❗Pre-configuration check:
⚠️ Before you start following this instruction, make sure that PIN sign-in is disabled in Windows! If you don’t know how to do this, use AI or Google.
Step 1. Disable components via DISM (in PowerShell as Administrator)
dism.exe /Online /Disable-Feature:Microsoft-Hyper-V-All /NoRestart
dism.exe /Online /Disable-Feature:VirtualMachinePlatform /NoRestart
dism.exe /Online /Disable-Feature:HypervisorPlatform /NoRestart
Step 2. Disable hypervisor launch via BCDEDIT In PowerShell as Administrator, run:
bcdedit /set hypervisorlaunchtype off
Step 3. Change registry settings (in PowerShell as Administrator)
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v EnableVirtualizationBasedSecurity /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v RequirePlatformSecurityFeatures /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v Enabled /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LsaCfgFlags /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" /v EnableVirtualizationBasedSecurity /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" /v RequirePlatformSecurityFeatures /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v EnableHVCI /t REG_DWORD /d 0 /f
Step 4. Remove hypervisor files
takeown /F "C:\Windows\System32\hvix64.exe"
icacls "C:\Windows\System32\hvix64.exe" /grant *$(([System.Security.Principal.WindowsIdentity]::GetCurrent()).User.Value):F
takeown /F "C:\Windows\System32\hvax64.exe"
icacls "C:\Windows\System32\hvax64.exe" /grant *$(([System.Security.Principal.WindowsIdentity]::GetCurrent()).User.Value):F
del "C:\Windows\System32\hvix64.exe"
del "C:\Windows\System32\hvax64.exe"
Step 5. Restart PC
Restart PC