Windows 10: How do I enable HSTI, NX and SMM on Windows 10 Enterprise?

Hi, I have Windows 10 Enterprise and I'm trying to enable all the security stuff. I enabled Secure Boot, and used the Microsoft Readiness Tool for Credential Guard and Device Guard. Everything works fine. In Powershell, it says:


"The following additional qualifications, if present, can enhance the security of Device Guard / Credential Guard on this system:
Incompatible HVCI Kernel Driver Modules found
NX Protector is absent
SMM Mitigation is absent

Secure MOR is absent."


So how do I enable or fix these? I would like to turn on SMM to "Exceed Enhanced Hardware Security." And what is wrong with HVCI? It shows as running in Powershell (Readiness Tool.) Here's a few other errors in DGLogs:


Incompatible HVCI Kernel Driver Modules found

Module: pwdrvio.sys
Reason: execute pool type count: 2036
Module: tapnordvpn.sys
Reason: execute page mapping count: 239740106


DG_obj
DG_obj.AvailableSecurityProperties.length .AvailableSecurityProperties.length
isSMMMitigated= 0
SMM Mitigation is absent


VirtualizationFirmwareEnabled False

SMM Mitigation is absent

HyperVisorPresent True
Virtualization firmware check passed


Current DGRunning = 1 2, ConfigCI= 0
_HVCIState: 1, _ConfigCIState: 0
HVCI is enabled and running.
Config-CI is not running. (Not Enabled)
Not all services are running.


I tried regedit in hklm/…/deviceguard/capabilities and added each value to 1 (a few had 2 already.) So how do I enable these security settings? Please reply. Thanks

:)

 

Unable to activate Credential Guard on Windows 10: Unknown OS, OS Architecture failure

I am trying to enable Credential Guard on my copy of Windows 10 Pro v1809.
I downloaded the DG_Readiness_Tool_v3.5 from Microsoft's website, I run it on Powershell but this is the result:

Why does it say "Unknown OS, OS Architecture failure"?
I found this on the Microsoft forum but it doesn't have a solution.

 

How to Enable NX / DX bit in windows 7 without bios. In windows 10 this automatically enabled.

I have a laptop with Intel i3 350m. There is no option in the bios, to enable or disable Execute disable bit (NX,XD). There is only boot options and enable VT-X.

In windows 10 the feature is enabled. But in windows 7 it tells that I must enable the nx in bios. I do not know why in windows 10 is enabled but in windows 7 can not detect it. I tried to bcdedit set /nx alwayson
but the problem not resolved. Does windows 10 modify bios at runtime and set NX enabled?

I want to enable this feature in windows 7 without bios because in bios there is no such option.

MY bios is : insydeh20 rev3.5 f.11 ( I searched for update the bios but I did not find any thing. This bios is not common)

UPDATE: The NX bit feature is required when I want to install Intel HAXM Accelerator.

I love windows 10 but I want to go back to windows 7 because problems of Intel hd graphics compatibility with windows 10. And I do not have enough money to buy a new PC .

 

This PC's processor doesn't support a critical feature (NX)."

Good suggestion, but ... It's a 32-bit machine

Speccy:
- Machine Variables
--- PROCESSOR_ARCHITECTURE: x86
--- PROCESSOR_IDENTIFIER: x86 Family 6 Model 23 Stepping 10, GenuineIntel