PowerTip: Identify if CredentialGuard is enabled with Windows PowerShell

Doctor Scripto

Dr Scripto

Summary: Easily identify if Credential Guard is enabled using the Get-ComputerInfo Cmdlet in Windows 10

A picture containing scissors Description automatically generated

Question: Hey Doctor Scripto, how can I tell if CredentialGuard has been enabled on my Windows 10 computer?

Answer: Just use the Get-ComputerInfo Cmdlet and target the DeviceGaurdSecurityServicesConfigured property. The following line will produce a Boolean $TRUE if it is enabled.

‘CredentialGuard’ -match ((Get-ComputerInfo).DeviceGuardSecurityServicesConfigured)

PowerShell, Doctor Scripto, PowerTip, Credential Guard, Paul Greeley

 

Doctor Scripto
Dr Scripto

Scripter, PowerShell, vbScript, BAT, CMD

Follow Dr Scripto   

3 comments

  • Dmitry Tolstoy
    Dmitry Tolstoy

    If it’s epmty it’s always ‘True’:
    > ‘ILoveScriptingGuy’ -match ((Get-ComputerInfo).DeviceGuardSecurityServicesConfigured)
    True

    It should be like this:
    > ((Get-ComputerInfo).DeviceGuardSecurityServicesConfigured) -match ‘CredentialGuard’
    False

Leave a comment