Introduction
Windows 11 introduced several advanced security features enabled by default, the most notable being Virtualization-Based Security (VBS) and Hypervisor-Enforced Code Integrity (HVCI), also known as Memory Integrity. These features use hardware virtualization to create a secure memory enclave that protects the operating system from malicious code insertion. While excellent for enterprise security, VBS can negatively impact gaming performance, sometimes reducing frame rates by 5% to 15%. This guide explains how to disable VBS to maximize your hardware’s gaming potential.
Before You Begin
Disabling VBS reduces the overall security posture of your system. You should only perform this action on a dedicated gaming PC. Do not disable VBS on a corporate workstation, a laptop used for sensitive financial tasks, or a machine frequently exposed to high-risk internet environments. The performance gains are primarily noticeable in CPU-bound games.
Step 1: Check if VBS is Currently Enabled
Before making changes, verify that VBS is actually running on your system.
- Press the Windows Key and type
System Information, then press Enter. - Scroll down the right pane until you find Virtualization-based security.
- If the status says Running, proceed to the next steps. If it says Not enabled, VBS is already off, and you do not need to do anything.
Step 2: Disable Memory Integrity (HVCI)
Memory Integrity relies on VBS. You must disable it first through the Windows Security interface.
- Press the Windows Key, type
Core Isolation, and press Enter. - Under the Memory integrity section, toggle the switch to the Off position.
- You may be prompted by User Account Control (UAC) to confirm. Click Yes.
- Windows will prompt you to restart your computer. Do not restart yet; proceed to Step 3.
Step 3: Disable VBS via the Registry or Group Policy
Turning off Memory Integrity does not always completely disable the underlying VBS hypervisor. You must disable it explicitly.
Method A: Using the Command Prompt (Easiest)
Open an elevated Command Prompt (Run as Administrator) and execute the following command to disable VBS in the boot configuration:
bcdedit /set hypervisorlaunchtype off
Method B: Using the Registry Editor
If you prefer using the Registry Editor:
- Press Win + R, type
regedit, and press Enter. - Navigate to:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\DeviceGuard - In the right pane, look for a DWORD value named EnableVirtualizationBasedSecurity.
- If it does not exist, right-click, select New > DWORD (32-bit) Value, and name it exactly that.
- Double-click the value and set its data to
0.
Step 4: Restart and Verify
Restart your computer for the changes to take effect. Once rebooted, open System Information again and check the Virtualization-based security status. It should now read Not enabled. You can now launch your games and benchmark the performance difference.