Guide: Optimized Image
Hellbovine
Well-Known Member
- Messages
- 1,218
- Reaction score
- 779
It is not disabled by any of the registry tweaks I've posted to date. However, my current DPC Latency guide (link) suggests disabling virtualization. There are also countless "debloat" scripts out there that disable these features. Many tools that disable Defender will also turn these features off.
This is a good "teach a man to fish" moment. For readers interested in learning how to decipher these kinds of questions on your own, so you can build tweaking experience and no longer have to wait for answers from other people, this is how to figure these things out:
1. If a game mandates something, they will have a support article detailing the steps to enable/disable it, so the first thing I did was Google search for "Valorant Core Isolation VBS" without quotes and then clicked on the Riot Games link that appeared on top.
2. Next, I expanded all of the sections to reveal their text, and then I skimmed around looking for a registry tweak and saw they listed it as: HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity
3. The important bit you need from most registry tweaks is the words after the last backslash, which is "HypervisorEnforcedCodeIntegrity" in this case. Now download my Optimized Image "Tweaks" folder, then extract the folder and make that newly extracted folder the active window. From here you can either use the file explorer search of Windows to locate text within all of my tweak files, or you can open each file seperately and do a ctrl+f search for "HypervisorEnforcedCodeIntegrity" without quotes.
4. You will discover no such tweak exists in my guide, meaning the Windows operating system will use its default setting for that. In other words, my guide doesn't disable the Memory Integrity setting that Valorant needs, which is actually a subset of Core Isolation. At this point, I then read the rest of the support article and noted that for Valorant to work you also need to enable Intel Virtualization Technology (VT-x) and Execute Disable Bit (XD) in the BIOS. On AMD systems those BIOS settings are called SVM Mode (Secure Virtual Machine) and NX Mode.
2. Next, I expanded all of the sections to reveal their text, and then I skimmed around looking for a registry tweak and saw they listed it as: HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity
3. The important bit you need from most registry tweaks is the words after the last backslash, which is "HypervisorEnforcedCodeIntegrity" in this case. Now download my Optimized Image "Tweaks" folder, then extract the folder and make that newly extracted folder the active window. From here you can either use the file explorer search of Windows to locate text within all of my tweak files, or you can open each file seperately and do a ctrl+f search for "HypervisorEnforcedCodeIntegrity" without quotes.
4. You will discover no such tweak exists in my guide, meaning the Windows operating system will use its default setting for that. In other words, my guide doesn't disable the Memory Integrity setting that Valorant needs, which is actually a subset of Core Isolation. At this point, I then read the rest of the support article and noted that for Valorant to work you also need to enable Intel Virtualization Technology (VT-x) and Execute Disable Bit (XD) in the BIOS. On AMD systems those BIOS settings are called SVM Mode (Secure Virtual Machine) and NX Mode.
Last edited:
VBS requires you have Secure Boot enabled. Valorant and other online games will normally require Secure Boot mode, not because they're taking advantage of the security features but as a way to block some cheat apps.
Cheating apps are frequently coded as fake kernel drivers, and VBS has tighter signing requirements for drivers. By forcing everyone to enable Secure Boot (and VBS), life is easier for the game publisher.
Cheating apps are frequently coded as fake kernel drivers, and VBS has tighter signing requirements for drivers. By forcing everyone to enable Secure Boot (and VBS), life is easier for the game publisher.
Hi Hellbovine
I don't know if someone pointed you towards it, but there's a mismatch between the naming in the program and your guide:
Was this updated in the meantime?
Also for step 5, do I need to check "Remove Components" as OneDrive was unchecked to remove it?
Cheers and thanks for your work
Hannes
I don't know if someone pointed you towards it, but there's a mismatch between the naming in the program and your guide:
Was this updated in the meantime?
Also for step 5, do I need to check "Remove Components" as OneDrive was unchecked to remove it?
Cheers and thanks for your work
Hannes
Last edited:
Also at step 6 I'm wondering if I need to check both, winre and boot?
And further in the process, I run into this problem, that OneDrive cannot be found:
After processing is done, OneDrive isn't removed from this image.
Any ideas, how that's possible? I have the licensed version of ntlite.
And further in the process, I run into this problem, that OneDrive cannot be found:
After processing is done, OneDrive isn't removed from this image.
Any ideas, how that's possible? I have the licensed version of ntlite.
Last edited:
Hellbovine
Well-Known Member
- Messages
- 1,218
- Reaction score
- 779
I haven't used the newest NTLite versions since all the interface changes happened, so I don't have any experience with that yet. I've been watching the threads that are discussing issues with the new look and bugs (link1, link2) though, and you may be running into similar issues.
If nuhi and mods could look into this and help him out please, that would be most appreciated. I'm currently in the middle of moving to a new city and getting a new job. It's been arduous trying to find a house/apartment that fits my family and doesn't break the bank here, so I cannot devote any time to this for a while, but I will definitely update things once I get settled.
If nuhi and mods could look into this and help him out please, that would be most appreciated. I'm currently in the middle of moving to a new city and getting a new job. It's been arduous trying to find a house/apartment that fits my family and doesn't break the bank here, so I cannot devote any time to this for a while, but I will definitely update things once I get settled.
Hellbovine
Well-Known Member
- Messages
- 1,218
- Reaction score
- 779
For Step 6, you don't need to integrate things across all editions again for the registry. That's only in the first processing phase. If you do it again for the second processing phase it probably won't hurt anything, but a lot of settings don't work at all on those extra editions. The reason we do that for the first processing phase is because we're forcing everything to use the high performance power plan, which greatly speeds up installation time in non-virtual installs, and actually does work for WIM, WinRE, PE, Setup. The high performance power plan also fixes a Windows bug that causes older SSD to freeze, hang, and be extraordinarily slow during the Windows Setup phases.
The MS sample scripts for teaching PC vendors about automated installs do enable the High Performance power plan.
https://learn.microsoft.com/en-us/w...ng-a-single-wim?view=windows-11#sample-script
https://learn.microsoft.com/en-us/w...ng-a-single-wim?view=windows-11#sample-script