| 46 | |
| 47 | == turn off Credential Guard == |
| 48 | |
| 49 | You can turn it off with registry changes, a GPO, Intune, or whatever you're using to manage your systems (if anything). |
| 50 | |
| 51 | https://learn.microsoft.com/en-us/answers/questions/1021785/windows-11-22h2-can39t-use-saved-credential.html |
| 52 | |
| 53 | Easiest way is via the registry: |
| 54 | |
| 55 | {{{ |
| 56 | Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard. |
| 57 | |
| 58 | Add a new DWORD value named EnableVirtualizationBasedSecurity and set its value to 0. |
| 59 | Add another new DWORD value named RequirePlatformSecurityFeatures and set that to 0. |
| 60 | }}} |
| 61 | |
| 62 | reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard /v EnableVirtualizationBasedSecurity /t REG_DWORD /d "0" /f |
| 63 | |
| 64 | reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard /v RequirePlatformSecurityFeatures /t REG_DWORD /d "0" /f |
| 65 | |
| 66 | |
| 67 | {{{Now go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa. |
| 68 | |
| 69 | Add a new DWORD value named LsaCfgFlags and set it to 0. |
| 70 | }}} |
| 71 | |
| 72 | reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa /v LsaCfgFlags /t REG_DWORD /d "0" /f |
| 73 | |
| 74 | Restart your computer. |
| 75 | |