October 30th, 2019

PowerTip: Identify if CredentialGuard is enabled with Windows PowerShell

Doctor Scripto
Doctor Scripto
Scripter

Summary: Easily identify if Credential Guard is enabled using the Get-ComputerInfo Cmdlet in Windows 10

A picture containing scissors Description automatically generated

Question: Hey Doctor Scripto, how can I tell if CredentialGuard has been enabled on my Windows 10 computer?

Answer: Just use the Get-ComputerInfo Cmdlet and target the DeviceGaurdSecurityServicesConfigured property. The following line will produce a Boolean $TRUE if it is enabled.

‘CredentialGuard’ -match ((Get-ComputerInfo).DeviceGuardSecurityServicesConfigured)

PowerShell, Doctor Scripto, PowerTip, Credential Guard, Paul Greeley

 

Category
Doctor ScriptoPowerShellPowerTipWindows PowerShell
Topics
Credential GuardDoctor ScriptoPaul GreeleyPowerShellPowerTip

Author

Doctor Scripto

The "Scripting Guys" is a historical title passed from scripter to scripter. The current revision has morphed into our good friend Doctor Scripto who has been with us since the very beginning.

3 comments

Discussion is closed. Login to edit/delete existing comments.

  • Dmitry Tolstoy

    If it’s epmty it’s always ‘True’:
    > ‘ILoveScriptingGuy’ -match ((Get-ComputerInfo).DeviceGuardSecurityServicesConfigured)
    True

    It should be like this:
    > ((Get-ComputerInfo).DeviceGuardSecurityServicesConfigured) -match ‘CredentialGuard’
    False

  • Max

    There’s also “DeviceGuardSecurityServicesRunning” which indicates if it’s actually Running.

    • Sean KearneyMicrosoft employee

      Nice share on that additional property! Thanks!

Read next