On the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\WindowsHello path, you need to change the value of the DWORD parameter "Enabled" to 0 After restarting your PC, VBS should be turned off
does not work for me either. tested on a clean installation again. configured both, the HyperVVirtualizationBasedSecurityOptout and the WindowsHello keys accordingly and after a reboot msinfo32 still reports VBS as running. to be clear, I also re-test my own method everytime and it disables VBS everytime successfully, I just like to test other suggestions on how to disable VBS -andy-
The Optout key was the last piece in the puzzle for me. I also have the Windows Hello and other DeviceGuard keys mentioned here set to disabled. Without this, VBS was still running unless I set the BCD flag to turn off Hyper-V. With it, I can remove the flag so it's auto-determined and still get "Not enabled".
You answered your own question with the image, there is no "Disable" or "Uninstall" button for this entry. Might have to disable (Start=4) it in the Registry. Code: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
Task Manager reports Virtualization enabled, even though, it is clearly disabled. That alone causes a lot of confusion.
Virtualization = Enabled from Windows Task Manager is for CPU/BIOS Virtualization status capable, not "running". It's not VBS related. Hyper-V or VBS or VMware or VirtualBox requires Virtualization = Enabled from Task Manager.
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\DeviceGuard -> EnableVirtualizationBasedSecurity -> 0