如果您尝试在Windows 10上的^{(Windows 10)}VMware Workstation Player中启动VM（虚拟机）^{(VM (Virtual Machine))}时收到错误消息VMware Workstation and Device/Credential Guard not compatible，那么这篇文章旨在帮助您。在这篇文章中，我们将介绍您可以尝试帮助您解决此问题的解决方案。

当您遇到此错误时，将显示以下完整错误消息；

VMware Player and Device/Credential Guard are not compatible. VMware Player can be run after disabling Device/Credential Guard. Please visit http://www.vmware.com/go/turnoff CG DG for more details.

在 Windows 10 中，Device Guard和Credential Guard是目前仅在Windows 10 Enterprise上提供的新安全功能。Device Guard是与企业相关的硬件和软件安全功能的组合，当它们一起配置时，将锁定设备，使其只能运行受信任的应用程序。如果它不是受信任的应用程序，则无法运行。Credential Guard使用基于虚拟化的安全性来隔离机密（凭证），以便只有特权系统软件才能访问它们。未经授权访问这些机密可能会导致凭据盗窃攻击。Credential Guard通过保护NTLM来防止这些攻击^(NTLM)密码哈希和Kerberos 票证授予票证^{(Kerberos Ticket Granting Tickets)}。

Windows 10专业^(Pro)版附带Hyper-V ，这是Microsoft内置于Windows的内部虚拟机解决方案。但是，如果启用 Hyper-V，它也会启用Credential Guard。禁用Hyper-V也会禁用Credential Guard。

VMware Workstation和Device/Credential Guard不兼容

根据错误消息，您可以看到它表明VMware Player can be run after disabling Device/Credential Guard。因此，如果您在Windows 10上遇到此^{(Windows 10)}VMware Workstation and Device/Credential Guard not compatible问题，您可以尝试以下两步解决方案来解决该问题。

1. 禁用 Hyper-V（如果启用）
2. 通过注册表编辑器^{(Registry Editor)}禁用Device Guard 策略^{(Device Guard Policy)}

我们来看看每个步骤的描述。

1]禁用Hyper-V（如果启用）

要禁用Hyper-V，请执行以下操作：

• 按Windows键 + R 调用“运行”^(Run)对话框。
• 在“运行”对话框中，键入appwiz.cpl并按 Enter 以打开“程序和功能^{(Programs and Features)}”小程序。
• 在左侧的程序^(Programs)和功能中，单击^(Features) 打开或关闭 Windows 功能。^{( Turn Windows features on or off.)}
• 在出现的打开或关闭 Windows 功能 ^{(Turn Windows features on or off )}弹出窗口中，取消选中Hyper-V。
• 单击确定。

Hyper-V现在将从您的计算机中禁用。

• 重新启动计算机并在启动时继续执行步骤 2^{(Step 2)}。

2]通过注册表编辑器^{(Registry Editor)}禁用^(Disable)Device Guard策略^{(Device Guard Policy)}

由于这是注册表操作，建议您备份注册表^{(back up the registry)} 或 创建系统还原点 ，以防过程出错。采取必要的预防措施后，您可以按照以下步骤解决VMware Workstation and Device/Credential Guard not compatible的问题。

• 按Windows key + R调用“运行”对话框。
• 在“运行”对话框中，键入regedit并按 Enter 以打开注册表编辑器^{(open Registry Editor)}。
• 导航或跳转到下面的注册表项路径：

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard

• 在右窗格中，双击EnableVirtualizationBasedSecurity键以编辑其属性。

如果您没有看到该密钥，请通过右键单击右侧窗格中的空白区域来创建它，然后选择New > DWORD (32-bit) Value。将值名称重命名为EnableVirtualizationBasedSecurity  ，然后按 Enter。

• 在数值^(Value)数据字段中输入0并按⁽⁰⁾Enter。
• 接下来，导航或跳转到下面的注册表项路径：

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

• 在右窗格中，双击LsaCfgFlags 键以编辑其属性。
• 在数值^(Value)数据字段中输入0并按⁽⁰⁾Enter。

您现在可以退出注册表编辑器^{(Registry Editor)}并重新启动系统。

您也可以使用本地组策略编辑器禁用 Device Guard 策略。

完成该过程并重新启动计算机后，VM 应该可以正常运行。

阅读下一篇：^{(Read next:)} VMware Workstation 和 Hyper-V 不兼容。

VMware Workstation and Device/Credential Guard not compatible

If when you try to power on the VM (Virtual Machine) inside VMware Workstation Player on Windows 10, you receive the error message VMware Workstation and Device/Credential Guard not compatible, then this post is intended to help you. In this post, we will present the solution you can try to help you resolve this issue.

