Windows 11 System Protection is enabled but not running? The MiniTool blog provides a practical way to solve this problem.
Quick navigation:
- Method 1: Verify hardware compatibility
- Method 2: Configure system protection
- Method 3: Check whether virtualization-based security features are enabled
- Method 4: Enable the required UEFI/BIOS functions
- Summarize
Many users report having issues with system protection enabled but not running. System protection is a security feature of Windows that uses hardware-based technologies such as Secure Boot, TPM 2.0, and Virtualization-based Security Features (VBS) to protect system integrity from attacks from the start-up process. However, when you try to enable virtualization-based security in Group Policy, Windows Security Center shows that system protection is turned off.
Tip: It is not enough to rely solely on system protection to protect your computer, as it may have some problems. Therefore, it is recommended that you use other software to back up important data to prevent data loss. MiniTool ShadowMaker is a free backup software that allows you to back up files, folders, partitions, disks and even systems.
How to resolve the issue of "System Protection is enabled but not running"? Please continue reading.
Method 1: Verify hardware compatibility
Before continuing, make sure that your server meets the necessary hardware specifications for Secured Core. To enable features such as system protection, your processor must belong to one of the following supported series:
- Intel: vPro CPUs from Coffee Lake (8th Gen), Whiskey Lake or later
- AMD: Zen 2 or newer architecture (for example, Ryzen 3000 series, EPYC 7002 series)
- Qualcomm: Snapdragon SD850 or higher
In addition, your system must support:
- Secure boot enabled UEFI firmware
- TPM 2.0
- Hardware virtualization
Method 2: Configure system protection
To resolve the issue of "System Protection on Windows 11 is enabled but not running", you should make sure that System Protection is enabled. Here is the check method:
Press Windows R to open the Run dialog box, and type regedit in it.
After opening the Registry Editor, go to the following path:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\SystemGuard
- Find the Enabled value and double-click it to check if its value is 1 .
Method 3: Check whether virtualization-based security features are enabled
System protection relies on VBS, so if VBS is disabled, Windows Defender system protection will not work. Here is a way to check if virtualization-based security features are enabled:
Press Win R to open the Run dialog box. Type gpedit.msc and press Enter .
Go to the following path:
Local Computer Policy\Computer Configuration\Administrative Templates\System\Device Protection
- In the right pane, double-click to enable virtualization-based security features .
- Check if the Enabled button is enabled and click Apply > OK .
Method 4: Enable the required UEFI/BIOS functions
You can enable UEFI mode in Windows to resolve the issue of "System Protection is enabled but not running". Please follow these steps:
First, you need to turn off your computer.
Open the computer and press a key immediately to enter the BIOS.
Press the right arrow key to enter the Startup tab.
Select UEFI/BIOS startup mode and press Enter .
In the new pop-up window, press the Up arrow key to select UEFI startup mode , and then press Enter .
Press F10 to save the changes and exit the window.
Summarize
How to resolve the issue of "System Protection is enabled but not running" on Windows 11? I believe the above 4 methods have helped you solve this error.
The above is the detailed content of Windows Defender System Guard Doesn't Work on Windows 11. For more information, please follow other related articles on the PHP Chinese website!

Hot AI Tools

Undress AI Tool
Undress images for free

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

Notepad++7.3.1
Easy-to-use and free code editor

SublimeText3 Chinese version
Chinese version, very easy to use

Zend Studio 13.0.1
Powerful PHP integrated development environment

Dreamweaver CS6
Visual web development tools

SublimeText3 Mac version
God-level code editing software (SublimeText3)

Hot Topics

When the Windows Security Center is blank or the function is missing, you can follow the following steps to check: 1. Confirm whether the system version supports full functions, some functions of the Home Edition are limited, and the Professional Edition and above are more complete; 2. Restart the SecurityHealthService service to ensure that its startup type is set to automatic; 3. Check and uninstall third-party security software that may conflict; 4. Run the sfc/scannow and DISM commands to repair system files; 5. Try to reset or reinstall the Windows Security Center application, and contact Microsoft support if necessary.

Players have been experiencing the PEAK voice chat not working issue on PC, impacting their cooperation during climbs. If you are in the same situation, you can read this post from MiniTool to learn how to resolve PEAK voice chat issues.Quick Navigat

The computer is stuck in the "Undo Changes made to the computer" interface, which is a common problem after the Windows update fails. It is usually caused by the stuck rollback process and cannot enter the system normally. 1. First of all, you should wait patiently for a long enough time, especially after restarting, it may take more than 30 minutes to complete the rollback, and observe the hard disk light to determine whether it is still running. 2. If there is no progress for a long time, you can force shut down and enter the recovery environment (WinRE) multiple times, and try to start repair or system restore. 3. After entering safe mode, you can uninstall the most recent update records through the control panel. 4. Use the command prompt to execute the bootrec command in the recovery environment to repair the boot file, or run sfc/scannow to check the system file. 5. The last method is to use the "Reset this computer" function

Encountering something went wrong 657rx can be frustrating when you log in to Microsoft Teams or Outlook. In this article on MiniTool, we will explore how to fix the Outlook/Microsoft Teams error 657rx so you can get your workflow back on track.Quick

When encountering the "RPCserverisunavailable" problem, first confirm whether it is a local service exception or a network configuration problem. 1. Check and start the RPC service to ensure that its startup type is automatic. If it cannot be started, check the event log; 2. Check the network connection and firewall settings, test the firewall to turn off the firewall, check DNS resolution and network connectivity; 3. Run the sfc/scannow and DISM commands to repair the system files; 4. Check the group policy and domain controller status in the domain environment, and contact the IT department to assist in the processing. Gradually check it in sequence to locate and solve the problem.

When you encounter the prompt "This operation requires escalation of permissions", it means that you need administrator permissions to continue. Solutions include: 1. Right-click the "Run as Administrator" program or set the shortcut to always run as an administrator; 2. Check whether the current account is an administrator account, if not, switch or request administrator assistance; 3. Use administrator permissions to open a command prompt or PowerShell to execute relevant commands; 4. Bypass the restrictions by obtaining file ownership or modifying the registry when necessary, but such operations need to be cautious and fully understand the risks. Confirm permission identity and try the above methods usually solve the problem.

When you encounter the "DefaultGatewayisNotAvailable" prompt, it means that the computer cannot connect to the router or does not obtain the network address correctly. 1. First, restart the router and computer, wait for the router to fully start before trying to connect; 2. Check whether the IP address is set to automatically obtain, enter the network attribute to ensure that "Automatically obtain IP address" and "Automatically obtain DNS server address" are selected; 3. Run ipconfig/release and ipconfig/renew through the command prompt to release and re-acquire the IP address, and execute the netsh command to reset the network components if necessary; 4. Check the wireless network card driver, update or reinstall the driver to ensure that it works normally.

When encountering the "SYSTEM_SERVICE_EXCEPTION" blue screen error, you do not need to reinstall the system or replace the hardware immediately. You can follow the following steps to check: 1. Update or roll back hardware drivers such as graphics cards, especially recently updated drivers; 2. Uninstall third-party antivirus software or system tools, and use WindowsDefender or well-known brand products to replace them; 3. Run sfc/scannow and DISM commands as administrator to repair system files; 4. Check memory problems, restore the default frequency and re-plug and unplug the memory stick, and use Windows memory diagnostic tools to detect. In most cases, the driver and software problems can be solved first.
