How to disable "Device Guard"

Hi SugarySalt,

Device Guard is a set of hardware and OS technologies that when configured together, allow enterprises to "lock down" the system and only allow authorized applications or programs to run. With that being said, it's best that you reach out to your local IT personnel on how to change your Device Guard's settings so that your software can be allowed to run on your Surface Pro.

If you're the local IT of your organization, I recommend that you raise your concern at our TechNet forums. TechNet is a community of IT professionals who share and discuss IT related concerns and on how to resolve them. Please click on this link to be redirected to the web page and then either look for similar threads or create a new thread so that the community can engage with your concern.

If you have additional questions, please let me know by replying to this thread. This way, I'll get notified and respond back to you as soon as I can.

you can disable  via  group policy editor  

type   GPEDIT.MSC  in cmd  and  enter

expand computer configuration \administrative templates \system\ device guard \

right click on turn on virtualization based security , choose edit  , then  choose  disabled  

click  apply  , click ok, close  group policy editor

type   GPUPDATE /FORCE  in cmd  and  enter

wait for  2 minutes to complete ,  then restart the windows