QtTye TyeStrader
TyeStrader
/ disabledevicegard.ps1
Created
July 8, 2025 07:49
— forked from LuemmelSec/disabledevicegard.ps1
Disable DeviceGuard with UEFI lock
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Steps needed to disable DeviceGuard with UEFI lock | |
| # Disable DeviceGuard in registry | |
| cmd /c 'REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" /v "EnableVirtualizationBasedSecurity" /f' | |
| cmd /c 'REG DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard" /v "RequirePlatformSecurityFeatures" /f' | |
| cmd /c 'REG DELETE "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "EnableVirtualizationBasedSecurity" /f' | |
| cmd /c 'REG DELETE "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v "RequirePlatformSecurityFeatures" /f' | |
| # Change UEFI settings. Reboot and confirmation needed. | |
| mountvol X: /s |