Aktifkan atau Nonaktifkan Credential Guard di Windows 10:  ^{(Enable or Disable Credential Guard in Windows 10: )}Windows Credential Guard menggunakan keamanan berbasis virtualisasi untuk mengisolasi rahasia sehingga hanya perangkat lunak sistem yang memiliki hak istimewa yang dapat mengaksesnya. Akses tidak sah ke rahasia ini dapat menyebabkan serangan pencurian kredensial, seperti Pass-the-Hash atau Pass-The-Ticket . Windows Credential Guard mencegah serangan ini dengan melindungi hash kata sandi NTLM , Tiket Pemberian Tiket Kerberos^{(Kerberos Ticket Granting Tickets)} , dan kredensial yang disimpan oleh aplikasi sebagai kredensial domain.

Dengan mengaktifkan Windows Credential Guard, fitur dan solusi berikut disediakan:^{(By enabling Windows Credential Guard the following features and solutions are provided:)}

Keamanan perangkat keras Keamanan ^{(Hardware security)}
berbasis virtualisasi ^{(Virtualization-based security)}
Perlindungan yang lebih baik terhadap ancaman persisten tingkat lanjut^{(Better protection against advanced persistent threats)}

Sekarang Anda tahu pentingnya Credential Guard , Anda harus mengaktifkan ini untuk sistem Anda. Jadi tanpa membuang waktu, mari kita lihat Cara Mengaktifkan atau Menonaktifkan Penjaga Kredensial^{(Disable Credential Guard)} di Windows 10 dengan bantuan tutorial yang tercantum di bawah ini.

Aktifkan atau Nonaktifkan Penjaga^(Guard) Kredensial di Windows 10

Pastikan untuk  membuat titik pemulihan^{(create a restore point)}  untuk berjaga-jaga jika terjadi kesalahan.

Metode 1: Aktifkan atau Nonaktifkan Penjaga Kredensial di Windows 10 menggunakan Editor Kebijakan Grup^{(Method 1: Enable or Disable Credential Guard in Windows 10 using Group Policy Editor)}

Catatan:^(Note:) Metode ini hanya berfungsi jika Anda memiliki Windows Pro , Education , atau Enterprise Edtion . Untuk pengguna versi Windows Home lewati metode ini dan ikuti yang berikutnya.

1.Tekan Windows Key + R lalu ketik regedit dan tekan Enter untuk membuka Group Policy Editor.

2.Navigasi ke jalur berikut:

Computer Configuration > Administrative Templates > System > Device Guard

3.Pastikan untuk memilih Device Guard daripada di panel jendela kanan klik dua kali pada kebijakan "Turn On Virtualization Based Security" .

4. Di jendela Properties dari kebijakan di atas pastikan untuk memilih Enabled.

5.Sekarang dari menu tarik-turun “ Pilih Tingkat Keamanan Platform ” pilih ^{(Select Platform Security Level)}Boot Aman atau Boot Aman dan^{( Secure Boot or Secure Boot and DMA)} Perlindungan DMA.

6.Selanjutnya, dari drop-down “ Credential Guard Configuration ” pilih Enabled with UEFI lock . Jika Anda ingin mematikan Credential Guard dari jarak jauh, pilih Diaktifkan tanpa kunci daripada Diaktifkan dengan kunci UEFI .

7.Setelah selesai, klik Apply dilanjutkan dengan OK.

8.Reboot PC Anda untuk menyimpan perubahan.

Metode 2: Aktifkan atau Nonaktifkan Penjaga Kredensial di Windows 10 menggunakan Editor Registri^{(Method 2: Enable or Disable Credential Guard in Windows 10 using Registry Editor)}

Credential Guard menggunakan fitur keamanan berbasis virtualisasi yang harus diaktifkan terlebih dahulu dari fitur Windows sebelum Anda dapat mengaktifkan atau menonaktifkan Credential Guard di Registry Editor . Pastikan^(Make) untuk hanya menggunakan salah satu metode yang tercantum di bawah ini untuk mengaktifkan fitur keamanan berbasis virtualisasi.

Tambahkan fitur keamanan berbasis virtualisasi dengan menggunakan Program dan Fitur^{(Add the virtualization-based security features by using Programs and Features)}

1.Tekan Tombol Windows + R lalu ketik appwiz.cpl dan tekan Enter untuk membuka Program dan Fitur.^{(Program and Features.)}

2.Dari jendela sebelah kiri, klik " Aktifkan atau nonaktifkan Fitur Windows^{(Turn Windows Features on or off)} ".

3.Temukan dan perluas Hyper-V lalu kembangkan juga Hyper-V Platform .

