How to disable Virtualization-Based Security (VBS) on a HP Omen running windows 11 home

[dkjordan73]

How to disable Virtualization-Based Security (VBS) on a HP Omen running windows 11 home

[Hawks_Eye]

Hi @dkjordan73 

Welcome to the HP Support Community! We're here to help you get back up and running.

You can disable Virtualization‑Based Security (VBS) on your HP Omen running Windows 11 Home by turning off Core Isolation and Memory Integrity in Windows Security, and ensuring virtualization features are disabled in system settings.

I understand how frustrating it feels when performance is affected by background security features, especially on a gaming laptop where every bit of speed matters. You’ve already taken the right step by looking into VBS, so let’s go through the process clearly.

Step 1: Turn Off Core Isolation

1. Press Windows + I to open Settings.
2. Go to Privacy & Security > Windows Security > Device Security.
3. Under Core isolation, click Core isolation details.
4. Toggle Memory integrity to Off.
5. Restart your laptop.

 

Step 2: Disable Hypervisor Launch

1. Press Windows + R, type msconfig, and press Enter.
2. In the Boot tab, click Advanced options.
3. Uncheck Hyper‑V if listed.
4. Apply changes and restart.

 

Step 3: Confirm VBS Status

1. Press Windows + R, type msinfo32, and press Enter.
2. In System Information, scroll down to Virtualization‑based security.
3. Ensure it shows Not enabled.

 

Step 4: BIOS Check (if still active)

• Restart your HP Omen and press F10 to enter BIOS Setup.
• Under System Configuration, look for Virtualization Technology.
• Disable it if you want VBS fully off.
• Save changes and restart.

Helpful Resource

HP provides guidance on managing Windows security features here:
HP PCs – Windows Security Settings

You’ve already shown persistence by researching this. With these steps—Core Isolation, system configuration, and BIOS—you’ll be able to disable VBS and enjoy smoother performance on your HP Omen.

If my response helped, please mark it as an Accepted Solution! ✅ It helps others and spreads support. 💙 Also, tapping "Yes" on "Was this reply helpful?" makes a big difference! Thanks! 😊

Take care, and have an amazing day!

Regards, 

Hawks_Eye

[dkjordan73]

HI Hawks_Eye,

Thank you for your response but those steps didn't help.  Let me provide a little background information.  I need VBS disabled because I need to install VMWare and use it to run EVE-NG network emulator the software will not run properly unless VBS is disabled. 

Step after action:

Step 1, Memory Integrity was turned off under Core Isolation. My PC restarted and VBS still shows running under  System information.

Step2,  There is no Hyper-V selection under Advance options within MSConfig. I believe this is because I am running Windows 11 Home.

Step 3,  VBS is still showing that it is running. 

Step 4, I can't disable Virtualization completely because EVE-NG needs that enabled in order to run.

I n summary, I need VBS disabled but virtualization still enable in order to run my software.

Any feedback or information that you can provide would be greatly appreciated.

[Hawks_Eye]

Hi @dkjordan73 

I understand how frustrating this is—you’ve already tried the common steps, and it’s clear you need VBS disabled while still keeping virtualization enabled so VMware and EVE‑NG can run properly. 

Let’s go through a more targeted approach that addresses exactly that balance.

 

Steps to disable VBS but keep virtualization active

1. Turn off Windows features that enforce VBS

• Press Windows + R, type optionalfeatures, and press Enter.
• In the Windows Features dialog, uncheck the following if present:
  • Virtual Machine Platform
  • Windows Hypervisor Platform
  • Windows Sandbox
• Click OK and restart.
  These features rely on VBS and can keep it active even when Core Isolation is off.

2. Disable Device Guard and Credential Guard policies

• Press Windows + R, type gpedit.msc, and press Enter.
• Navigate to:
  Computer Configuration > Administrative Templates > System > Device Guard
• Set Turn On Virtualization Based Security to Disabled.
• Navigate to:
  Computer Configuration > Administrative Templates > System > Device Guard > Credential Guard
• Set Turn On Credential Guard to Disabled.
• Restart your PC.

(Note: Group Policy Editor is available in Windows 11 Pro by default. On Windows 11 Home, you may need to enable it manually, but the settings can also be applied via PowerShell if needed.)

3. Confirm VBS status

• Press Windows + R, type msinfo32, and press Enter.
• Scroll down to Virtualization‑based security.
• It should now show Not enabled.
• At the same time, check that Virtualization Enabled in Firmware still shows Yes—this confirms virtualization is active for VMware.

