Virtualization-based security, also known as VBS, allows Windows 11 to create a secure memory area isolated from unsafe code. Another built-in feature called Hypervisor Enforced Code Integrity (HVCI) uses the features of VBS to prevent unsigned or problematic drivers and software from entering memory. Together, VBS and HVCI add a layer of protection to limit the damage that malware can cause, even if it passes your antivirus software.
Unfortunately, the performance costs of VBS and HVCI are high, especially in gaming.In our testing, we found that the game Ran up to 5% These settings will slow down when turned on and off. Others saw a larger delta.Our colleagues at PC Gamer Down 25%, Although when Microsoft recommended no less than the 11th processor, they tested it with the 10th generation Intel CPU.
Simply Upgrade to Windows 11 VBS will not be opened unless you have enabled it in Windows 10, which has been a non-default option for several years. So, at present, this is a problem that few people will actually encounter.
But if you make a Clean install of Windows 11 Or buy a brand new laptop or desktop with Windows 11. You may enable VBS / HVCI by default. Microsoft recommends that OEMS enable it by default, but Noticed “Some devices that are particularly sensitive to performance (such as gaming PCs) may choose to disable HVCI.” And we know that there is at least one OEM, MSI, who told us that they will ship their systems with VBS disabled.
If you are using Windows 11 and performance, especially game performance, is the most important to you, we will show you how to check whether VBS/HVCI is enabled and how to turn it off. However, if you are not playing a game, you may need to keep security measures.
How to check if VBS is enabled in Windows 11
Before you start thinking about closing VBS, you first need to determine whether it is already open.
1. Open system informationThe easiest way is to search for “System Information” in Windows Search and click on the top result.
2. Scroll down to find the “Virtualization-based security” line. If it says “Running”, VBS is enabled. But if it says “not enabled”, then you are done.
How to disable VBS/HVCI in Windows 11
1. Looking for core isolation Search in Windows and Click on the top result.
2. Click Windows Security with OK If asked what application to use. A submenu opens.
3. Switch memory integrity to offIf it opens. If it is not open, skip to step 6.
4. Restart your computer Follow the prompts:
5. Check system information Check again to see if virtualization-based security is listed as “not enabled”. If so, you are done. If not, go to step 6, where you will disable VBS in the registry.
6. Open the registryThe easiest way is to press Windows + R, enter regedit in the text box, and click “OK”.
7. Navigate to HKEY_LOCAL_MACHINESystemCurrentControlSetControlDeviceGuard.
8. Open EnableVirtualizationBasedSecurity with Set it to 0.
9. Close the registry with Restart your computer.
At this point, you should see that VBS is disabled in the system information application.