it.
- To use the changes, click the “Save changes” button.
Questions and Answers
Most regular users don’t need VBS protection, so the first thing to do after running Windows 11 or buying a computer with Windows 11 is to turn off VBS. This will make the computer run faster. VBS has a clear effect on how well games run, especially for people who use them.
Virtualization-based security, or VBS, uses hardware virtualization and the Windows hypervisor to create a virtual environment that is separated from the rest of the OS. This environment becomes the root of trust for the OS, assuming that the kernel can be broken.
Based on tests done by Tom’s Hardware, VBS could cause a 10% drop in gaming speed. In a new set of benchmarks, Tom’s Hardware tried 15 different games, ranging from Cyberpunk 2077 to Red Dead Redemption 2, with and without VBS.
Like macro viruses, script viruses attack your system by using computer languages that are already on it. Indeed, most macro viruses are VBA viruses. Visual Basic for Applications, or VBA, is the programming language that Microsoft uses for its programs like Word and Excel.