4. BIOS check (only if needed)

• Restart and press F10 to enter BIOS Setup.
• Ensure Virtualization Technology is Enabled.
• Save and exit.
  This keeps virtualization available for VMware while VBS is disabled at the OS level.

You’ve already shown persistence by testing multiple approaches. The key difference here is disabling the Windows features and policies that enforce VBS while leaving firmware virtualization on.

If my response helped, please mark it as an Accepted Solution! ✅ It helps others and spreads support. 💙 Also, tapping "Yes" on "Was this reply helpful?" makes a big difference! Thanks! 😊

Take care, and have an amazing day!

Regards, 

Hawks_Eye

[CloudEng_73]

Hi Hawks_Eye,

Thank you for your response and the steps that you provided. I really do appreciate your assitance with this matter.  I was able to find and install gpedit.msc . However, I must say that these steps did not help.  See below:

Step 1

• Virtual Machine Platform -- was already disabled
• Windows Hypervisor Platform--was already disabled
• Windows Sandbox -- there was no option for this selection.

Step 2

Computer Configuration > Administrative Templates > System > Device Guard. ------Device Guard was not an option .

VBS is still running. 

I have tried everything that I possibly could to get this to work. I fear I am left with my only option and that is to do a full install of Windows 11 pro on my HP Omen.

[Hawks_Eye]

You are welcome @dkjordan73 

I understand how discouraging it feels when every attempt still leaves Virtualization‑Based Security running. You’ve already been thorough with disabling features, checking Core Isolation, and even trying Group Policy, yet VBS continues to persist.

At this point, the next step is indeed a full clean installation of Windows 11 Pro. This gives you complete control over virtualization policies and the ability to disable VBS while keeping virtualization enabled for VMware and EVE‑NG.

 

What a Full Install Involves

• Backup your files: Save personal data to an external drive or cloud storage.
• Create installation media: Use the Windows 11 installation tool to make a bootable USB.
• Install Windows 11 Pro: Boot from the USB, choose “Custom Install,” and format the system partition.
• Reinstall drivers and apps: After setup, download drivers from HP’s support page for your Omen, then reinstall VMware and EVE‑NG.
• Disable VBS: With Pro edition, you’ll have access to Device Guard and Credential Guard policies, ensuring VBS can be fully disabled while virtualization remains active.

This path is more involved, but it’s the reliable way to achieve the balance you need: virtualization on, VBS off.

Let’s walk through the full clean install of Windows 11 Pro step by step so you can disable VBS while keeping virtualization active for VMware and EVE‑NG:

Step 1: Backup Your Data

• Copy important files to an external drive or cloud storage.
• Make note of any license keys or application installers you’ll need later.

Step 2: Create Installation Media

1. On another Windows PC, go to Microsoft’s official page: Download Windows 11.
2. Select Create Windows 11 Installation Media.
3. Insert a USB drive (8 GB or larger).
4. Run the tool and follow prompts to create a bootable USB.

Step 3: Boot From USB

1. Insert the USB into your HP Omen.
2. Restart and press Esc repeatedly, then select Boot Device Options (F9).
3. Choose the USB drive to boot into Windows Setup.

Step 4: Install Windows 11 Pro

1. In setup, select Custom Install.
2. Delete the existing system partition (this wipes Windows Home).
3. Select the unallocated space and click Next.
4. Windows will install fresh.
5. When prompted for edition, choose Windows 11 Pro.
   • If you don’t have a Pro license key yet, you can install Pro and activate later.

Step 5: Reinstall Drivers

• After installation, connect to Wi‑Fi.
• Visit HP’s support page for your Omen model: HP Omen Drivers & Downloads.
• Install chipset, graphics, audio, and network drivers.
• Restart after each major driver installation.

Step 6: Disable VBS

1. Open msinfo32 and confirm Virtualization is enabled.
2. Go to Group Policy Editor (gpedit.msc) →
   • Computer Configuration → Administrative Templates → System → Device Guard → Disable VBS.
   • Credential Guard → Disabled.
3. Restart and confirm Virtualization‑based security: Not enabled.

Step 7: Install VMware and EVE‑NG

• Download VMware Workstation.
• Install EVE‑NG and configure your virtual lab.
• With VBS disabled and virtualization active, performance should be smooth.

This process ensures you have a clean slate, full control over virtualization policies, and the ability to run your network emulator without VBS interference.

If my response helped, please mark it as an Accepted Solution! ✅ It helps others and spreads support. 💙 Also, tapping "Yes" on "Was this reply helpful?" makes a big difference! Thanks! 😊

Take care, and have an amazing day!

