PowerTip: Identify if CredentialGuard is enabled with Windows PowerShell

Doctor Scripto

October 30th, 20193 0

Summary: Easily identify if Credential Guard is enabled using the Get-ComputerInfo Cmdlet in Windows 10

A picture containing scissors Description automatically generated

Question: Hey Doctor Scripto, how can I tell if CredentialGuard has been enabled on my Windows 10 computer?

Answer: Just use the Get-ComputerInfo Cmdlet and target the DeviceGaurdSecurityServicesConfigured property. The following line will produce a Boolean $TRUE if it is enabled.

‘CredentialGuard’ -match ((Get-ComputerInfo).DeviceGuardSecurityServicesConfigured)

PowerShell, Doctor Scripto, PowerTip, Credential Guard, Paul Greeley

 

Doctor Scripto Scripter, PowerShell, vbScript, BAT, CMD

Read next

3 comments

Discussion is closed. Login to edit/delete existing comments.

  • Max 0

    There’s also “DeviceGuardSecurityServicesRunning” which indicates if it’s actually Running.

    • Sean KearneyMicrosoft employee 0

      Nice share on that additional property! Thanks!

  • Dmitry Tolstoy 0

    If it’s epmty it’s always ‘True’:
    > ‘ILoveScriptingGuy’ -match ((Get-ComputerInfo).DeviceGuardSecurityServicesConfigured)
    True

    It should be like this:
    > ((Get-ComputerInfo).DeviceGuardSecurityServicesConfigured) -match ‘CredentialGuard’
    False

Feedback usabilla icon