Credential Guard is configured to run, but is not licensed - Windows 11 Pro

MKANET · Aug 11, 2023

I know following Event Viewer events are just warnings, not errors. In the below forum thread, people just say to ignore all these warnings.

LSA Credential Guard Errors in Event Log

Can somebody help me? Everytime I boot up my new install of Windows 11 Pro I am getting the following errors in event log. The details are as follows: Error ID: 6155 LSA package is not signed as expected. This can cause unexpected behaviour with Credential Guard. PackageName: schannel...

www.elevenforum.com

However, I want to make sure there haven't been any new ways to deal with these errors. Maybe there's an OS setting that we can use to turn this off instead of just hiding/ignoring these warnings?

thecaretaker · Aug 11, 2023

I have a Gigabyte motherboard (see details in My Computer below) and found by turning UltraFast boot on in the BIOS, I do not get those 'events' recorded in Event Logs. Probably just a way to hide them rather than fix them.

ander35 · Aug 14, 2023

Microsoft security is a total mess it seems. Some thing work some don’t and some things show in security center while others do not depending on the user.

Dru2 · Aug 15, 2023

thecaretaker said:
I have a Gigabyte motherboard (see details in My Computer below) and found by turning UltraFast boot on in the BIOS, I do not get those 'events' recorded in Event Logs. Probably just a way to hide them rather than fix them.

I have a Gigabyte board with UltraFast boot turned in the BIOS and I STILL get those event notices, so....

Comport Colin · Aug 21, 2023

Read Windows Defender Credential Guard requirements - Windows Security
where it says that Credential Guard is not licensed nor supported on the Pro Edition.

MKANET · Aug 21, 2023

Comport Colin said:
Read Windows Defender Credential Guard requirements - Windows Security
where it says that Credential Guard is not licensed nor supported on the Pro Edition.

Thanks, I already did. I'm just not sure why Microsoft would even attempt to use Credential Guard on a Win11 Pro PC if they already know it's not licensed.

I read somewhere on Reddit that there's a supposed fix for this this month, but when I asked which update, there as no response. Maybe its an insider update.

Ghot · Aug 21, 2023

thecaretaker · Aug 21, 2023

Dru2 said:
I have a Gigabyte board with UltraFast boot turned in the BIOS and I STILL get those event notices, so....

Are you sure you are getting UltraFast Boot? I found Superfetch and Prefetch needed to be turned on in Windows (I had previously always turned them off in Windows 10 as I used SSD drives). It might be that you have an additional boot option than me and I also have USB set to partial rather than full. I did find it difficult to get true UltraFast to work at first. If everything isn't ideally set up it actually reverts to just Fast boot.

PS: It also takes a couple of shutdowns before Ultra Fast works. If I do a Restart, it reverts to Fast Boot too until I do Shutdown again.

Ghot · Aug 21, 2023

This is just yet another "on our computers before it's finished" present from Microsoft. :/

Dru2 · Aug 21, 2023

thecaretaker said:
Are you sure you are getting UltraFast Boot?

View attachment 68556

I think I am. It is set per my image in post #4. And I get fast boot times, so....

thecaretaker said:
I found Superfetch and Prefetch needed to be turned on in Windows (I had previously always turned them off in Windows 10 as I used SSD drives).

I only have SSD / NVMe drives; my OS is on NVMe. I never disabled prefetch, nor Superfetch. I leave them as is. In fact, the only service I disable is Windows driver updates to keep Windows from overwriting my GPU drivers.

thecaretaker said:
It might be that you have an additional boot option than me...

If you mean that SanDisk drive, its only there because the board requires a thumb drive in place to capture BIOS screenshots. And that's the only time I install one outside of a boot drive for OS install.

thecaretaker said:
PS: It also takes a couple of shutdowns before Ultra Fast works. If I do a Restart, it reverts to Fast Boot too until I do Shutdown again.

I don't have that issue. Once set, its set unless I change it.

thecaretaker · Aug 22, 2023

Dru2 said:
I think I am. It is set per my image in post #4. And I get fast boot times, so....

I only have SSD / NVMe drives; my OS is on NVMe. I never disabled prefetch, nor Superfetch. I leave them as is. In fact, the only service I disable is Windows driver updates to keep Windows from overwriting my GPU drivers.

If you mean that SanDisk drive, its only there because the board requires a thumb drive in place to capture BIOS screenshots. And that's the only time I install one outside of a boot drive for OS install.

I don't have that issue. Once set, its set unless I change it.

