This article describes how to configure Credential Guard using Microsoft Intune, Group Policy, or the registry. Default enablement Starting in Windows 11, version 22H2, Credential Guard is turned on by default on devices that meet the requirements. The default enablement is without UEFI Lock, which allows administrators to disable Credential Guard remotely, if needed. If Credential Guard or VBS ar