I use MBR native vhds, stored in a single EFI partitions and I can disable the signature enforcement as usual, using bootice or the command line I can tell that for sure because I have to mod an Intel .inf that blocks the installation of a network driver on server OS
Obviously it's permanent. Where was the news if I had to do that each time? (which is the stock behavior, since xp64)
Use bootice https://forums.mydigitallife.net/th...ture-enforcement-on-win-7.86919/#post-1789841 or bcdedit /set nointegritychecks on bcdedit /set testsigning on I think this works only with secureboot disbled