4. Di bawah Hyper-V Platform tanda centang^(checkmark) " Hyper-V Hypervisor ".

5.Sekarang gulir ke bawah dan centang "Mode Pengguna Terisolasi"^{(checkmark “Isolated User Mode”)} dan klik OK.

Tambahkan fitur keamanan berbasis virtualisasi ke gambar offline dengan menggunakan DISM^{(Add the virtualization-based security features to an offline image by using DISM)}

1.Tekan Windows Key + X lalu pilih Command Prompt (Admin).

2.Ketik perintah berikut ke dalam cmd untuk menambahkan Hyper-V Hypervisor dan tekan Enter :

dism /image:<WIM file name> /Enable-Feature /FeatureName:Microsoft-Hyper-V-Hypervisor /all
OR
dism /Online /Enable-Feature:Microsoft-Hyper-V /All

3.Tambahkan fitur Isolated User Mode dengan menjalankan perintah berikut:

dism /image:<WIM file name> /Enable-Feature /FeatureName:IsolatedUserMode
OR
dism /Online /Enable-Feature /FeatureName:IsolatedUserMode

4. Setelah selesai, Anda dapat menutup command prompt.

Aktifkan atau Nonaktifkan Penjaga Kredensial di Windows 10^{(Enable or Disable Credential Guard in Windows 10)}

1.Tekan Windows Key + R lalu ketik regedit dan tekan Enter untuk membuka Registry Editor.

2.Navigasikan ke kunci registri berikut:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\DeviceGuard

3.Klik kanan pada DeviceGuard lalu pilih New > DWORD (32-bit) Value.

4. Beri nama DWORD yang baru dibuat ini sebagai EnableVirtualizationBasedSecurity dan tekan Enter.

5.Klik dua kali pada DWORD EnableVirtualizationBasedSecurity^{(EnableVirtualizationBasedSecurity DWORD)} kemudian ubah nilainya menjadi:

Untuk Mengaktifkan Keamanan Berbasis Virtualisasi: 1 ^{(To Enable Virtualization-based Security: 1)}
Untuk Menonaktifkan Keamanan Berbasis Virtualisasi: 0^{(To Disable Virtualization-based Security: 0)}

6.Sekarang lagi klik kanan pada DeviceGuard lalu pilih New > DWORD (32-bit) Value dan beri nama DWORD ini sebagai RequirePlatformSecurityFeatures lalu tekan Enter.

7.Klik dua kali pada RequirePlatformSecurityFeatures DWORD dan ubah nilainya menjadi 1 untuk menggunakan Boot Aman saja atau  ^{(change it’s value to 1 to use Secure Boot only or )}setel ke 3 untuk menggunakan Boot Aman dan perlindungan DMA.^{(set it to 3 to use Secure Boot and DMA protection.)}

8.Sekarang arahkan ke kunci registri berikut:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA

9.Klik kanan pada LSA lalu pilih New > DWORD (32-bit) Value lalu beri nama DWORD ini sebagai LsaCfgFlags dan tekan Enter.

10.Klik dua kali pada LsaCfgFlags DWORD dan ubah nilainya sesuai dengan:

Nonaktifkan Credential Guard: 0 ^{(Disable Credential Guard: 0)}
Aktifkan Credential Guard dengan kunci UEFI: 1 ^{(Enable Credential Guard with UEFI lock: 1)}
Aktifkan Credential Guard tanpa kunci: 2^{(Enable Credential Guard without lock: 2)}

11.Setelah selesai, tutup Registry Editor .

Nonaktifkan Penjaga Kredensial di Windows 10^{(Disable Credential Guard in Windows 10)}

Jika Credential Guard diaktifkan tanpa UEFI Lock maka Anda dapat  Menonaktifkan Windows Credential Guard^{( Disable Windows Credential Guard)} menggunakan alat kesiapan perangkat keras Device Guard dan Credential Guard^{(Device Guard and Credential Guard hardware readiness tool)} atau metode berikut:

1.Tekan Windows Key + R lalu ketik regedit dan tekan Enter untuk membuka Registry Editor.

2.Navigasi dan hapus kunci registri berikut:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\LsaCfgFlags
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceGuard\EnableVirtualizationBasedSecurity
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceGuard\RequirePlatformSecurityFeatures

3. Hapus variabel EFI Windows Credential Guard dengan menggunakan bcdedit^{(Delete the Windows Credential Guard EFI variables by using bcdedit)} . Tekan Windows Key + X lalu pilih Command Prompt (Admin).

