Disabling Hyper-V

Before you start following this instruction, make sure that PIN sign-in is disabled in Windows. If you don’t know how to do this, use AI or Google.

Step 1. Disable components via DISM#

In PowerShell as Administrator, run:

dism.exe /Online /Disable-Feature:Microsoft-Hyper-V-All /NoRestart
dism.exe /Online /Disable-Feature:VirtualMachinePlatform /NoRestart
dism.exe /Online /Disable-Feature:HypervisorPlatform /NoRestart

Step 2. Disable hypervisor launch via BCDEDIT#

In PowerShell as Administrator, run:

bcdedit /set hypervisorlaunchtype off

Step 3. Change registry settings#

In PowerShell as Administrator, run:

reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v EnableVirtualizationBasedSecurity /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v RequirePlatformSecurityFeatures /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v Enabled /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LsaCfgFlags /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" /v EnableVirtualizationBasedSecurity /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" /v RequirePlatformSecurityFeatures /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v EnableHVCI /t REG_DWORD /d 0 /f

Step 4. Remove hypervisor files#

This step deletes Windows system files. While hvix64.exe and hvax64.exe are missing, Hyper-V, WSL 2 and other virtualization features do not work.

In PowerShell as Administrator, run:

takeown /F "C:\Windows\System32\hvix64.exe" /A
icacls "C:\Windows\System32\hvix64.exe" /grant *S-1-5-32-544:F
takeown /F "C:\Windows\System32\hvax64.exe" /A
icacls "C:\Windows\System32\hvax64.exe" /grant *S-1-5-32-544:F
del "C:\Windows\System32\hvix64.exe"
del "C:\Windows\System32\hvax64.exe"

Step 5. Restart the PC#

Restart the computer so the changes take effect.