How to verify if credential guard is enabled or disabled in Windows. Credential guard helps defend against credential theft techniques like pass the hash and pass the ticket. Protecting access to sensitive enterprise data if your Windows system support it. Enabling credential guard is a smart and often necessary step for both security and regulatory compliance. Before we begin, be sure to subscribe to Ninja One's IT Video Hub for more tech content like this. How to verify if credential guard is enabled or disabled. If credential guard is available and supported on the Windows systems you manage, there's no reason it should be disabled. Open the run dialogue by right clicking the start button. Enter MS info 32 in the dialogue box that appears. Select system summary. Then scroll down to virtualization based security services configured. If credential guard is listed in the value field, that means it is enabled. If it does not appear, it means that credential guard is either disabled or not available on your system. You can also use group policy editor to verify if credential guard is turned on. Right. Click the start menu and type gpe D dot MSC to enter group policy. Navigate to computer configuration administrative templates system, and then device guard. Select turn on virtualization base security if the policy is enabled. You can check to see if credential guard is enforced with UEFI. If credential guard is not configured, however, it simply means that credential guard is not enforced by group policy. It may still be enabled by default. Search for event viewer from the start menu. Go to applications and services logs, Microsoft Windows, then select device guard. Open the device guard operational log and check the entries to verify that credential guard is working. If no logs appear, that means credential guard is disabled. Finally, you can use the GET sim instance PowerShell script to verify if credential guard is enabled or disabled. After opening PowerShell as administrator, enter the following command. If the command's result is true, that means credential guard is enabled. Credential Guard was designed to protect Windows enterprise environments, which is why it's important to verify if it's active on supported systems. If your device does not meet the requirements for running credential guard, you can check your bios UEFI settings and see if the required hardware features are disabled. For more information, check out our official blog post on how to verify if credential guard is enabled or disabled in Windows linked in the description below.