diff --git a/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md b/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md index 807f81aa66..026b2d59d9 100644 --- a/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md +++ b/windows/security/threat-protection/windows-defender-exploit-guard/enable-virtualization-based-protection-of-code-integrity.md @@ -25,8 +25,9 @@ If this happens, see [Troubleshooting](#troubleshooting) for remediation steps. ## How to turn on HVCI in Windows 10 version 1803 -Beginning with Windows 10, version 1803, HVCI is enabled automatically on devices that support virtualization based security (VBS). HVCI can also be enabled using any of these options: -- [Windows Defender Security Center](#enable-hvci-using-windows-defender-security-center) +beginning with Windows 10, version 1803 you can use [Windows Defender Security Center](#enable-hvci-using-windows-defender-security-center) to enable HVCI on a workgroup computer. + +To enable HVCI on Windows 10 devices across an enterprise, use any of these options: - [Group Policy](#enable-hvci-using-group-policy) - Windows Intune (or another MDM provider) - [System Center Configuration Manager](https://cloudblogs.microsoft.com/enterprisemobility/2015/10/30/managing-windows-10-device-guard-with-configuration-manager/) @@ -34,15 +35,13 @@ Beginning with Windows 10, version 1803, HVCI is enabled automatically on device ### Enable HVCI using Windows Defender Security Center -You can use Windows Defender Security Center to enable HVCI on a workgroup computer beginning with Windows 10, version 1803. + Windows Defender Security Center to enable HVCI . 1. Click **Start** > **Settings** > **Update & security** > **Windows Security** > **Open Windows Defender Security Center**. 2. In Windows Defender security center, click **Device Security** > **Core isolation** > **Memory integrity**. ### Enable HVCI using Group Policy -You can use Group Policy to enable HVCI across an enterprise. - 1. Use Group Policy Editor (gpedit.msc) to either edit an existing GPO or create a new one. 2. Navigate to **Computer Configuration** > **Administrative Templates** > **System** > **Device Guard**. 3. Double-click **Turn on Virtualization Based Security**.