Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Thursday, November 26, 2015 12:00 AM
Device Guard is interfering with how I want to run my PC and its programmes.
How on earth do I disable it?
All replies (8)
Thursday, November 26, 2015 12:26 AM ✅Answered
AFAIK it cannot be disabled using normal means. There may be an unsupported way but I have not been able to find it and cannot point you to it given it is unsupported.
Since you are in an Enterprise environment have you asked the Global admin?
Wanikiya and Dyami--Team Zigzag Windows IT-PRO (MS-MVP)
Thursday, November 26, 2015 10:35 AM ✅Answered
Hi,
Please know that there are several OEM enable Device Guard onboard, and some computers support biometric authentication will enable this by default.
If your computer is in a domain environment, the Device guard can also be configured via GP or other policy settings.
https://technet.microsoft.com/en-us/library/mt463091(v=vs.85).aspx#configure_hardware
We cannot easily disable it on your own client side.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected].
Sunday, August 28, 2016 7:02 PM
If you idiots are going to add something to our computer then you need to provide a regular way to disable something. Your stupid device guard disables important features on my virus program. You need to take this feature off on the next update or provide a easy way to disable it with a one click feature. [email protected]
Thursday, June 1, 2017 9:27 PM
You Microsoft are an idiots. How the hell can I open my application when the stupid device guard blocking me from opening it? And how the hell can none IT to configure this complicated feature you had implemented? Help me fix it
Wednesday, July 5, 2017 4:12 AM | 1 vote
Yes, this NEEDS to be fixed. My neice just went out and bought a brand new Surface Laptop that she cannot even use because you've added this "feature"!
I work in IT and at this point, I'm regretting recommending they buy MS hardware.
How many users do you think want to whitelist everything they own? Enterprise customers, sure, but this an 18-year-old girl and her father walking into a Microsoft Store and being sold a brick!!
Not impressed.
Wednesday, July 5, 2017 4:22 AM
Well in our case, the buck stops here! Both the hardware and the software are Microsoft and we need a way to remove this monstrosity or at least an EASY way for consumers to manage it!
This thing's a $2000 brick to her at this point. She's about to start a degree, and she can't even install ITunes or Chrome. Yes, people use these apps and millions of others like them. They run other applications to keep them all patched and up-to-date, but I guess those might be a security risk too.
Tuesday, August 15, 2017 8:39 AM
Surface Laptop has Windows 10 S which only allows apps to be downloaded from the Store and also restricts browsers only to Edge. If she wants to install apps the regular way, she needs to upgrade it to Windows 10 Pro from the Store.
Thursday, February 21, 2019 5:07 AM
Hello ZigK,
If your device is managed by an organization, DeviceGuard, now known as Windows Defender Application Control, is enforced by policies that are deployed by Group Policy. Disablement of DeviceGuard/WDAC policy requires a new policy to be deployed.
There are three mechanisms to disable Windows Defender Application Control policies:
- Disable unsigned Windows Defender Application Control policies
- Disable signed Windows Defender Application Control policies within Windows
- Disable signed Windows Defender Application Control policies within the BIO
You can use the method that best matches your devices' environment to disable Windows Defender Application Control if your IT admin is not otherwise enforcing WDAC by policy.