Performance on Windows 10 or 11

With this tutorial your PC will gain performance in Windows 10 or 11.

The arrival of Windows 11 on our computers has brought several interesting new features. Among them is the use of hardware virtualization in the most advanced CPUs to provide an additional layer of security, but its use involves a reduction in performance. With this tutorial You will be able to disable VBS and regain what you lost on your PC, especially on Windows 11.

One of Microsoft's obsessions with its new version of Windows has to do with the security and the goal of achieving a trusted computing environment, which is important in corporate and business environments where a large amount of sensitive and private data is handled. Specifically, they recommend that manufacturers and assemblers of new computers sell them with VBS enabled by default, which prevents malicious code from being executed that fails code integration checks by pretending to be applications and reliable drivers.

Any extra security is always good, the problem comes when that extra security becomes a loss of performance considerable on CPUs, especially if you're using a first-generation AMD Ryzen, the 1000 series, or an Intel Core 10 or older. If we have the case of using hardware relatively modern you can lose a 5% of performance, but as we go further back we can see performance cuts on a 28%.

Microsoft currently allows gaming PCs that ship with Windows 11 They are sold with VBS and HVCI disabled, but we may have purchased a pre-built computer not originally designed for gaming and have converted it for gaming or simply upgraded from Windows 10.

What are VBS and HVCI?

In its simplest definition, VBS uses the virtualization capabilities of hardware to create a region within memory that is completely isolated from the rest of the system. In other words, it makes use of the capabilities that allow us to run other operating systems through a hypervisor, but not to run an entire system, but to execute certain functions of a system. Windows 10 and later in that environment isolated.

One way to break security is through hardware drivers, because they are used to communicate programs with different devices. components Many of the computer's physical drivers have a level of privileges much higher than a normal program and a programmer with bad intentions can benefit from this and pass off malicious applications as drivers.

In order to gain a level of security In addition, Hypervisor-Enforced Code Integrity or HVCI is used, which uses Virtualization-based Security or VBS in Windows to check whether the code is malicious or not. How? In the same way that a gunner can detonate a bomb in a dangerous environment. controlled, the same thing happens here: the malicious driver is executed in a separate environment that cannot affect the rest of the system. Another feature is to assign the operating environment memory typical of the TPM module to store key credentials for the use of certain sensitive actions such as the user's personal and banking data.

Of course, this means having to run an additional environment that cuts processor resources that we want to have available for our applications. Let's see below how to disable this function Windows 11 and recover lost power.

How to know if VBS is enabled?

The first and most important thing is to know if the VBS is active in our installation of Windows 11 and here the answer is it depends on how we have performed the installation. If for example we have updated from a Windows 10 installation then the VBS will be inactive, but if you have done an installation from scratch or it is a new device it will always be active, so the first thing we will have to know is if this technology is active or not.

To do this you just have to follow the following steps:

1. Type in the search box of the taskbar: system information. Searching for system should find a program of the same name that you will need to run.
2. Without selecting anything, scroll down until you see the line that says security based on virtualization, there you can know if VBS is enabled or not.

A hint: VBS requires a TPM 2.0 module (software or hardware) to work, so if you don't have one then the said feature cannot be activated. This is also a good thing way to check if your Windows PC 10 has a TPM module enabled and working.

How to disable Windows 11 VBS on your PC

The first thing you need to keep in mind is that there are two ways to disable, or rather, to deactivate VBS in your installation. Windows 11, to do this follow these steps:

1. In search of the taskbar Windows type: core isolation. This will find you a specific page in the system configuration which is the one you see below:
2. Well, you just have to keep the "memory integrity" disabled to keep the VBS completely disabled, with this you will make your Intel or AMD CPU gain performance under Windows 11 in exchange for losing security. So we recommend it if you are going to do things like running a video game, rendering a scene with Blender or simply installing a program whose decompression requires a large amount of processing.

Using the command prompt

The other option is to use the command prompt, to do this follow the following steps:

1. Type cmd in the Windows taskbar search to find the command prompt, but don't run it as is, right click on the search and select run as administrator to be able to run it with all the permissions, since we will need them.
2. Then write the following: bcdedit /set hypervisorlaunchtype off
3. With this, the VBS will be deactivated immediately, in any case, we do not need to tell you in this case as in the previous one that it is totally advisable to restart the computer for the changes to take effect in the system.

We hope that this tutorial We hope that you found it useful and that your CPU's lost performance returns to normal after disabling VBS, although if you work in an environment that requires data protection we do not recommend it. Putting your clients' data at risk has criminal consequences in several countries, so if you are a professional in certain sectors we recommend not performing this operation because of what could happen with malicious programs.

(Source: https:Hardzone