4. Ketik perintah berikut ke dalam cmd dan tekan Enter :

mountvol X: /s
copy %WINDIR%\System32\SecConfig.efi X:\EFI\Microsoft\Boot\SecConfig.efi /Y
bcdedit /create {0cb3b571-2f2e-4343-a879-d86a476d7215} /d "DebugTool" /application osloader
bcdedit /set {0cb3b571-2f2e-4343-a879-d86a476d7215} path "\EFI\Microsoft\Boot\SecConfig.efi"
bcdedit /set {bootmgr} bootsequence {0cb3b571-2f2e-4343-a879-d86a476d7215}
bcdedit /set {0cb3b571-2f2e-4343-a879-d86a476d7215} loadoptions DISABLE-LSA-ISO
bcdedit /set {0cb3b571-2f2e-4343-a879-d86a476d7215} device partition=X:
mountvol X: /d

5.Setelah selesai, tutup command prompt dan reboot PC Anda.

6.Terima permintaan untuk menonaktifkan Windows Credential Guard .

Direkomendasikan:^{(Recommended:)}

• Izinkan atau Cegah Tema Windows 10 untuk Mengubah Ikon Desktop^{(Allow or Prevent Windows 10 Themes to Change Desktop Icons)}
• Aktifkan Pesan Status Verbose atau Sangat Terperinci di Windows 10^{(Enable Verbose or Highly Detailed Status Messages in Windows 10)}
• Aktifkan atau Nonaktifkan Mode Pengembang di Windows 10^{(Enable or Disable Developer Mode in Windows 10)}
• Nonaktifkan Pengurangan Kualitas JPEG Wallpaper Desktop di Windows 10^{(Disable Desktop Wallpaper JPEG Quality Reduction in Windows 10)}

Itu saja Anda telah berhasil mempelajari Cara Mengaktifkan atau Menonaktifkan Penjaga Kredensial di Windows 10^{(How to Enable or Disable Credential Guard in Windows 10)} tetapi jika Anda masih memiliki pertanyaan tentang tutorial ini, silakan tanyakan di bagian komentar.

Enable or Disable Credential Guard in Windows 10

Enable or Disable Credential Guard in Windows 10: Windows Credential Guard uses virtualization-based security to isolate secrets so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks, such as Pass-the-Hash or Pass-The-Ticket. Windows Credential Guard prevents these attacks by protecting NTLM password hashes, Kerberos Ticket Granting Tickets, and credentials stored by applications as domain credentials.

By enabling Windows Credential Guard the following features and solutions are provided:

Hardware security
Virtualization-based security
Better protection against advanced persistent threats

Now you know the importance of the Credential Guard, you should definitely enable this for your system. So without wasting any time let’s see How to Enable or Disable Credential Guard in Windows 10 with the help of the below-listed tutorial.

Enable or Disable Credential Guard in Windows 10

Make sure to create a restore point just in case something goes wrong.

Method 1: Enable or Disable Credential Guard in Windows 10 using Group Policy Editor

Note: This method only works if you have Windows Pro, Education, or Enterprise Edtion. For Windows Home version users skip this method and follow the next one.

1.Press Windows Key + R then type regedit and hit Enter to open Group Policy Editor.

2.Navigate to the following path:

Computer Configuration > Administrative Templates > System > Device Guard

3.Make sure to select Device Guard than in right window pane double-click on “Turn On Virtualization Based Security” policy.

4.In the Properties window of the above policy make sure to select Enabled.

5.Now from the “Select Platform Security Level” drop-down select Secure Boot or Secure Boot and DMA Protection.

6.Next, from “Credential Guard Configuration” drop-down select Enabled with UEFI lock. If you want to turn off Credential Guard remotely, choose Enabled without lock instead of Enabled with UEFI lock.

7.Once finished, click Apply followed by OK.

8.Reboot your PC to save changes.

Method 2: Enable or Disable Credential Guard in Windows 10 using Registry Editor

Credential Guard uses virtualization-based security features which have to be enabled first from Windows feature before you can enable or disable Credential Guard in Registry Editor. Make sure to only use one of the below-listed methods to enable virtualization-based security features.

Add the virtualization-based security features by using Programs and Features

1.Press Windows Key + R then type appwiz.cpl and hit Enter to open Program and Features.

2.From the left-hand window click on “Turn Windows Features on or off“.

3.Find and expand Hyper-V then similarly expand Hyper-V Platform.

4.Under Hyper-V Platform checkmark “Hyper-V Hypervisor“.

5.Now scroll down and checkmark “Isolated User Mode” and click OK.

Add the virtualization-based security features to an offline image by using DISM

1.Press Windows Key + X then select Command Prompt (Admin).

2.Type the following command into cmd to add the Hyper-V Hypervisor and hit Enter:

dism /image:<WIM file name> /Enable-Feature /FeatureName:Microsoft-Hyper-V-Hypervisor /all
OR
dism /Online /Enable-Feature:Microsoft-Hyper-V /All

3.Add the Isolated User Mode feature by running the following command:

dism /image:<WIM file name> /Enable-Feature /FeatureName:IsolatedUserMode
OR
dism /Online /Enable-Feature /FeatureName:IsolatedUserMode

4.Once finished, you can close the command prompt.