With Ultra Fast boot, you shouldn't see the options to enter the BIOS (DEL) or the spinning wait circles (not sure of the correct term for them) during start-up. I've recorded my start up for you to compare. Win11 with Ultra Fast Start Up

Dru2 · Aug 22, 2023

thecaretaker said:
With Ultra Fast boot, you shouldn't see the options to enter the BIOS (DEL) or the spinning wait circles (not sure of the correct term for them) during start-up. I've recorded my start up for you to compare. Win11 with Ultra Fast Start Up

I thought I knew how fast boot worked, and your video is how it should work. With that mine actually is NOT working

To be honest though I'd assumed it was because I had "full initial" for USB support. But going with partial or off, still no go. For me though it was really never an issue until you made it an issue, so....

I might have to reset my BIOS to include clearing the CMOS. Unfortunately, I'll have to open the case for that since I have no Clear CMOS switch on the I/O panel. Apparently, Gigabyte didn't see a need to put one on the Z390 Extreme (Xtreme) boards

At the end of the day, it's really more about why it isn't working than needing it as I don't need fast boot anyway since I prefer getting into my BIOS without having to go through Windows. But now you've got me curious as to why it's not working.

Thanks

thecaretaker · Aug 22, 2023

Dru2 said:
I thought I knew how fast boot worked, and your video is how it should work. With that mine actually is NOT working

To be honest though I'd assumed it was because I had "full initial" for USB support. But going with partial or off, still no go. For me though it was really never an issue until you made it an issue, so....

I might have to reset my BIOS to include clearing the CMOS. Unfortunately, I'll have to open the case for that since I have no Clear CMOS switch on the I/O panel. Apparently, Gigabyte didn't see a need to put one on the Z390 Extreme (Xtreme) boards

At the end of the day, it's really more about why it isn't working than needing it as I don't need fast boot anyway since I prefer getting into my BIOS without having to go through Windows. But now you've got me curious as to why it's not working.

Thanks

It took me ages to fathom it out. It looks like you have most things right. Try this, switch the USB to partial and boot up your PC. Make sure power management is set to Balanced (recommended). Double check that Hibernate, Prefetch and Superfetch are enabled. Keep your PC on for 10-15 mins. Check a few emails/surf the net. Then shutdown. Once the monitor goes into power save, turn on again. Give it another 10-15mins (don't ask me why it needs this time on before it will enable it) then 'Shutdown'. If all is well, you should see UltraFast boot.

UltraFast boot is not a cure for these event log warnings, but it boots up so fast that Windows doesn't have time (or is programmed not to) add those items to event log.

Turn Prefetch ON:

Regedit

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters EnablePrefetcher 0 to 3

Turn ON Superfetch:

Services

sysmain/enable

Hibernate ON:

Command Prompt

powercfg -h on

Dru2 · Aug 22, 2023

Thanks for the info, that said....

thecaretaker said:
Try this, switch the USB to partial and boot up your PC. Make sure power management is set to Balanced (recommended). Double check that Hibernate, Prefetch and Superfetch are enabled.

I see you missed this part....

Dru2 said:
To be honest though I'd assumed it was because I had "full initial" for USB support. But going with partial or off, still no go.

And I checked the registry last night prior posting and Prefetch is enabled (parameter: 3) which is default....

0 – Disable Prefetcher

1 – Application launch Prefetching enabled

2 – Boot Prefetching enabled

3 – Application launch and Boot Prefetching enabled

The default value is 3. To disable Prefetch, set it to 0. Click OK and Exit.

And in the Services panel "SysMain" (previously known as SuperFetch) is set to automatic. Also default.

I've never messed with those values as I've no reason to.

I always set my Power Management to Balanced. I don't use Hibernate, so it is NOT ticked under Power Options; I simply use Sleep.

Anyway, this isn't a priority for me, because in the grand scheme of things, if Fast Boot were working, I'd likely disable it anyway since it's much easier to enter the BIOS with the delete key, than through the OS. In short, I really don't need it.

Dru2 · Aug 22, 2023

So, after clearing the CMOS and resetting the BIOS, I still cannot get Fast Boot to work. Or should I say bypass the BIOS screen allowing you to hit delete to enter the BIOS. However, bootup is still plenty fast.

Interestingly, enough, Fast Boot works the same (won't bypass the BIOS scree) on my backup system running Windows 10 Pro, with a different Gigabyte board (Z270 Gaming 8 board, vs the Gigabyte Z390 Xtreme board on my main rig running Windows 11 Pro).

With that, I'm not quite sure Fast Boot isn't working, even though it's not bypassing the BIOS screen. Even the video posted by @thecaretaker shows the BIOS screen before entering Windows, so....

And the commonality between both my machines is the OS runs and boots off an NVMe drive. Maybe that’s the answer? And yes, both boards are running the latest (last) BIOS update.

In the grand scheme of things, this isn't something I'm going to lose sleep over as my boot times are plenty fast anyway, so....

Credential Guard is configured to run, but is not licensed - Windows 11 Pro

Member

My Computer

Well-known member

My Computer

Member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Similar threads