Windows 10: How to disable Windows 11 Defender Credential Guard?

After upgrading to Windows 11 2022H2, RDP always prompts for credentials and Edge Dev doesn't autofill credentials. According to this, Windows 11 H2 enables Windows Defender Credential Guard. I tried to follow the steps to disable it in the Group Policy Editor it was set to Not Configured and rebooted, but it doesn't help. How to resolve this scourge? BTW, shouldn't we enable such features by default and leaving users to figure out to restore the old behavior for hours, instead of asking on install?

:)

 

Credential Guard lab companion

Source: Credential Guard lab companion Datacenter and Private Cloud Security Blog


See also:

• Enable or Disable Credential Guard in Windows 10 Windows 10 Security System Tutorials
• Verify if Credential Guard is Enabled or Disabled in Windows 10 Windows 10 Security System Tutorials

 

VMware Workstation can be run after disabling Device/Credential Guard

Windows Sandbox cannot be enabled on Windows 10 Home. The workaround you most likely used, does not even work, and has never actually worked. However, when you attempted to enable Windows Sandbox, it also enabled Credential Guard and Device Guard.

The first thing you need to backup any critical files you cannot live without. Depending on the state of your system you might decide it's time to simply reinstall Windows 10 Home. An alternative is to upgrade to Windows 10 Professional so you can Enable Windows Sandbox then disable it properly. The following suggestion was written against an assumption that Windows Sandbox was properly enabled and not left in a broken state due to a workaround solution on Windows 10 Home.

Source:

• Windows Sandbox Feature enables windows defender credential guard feature sets. Does not play well with VMware Workstation
  
• Manage Windows Defender Credential Guard
  
• VMware Player and Device/Credential Guard are not compatible
  

 

lsass.exe keeps crashing after disabling credential guard

Hello there,

I currently have a big issue with my Win 11 22H2 device. Since this update credential guard was activated by default. This broke the allways-on VPN for all of our customers and ourselves. The fact that this is even remotely possible already blows my mind and not in a positive way. So I tried disabling credential guard which worked at first. The AOVPN was working again so I had proof that it was Credential Guard which broke it. But then the next day I couldn’t connect to any Remotedesktop sessions where the credentials are presaved. This is a gigantic problem because it is my entire workflow. So I have been unable to work ever since I first disabled Credential Guard about a week ago.

Next thing I did was disabling Virtualization Based Security which didn’t work at all. I used this article but it didn’t work. We also tried disabling both Credential Guard and VBS using Intune and GPOs. I am not sure where else it is possible to set Policies for Credential Guard and VBS other than Intune and GPO.

The specific error I am getting is an error with lsass.exe and status code c0000005. I didn’t find any info on that online as per usual. I highly suspect this is happening because I did something wrong. I just don't know what, the registry Keys are set correctly and uefi lock has been disabled. As soon as I reenable Credential Guard everything goes back to normal excecpt for the AOVPN which then doesn't automatically connect or use the windows credentials automatically. I can type in the credentials and connect manually but then it can only be considered a sometimes-on VPN.

Thanks for any help