Regards, 

Hawks_Eye

[dkjordan73]

Hi I wish I could say those steps worked. But there is another issue. My PC keeps booting into Windows 11 after going through  step 3.  There is no option for windows pro on step 4.  I used the windows 11 installation tool and loaded to a USB drive with no issues. I booted from the USB with no issue. However when I go through the steps to begin the windows installation I am not given an option for  11 pro.  It seems like there is something hard coded on the HP side that is preventing me from doing this.

[Hawks_Eye]

Hello @dkjordan73 

I can understand how discouraging it feels to go through the installation process only to find that Windows 11 Home keeps reinstalling and you’re not given the option for Pro. 

Thank you for the persistence you’ve already shown—it’s clear you’ve been thorough with creating media and booting from USB. 

Let’s go step by step to address why the installer defaults to Home and how you can force a Pro installation on your HP Omen.

 

Why Windows Defaults to Home

HP systems often ship with a digital license embedded in the BIOS/UEFI. During installation, Windows Setup automatically reads this license and installs the edition tied to it—in your case, Windows 11 Home. That’s why you don’t see the option for Pro during setup.

 

Steps to Install Windows 11 Pro

Create Installation Media Again

• Use the Microsoft Media Creation Tool to make a fresh USB installer.
• Download from: Download Windows 11

Add an Edition Configuration File

• On the USB drive, open the Sources folder.
• Create a text file named ei.cfg.
• Add the following lines:[EditionID] Professional [Channel] Retail [VL] 0
• Save the file. This forces the installer to present the Pro edition option.

Boot From USB and Install

• Insert the USB into your HP Omen.
• Restart and press Esc repeatedly, then select Boot Device Options (F9).
• Choose the USB drive.
• When prompted, select Custom Install.
• Delete the existing system partition (this wipes Windows Home).
• Select the unallocated space and click Next.
• You should now see the option to install Windows 11 Pro.

Activation

• If you have a Windows 11 Pro product key, enter it during installation.
• If not, skip activation. Windows will install Pro and you can activate later with a valid key.

Reinstall Drivers

• After installation, connect to Wi‑Fi.
• Visit HP Omen Drivers & Downloads for your model.
• Install chipset, graphics, audio, and network drivers.
• Restart after each major driver installation.

Disable VBS

• Once Pro is installed, open gpedit.msc.
• Navigate to Computer Configuration > Administrative Templates > System > Device Guard.
• Disable VBS and Credential Guard.
• Restart and confirm in msinfo32 that Virtualization‑based security is not enabled.

The installer defaults to Home because of the embedded license in your HP Omen. Adding the ei.cfg file to the USB installation media forces Windows Setup to allow Pro installation, giving you full control over virtualization policies.

Kind regards,

Hawks_Eye

[Anuj5678]

I have disabled VBS through Device Guard, but I don’t see the Credential Guard option in Windows 11 Pro.

[Jerry_57]

Hi @Anuj5678,

Welcome to the HP Support Community.
 

Thank you for posting your query. I will be glad to help you.

I understand you are experiencing issues with certain features in HP applications like the OMEN Gaming Hub or HP Command Center on your HP OMEN laptop due to Virtualisation-Based Security (VBS) being enabled. Here is a guide on how to disable VBS:
 

Check VBS Status:
 

• Click Start.
• In the Search field, type msinfo32 and select Open.
• On the System Information page, identify the Virtualisation-Based Security Status.

Disable VBS Components:
 

Hypervisor-protected Code Integrity (HVCI):
 

• Go to Start > Settings > Privacy & Security > Windows Security > Device Security.
• Click Core Isolation > Core Isolation Details.
• Switch Memory Integrity to Off.
• Open Control Panel.
• Select Programs and Features.
• Click Turn Windows features on or off.
• Uncheck Microsoft Defender Application Guard, Virtual Machine Platform, and Windows Hypervisor Platform.
• Select OK and close the Control Panel.

Disable Windows Credential Guard:
 

If Windows Credential Guard is enabled with UEFI Lock:
 

• You might need physical access to the machine to disable it from the UEFI firmware settings.
   
• If available, navigate to Computer Configuration > Administrative Templates > System > Device Guard > Turn on Virtualization Based Security and disable it.
   
• Navigate to the registry:
  • Delete HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\DeviceGuard\EnableVirtualizationBasedSecurity.
  • Delete HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LsaCfgFlags.
    
    
    I hope this helps.

Take care and have an amazing day!
 

Did we resolve the issue? If yes, please consider marking this post as "Accepted Solution" and click "Yes" to give us a helpful vote - your feedback keeps us going!

Jerry_57

HP Support