Error applying VBS and HVCI security baselines via endpoint/intune

Question

Error applying VBS and HVCI security baselines via endpoint/intune

Ben Johnston 5

Receiving the following errors when attempting to apply the security baselines to some machines via intune User's image

I can see both services are already running on the machine (which rules out hardware support, configuration etc)

Screenshot 2025-01-07 192725.png

I can see this error (amongst a few others) in event viewer

MDM PolicyManager: Policy is rejected by licensing, Policy: (EnableVirtualizationBasedSecurity), Area: (DeviceGuard), Result:(0x82B00006) Unknown Win32 Error code: 0x82b00006.

Which implies a licensing problem, however it's Windows 11 Business so should have support

Noah Fleischer (er/ihm) 0 Reputation points

2025-07-17T08:23:49.12+00:00

@Ben Johnston , did you find a solution? I have the same problem. But windows pro and business should be the same. Best, Noah

1 answer

Your answer

Noah Fleischer (er/ihm) 0 Reputation points

2025-07-17T08:23:49.12+00:00

@Ben Johnston , did you find a solution? I have the same problem. But windows pro and business should be the same. Best, Noah

Answer 1

Crystal-MSFT 54,031 Microsoft External Staff

@Ben Johnston, Thanks for posting in Q&A. Based on my researching, for the two settings, they support on Pro, Enterprise, Education and IoT Enterprise / IoT Enterprise LTSC edition. For Windows 11 Business, it is not supported. Therefore, we will get licensing error. Please upgrade to the supported edition to fix the issue.

User's image

https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-deviceguard#enablevirtualizationbasedsecurity

User's image

https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-virtualizationbasedtechnology#hypervisorenforcedcodeintegrity

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Crystal-MSFT 54,031 Reputation points Microsoft External Staff

2025-01-13T02:03:02.7133333+00:00

@Ben Johnston, Hope the above information can address your answer. If there's anything else we can help, feel free to let us know.
Jean-Philippe GRUFFAT 20 Reputation points

2025-03-31T14:16:34.8733333+00:00

Hello, there is something weird about this issue.

Anyone who has been using windows 10 pro and is now using Office 365 Business Premium licenses will face this issue as it turns the edition in the system properties into Windows 11 Business the moment you upgrade.

There are many other settings about intune that work like a charm and where this limitation is also specified. There are plenty of people saying Business Edition is just a rebranding of Pro Edition coming with the activation of Office 365 business prem...

So can we be explicit on this subject. I am asked to enable Core isolation on Windows11 machines, does this definitely means that whereas we always used pro editions and should be entitled to theses features, we must buy Office365 Enterprise licenses for all users now ?

Thanks in advance for your feedback.

Have a good day

Regards,

JPG
Noah Fleischer (er/ihm) 0 Reputation points

2025-07-17T08:17:31.21+00:00

Hi Jean-Philippe GRUFFAT, I have the same problem. Same scenario. My research showed, that business and pro should be the same. Did you find a solution? Best, Noah
Noah Fleischer (er/ihm) 0 Reputation points

2025-07-17T08:20:45.04+00:00

deleted
ANTHONY HUFFORD 10 Reputation points

2025-07-28T00:21:31.9866667+00:00

Same problem. I'm running W11 Pro.
Noah Fleischer (er/ihm) 0 Reputation points

2025-07-28T06:28:37.6333333+00:00

@ANTHONY HUFFORD , I am currently still in discussion with Microsoft support on this topic. Best, Noah
EB 0 Reputation points

2025-07-30T11:27:12.45+00:00

did you get a reply? Tempted to also contact support but they are useless most of the time. So far I fixed with a script, but would like to simply have it rolled out through the GUI.

Share via

Error applying VBS and HVCI security baselines via endpoint/intune

1 answer

Your answer