From 9d7a00524f246065e3a42f7b5a6fb97c8e7a2e60 Mon Sep 17 00:00:00 2001 From: Brian Lich Date: Tue, 8 Nov 2016 13:31:09 -0800 Subject: [PATCH] changed text that Credential Guard can run within a virtual machine on Windows 10, version 1607 --- windows/whats-new/security.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/windows/whats-new/security.md b/windows/whats-new/security.md index 4cf480e9d7..a17f84be19 100644 --- a/windows/whats-new/security.md +++ b/windows/whats-new/security.md @@ -166,8 +166,9 @@ Credential Guard is another new feature in Windows 10 Enterprise that employs V For more information about the hardware requirements for Credential Guard, see the [Windows 10 hardware considerations](#hardware) section. For more information about VBS in Windows 10, see the [Virtualization-based security](#virtualization-based-security) section. -**Note**
-Because it requires isolated user mode and a Hyper-V hypervisor, you cannot configure Credential Guard on a VM, only on a physical computer. +> [!NOTE] +> Starting in Windows 10, version 1607, you can configure Credential Guard on a VM. +   The Credential Guard feature is targeted at resisting the use of pass-the-hash and pass-the-ticket techniques. By employing a MFA option such as Microsoft Passport with Credential Guard, you can gain additional protection against such threats. For more in-depth information about how Credential Guard works and the specific mitigations it provides, see [Protect derived domain credentials with Credential Guard](../keep-secure/credential-guard.md).