Reporting on Credential Guard Status

[amandaw33]

Has anyone figured out how to utilize CMS to report on win10 credential guard status?

On a client, you can see if it's running via msinfo where it shows virtualized-based security "running" as well as virtualized-based security Services Configured and virtualized-based security Services Running.

In task manager, you can see it's running if you check details tab and description of lsalso.exe.

This powershell command exists and so does this MS tool

[Alex Hedley]

Is this on a computer basis live, or a report for the whole estate?

Custom inventory

Or a (Real time) task that runs the msinfo and outputs the value

[amandaw33]

I'd be looking to run the report for who has it disabled, their  computer model number (we may only be able to enable it on some models) and get it emailed (for whole environment).