When you encounter this error, the following full error message is displayed;

VMware Player and Device/Credential Guard are not compatible. VMware Player can be run after disabling Device/Credential Guard. Please visit http://www.vmware.com/go/turnoff CG DG for more details.

In Windows 10, Device Guard and Credential Guard are the new security features that are only available on Windows 10 Enterprise today. Device Guard is a combination of enterprise-related hardware and software security features that, when configured together, will lock a device down so that it can only run trusted applications. If it is not a trusted application, it cannot run. Credential Guard uses virtualization-based security to isolate secrets (credentials) so that only privileged system software can access them. Unauthorized access to these secrets can lead to credential theft attacks. Credential Guard prevents these attacks by protecting NTLM password hashes and Kerberos Ticket Granting Tickets.

The Pro version of Windows 10 ships with Hyper-V, the in-house virtual machine solution from Microsoft built-into Windows. However, if you enable Hyper-V, it also enables the Credential Guard. Disabling the Hyper-V also disable the Credential Guard.

VMware Workstation and Device/Credential Guard not compatible

Based on the error message, you can see it indicates VMware Player can be run after disabling Device/Credential Guard. So, if you’re faced with this VMware Workstation and Device/Credential Guard not compatible issue on Windows 10, you can try the 2-step solution below to resolve the issue.

1. Disable Hyper-V (if enabled)
2. Disable the Device Guard Policy via Registry Editor

Let’s take a look at the description of each step.

1] Disable Hyper-V (if enabled)

To disable Hyper-V, do the following:

• Press Windows key + R to invoke the Run dialog.
• In the Run dialog box, type appwiz.cpl and hit Enter to open Programs and Features applet.
• In Programs and Features, on the left-hand side, click Turn Windows features on or off.
• In the Turn Windows features on or off popup that appears, uncheck Hyper-V.
• Click OK.

Hyper-V will now be disabled from your computer.

• Restart the computer and on boot, proceed with Step 2.

2] Disable the Device Guard Policy via Registry Editor

Since this is a registry operation, it is recommended that you back up the registry or create a system restore point in case the procedure goes wrong. Once you have taken the necessary precautionary measures, you can proceed as follows to resolve the VMware Workstation and Device/Credential Guard not compatible issue.

• Press Windows key + R to invoke the Run dialog.
• In the Run dialog box, type regedit and hit Enter to open Registry Editor.
• Navigate or jump to the registry key path below:

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard

• On the right pane, double-click the EnableVirtualizationBasedSecurity key to edit its properties.

If you don’t see the key, create it by right-clicking on a blank space on the right pane and then select New > DWORD (32-bit) Value. Rename the value name as EnableVirtualizationBasedSecurity and hit Enter.

• Input 0 in the Value data field and hit Enter.
• Next, navigate or jump to the registry key path below:

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

• On the right pane, double-click the LsaCfgFlags key to edit its properties.
• Input 0 in the Value data field and hit Enter.

You can now exit Registry Editor and restart your system.

You can be able to disable Device Guard policy using the Local Group Policy Editor, as well.

Once you have completed the procedure and restarted your computer, the VM should be running fine.

Read next: VMware Workstation and Hyper-V are not compatible.

Related posts

• 如何在VMware Workstation中access and use BIOS

• VMware Workstation Pro不能Windows 10计算机上运行

• 如何在VMware Workstation Player上安装Windows 11

• VMware Workstation Player Windows：免费desktop virtualization app

• VMware and Hyper-V Virtual Machines Best免费Backup software

• 如何VHD转换为VHD X使用Hyper-V Manager

• 如何在Windows 10重新排列Virtual Desktops

• 修复Windows 10上的0x800f08c Hyper-V错误

• Best Windows 10免费虚拟drive software

• Fix Runtime error R6025 Pure Virtual Function Call

• VirtualBox显示Black screen和Booting客户操作系统

• VirtualBox VM未打开或从Windows 10开始

• 如何在Windows 10上创建虚拟Hard Disk

• 如何在Windows 10 Compiuter中修复未检测到的VirtualBox USB

• Fix VMware操作系统未找到Boot error

• Backup VMware Virtual Machines与Azure Backup Server

• 如何在Windows 10上从Windows XP Mode VM恢复数据

• Windows 10中的固件中禁用Virtualization support

• Device Manager缺少Microsoft Hosted Network Virtual Adapter

• 如何在Guest operating system上安装VMware Tools