Friday 24 August 2018

Credential Guard/Device Guard preventing Workstation VMs to power on Windows 10

Like most people we all have VMware workstation on our laptops so that we can test new software or changes before going live. Recently my company enabled Credential Guard/Device Guard and it stopped my VMs from powering on. There is an article from VMware which documents how to turn off Credential Guard/Device Guard which works like a treat. Do follow all the steps especially if you have bit locker enabled on your laptop. If you don't remove Hyper-V correctly then you will get the famous blue screen.

KB article to help disable Credential Guard/Device Guard
https://kb.vmware.com/s/article/2146361

KB article from Microsoft to help if you do encounter a blue screen of death
https://support.microsoft.com/en-ie/help/3189068/restart-failure-if-device-guard-or-credential-guard-isn-t-disabled-cor 

Update : The VMware KB article now refers you to this Microsoft article where it guides you on how to turn on/off Credential Guard manually or via a powershell script which you can download. Please remember if you are running this fix on a workstation that has domain GPO applied then you may need to check with your GPO admins that they are not re-applying the credential guard settings again via GPO. 

Microsoft Credential Guard Article
https://docs.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-manage

No comments:

Post a Comment

New Azure KMS IP and domain Addresses for activation

For Windows virtual machines deployed into Azure using marketplace images you may have created rules in your NSG or firewalls to allow the s...