Enable or Disable Credential Guard in Windows 10

1.Press Windows Key + R then type regedit and hit Enter to open Registry Editor.

2.Navigate to the following registry key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\DeviceGuard

3.Right-click on DeviceGuard then select New > DWORD (32-bit) Value.

4.Name this newly created DWORD as EnableVirtualizationBasedSecurity and hit Enter.

5.Double-click on EnableVirtualizationBasedSecurity DWORD then change its value to:

To Enable Virtualization-based Security: 1
To Disable Virtualization-based Security: 0

6.Now again right-click on DeviceGuard then select New > DWORD (32-bit) Value and name this DWORD as RequirePlatformSecurityFeatures then hit Enter.

7.Double-click on RequirePlatformSecurityFeatures DWORD and change it’s value to 1 to use Secure Boot only or set it to 3 to use Secure Boot and DMA protection.

8.Now navigate to the following registry key:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA

9.Right-click on LSA then select New > DWORD (32-bit) Value then name this DWORD as LsaCfgFlags and hit Enter.

10.Double-click on LsaCfgFlags DWORD and change its value according to:

Disable Credential Guard: 0
Enable Credential Guard with UEFI lock: 1
Enable Credential Guard without lock: 2

11.Once finished, close Registry Editor.

Disable Credential Guard in Windows 10

If Credential Guard was enabled without UEFI Lock then you can Disable Windows Credential Guard using the Device Guard and Credential Guard hardware readiness tool or the following method:

1.Press Windows Key + R then type regedit and hit Enter to open Registry Editor.

2.Navigate and delete the following registry keys:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\LsaCfgFlags
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceGuard\EnableVirtualizationBasedSecurity
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceGuard\RequirePlatformSecurityFeatures

3.Delete the Windows Credential Guard EFI variables by using bcdedit. Press Windows Key + X then select Command Prompt (Admin).

4.Type the following command into cmd and hit Enter:

mountvol X: /s
copy %WINDIR%\System32\SecConfig.efi X:\EFI\Microsoft\Boot\SecConfig.efi /Y
bcdedit /create {0cb3b571-2f2e-4343-a879-d86a476d7215} /d "DebugTool" /application osloader
bcdedit /set {0cb3b571-2f2e-4343-a879-d86a476d7215} path "\EFI\Microsoft\Boot\SecConfig.efi"
bcdedit /set {bootmgr} bootsequence {0cb3b571-2f2e-4343-a879-d86a476d7215}
bcdedit /set {0cb3b571-2f2e-4343-a879-d86a476d7215} loadoptions DISABLE-LSA-ISO
bcdedit /set {0cb3b571-2f2e-4343-a879-d86a476d7215} device partition=X:
mountvol X: /d

5.Once finished, close command prompt and reboot your PC.

6.Accept the prompt to disable Windows Credential Guard.

Recommended:

• Allow or Prevent Windows 10 Themes to Change Desktop Icons
• Enable Verbose or Highly Detailed Status Messages in Windows 10
• Enable or Disable Developer Mode in Windows 10
• Disable Desktop Wallpaper JPEG Quality Reduction in Windows 10

That’s it you have successfully learned How to Enable or Disable Credential Guard in Windows 10 but if you still have any queries regarding this tutorial then feel free to ask them in the comment’s section.

Related posts

• Nonaktifkan Pinch Zoom Feature di Windows 10

• Membuat Full System Image Backup di Windows 10 [Panduan Ultimate]

• Cara Membuat System Image Backup di Windows 10

• Cara Menghapus Volume or Drive Partition di Windows 10

• Cara Menonaktifkan Sticky Corners di Windows 10

• Cara menggunakan Fn Key Lock di Windows 10

• Cara Jalankan JAR Files di Windows 10

• Cara Menghapus Instalan McAfee sepenuhnya dari Windows 10

• Find Security Identifier (SID) dari User di Windows 10

• Mudah View Chrome Activity pada Windows 10 Timeline

• Fix Microsoft Compatibility Telemetry High Disk Usage di Windows 10

• 3 Ways untuk membunuh A Process di Windows 10

• Allow or Prevent Devices Untuk Wake Computer di Windows 10

• Fix Calculator tidak berfungsi di Windows 10

• Hide Items dari Control Panel di Windows 10

• USB Device tidak berfungsi di Windows 10 [ASK]

• Mouse Pointer Lags di Windows 10 [SOLVED]

• Fix Black Desktop Background di Windows 10

• Ubah Time ke Display List dari Operating Systems di Startup di Windows 10

• Fix Function kunci tidak bekerja pada Windows 10