Windows 10: How to turn on "Firmware Protection" of Windows Security System Guard?

Hi all,


For background information, I am currently on Windows 10 version 1809 (OS build 17763.292). After turning on the "Memory Integrity" under "Core Isolation" of Windows Security, I also changed my Group Policy to enable Virtualisation-based Security. This then prompted a change in Windows Security with a new feature called "Firmware Protection" under "Core Isolation". However, I have no way of turning it on. Any advice/help to activate that option?


Thanks!




:)

 

Credential Guard lab companion

Source: Credential Guard lab companion Datacenter and Private Cloud Security Blog


See also:

• Enable or Disable Credential Guard in Windows 10 Windows 10 Security System Tutorials
• Verify if Credential Guard is Enabled or Disabled in Windows 10 Windows 10 Security System Tutorials

 

Windows10 System Protection Cannot Be Turned On

Hi Charlie,

Welcome to Microsoft community and thank you for posting your query.

Sorry for the inconvenience caused to you. Let me help you to fix the issue.

To assist you better, I would like to know in which drive the Anti-virus program is installed?

I would suggest you to disable the anti-virus program and check if you are able to enable the system protection. This is to check if the anti-virus is conflicting with the issue.

Disclaimer: Antivirus software can help protect your computer against viruses and other security threats. In most cases, you shouldn't disable your antivirus software. If you have to temporarily disable it to install other
software, you should re-enable it as soon as you're done. If you're connected to the Internet or a network while your antivirus software is disabled, your computer is vulnerable to attacks.

You can also try the below steps to enable the system protection and check.

• 
  Press Windows key + X and select Control Panel.
  
• 
  Click on System and click System protection on the left pane.
  
• 
  Highlight the drive you want to set up system protection on and click Configure.
  
• 
  Select Turn on system protection.
  
• 
  Move the slider to set the amount of Max Usage: space. More space allows you to create more restore points.
  
• Click Apply and then OK.

Hope this helps. Keep posting us with the status we will be glad to help you.

 

Windows10 System Protection Cannot Be Turned On

Hi,

The problem always happens after the device is updated to Windows 10. The Turn on system protection is greyed out while you are able to access the System Restore panel. If you find that system restore for the Windows drive is turned off and disable, try
any of the possible solution.



Note: Make sure you have signed in as an administrator.

I suggest you to follow the below steps to Enable System Restore.

Enabling the Disabled System Restore:

• Type GPEDIT.MSC in your Start Search box. This will list the app which allows to edit group policies.

• Now follow this path Computer Configuration -> Administrative Templates -> System -> System Restore.

• Look for a setting which says “Turn Off System Restore”. This is not configured by default.

• Double click it and select “Disabled”

• Click OK.

Hope this information helps. Get back to us with the status of your issue we will be glad to help you.

Thank you.