py-win-ban-hyperv 0.1.0__py3-none-any.whl

py_win_ban_hyperv/__init__.py

@@ -0,0 +1,5 @@
+from .core import ban_hyper_v
+
+__all__ = [
+    "ban_hyper_v"
+]

py_win_ban_hyperv/__main__.py

@@ -0,0 +1,15 @@
+from . import ban_hyper_v
+import sys
+
+def main():
+    yn_inp = ""
+    while yn_inp == "" or yn_inp[0] not in ["y", "n"]:
+        yn_inp = input("Are you sure to ban hyperV (y/N):").lower().strip()
+    
+    if yn_inp[0] == "y":
+        reboot = "--reboot" in sys.argv
+        ban_hyper_v(reboot)
+    else:
+        print("Operation Abort.")
+
+main()

py_win_ban_hyperv/ban_hyperv.ps1

@@ -0,0 +1,56 @@
+echo "+================================================+"
+echo "+          py-win-ban-hyperv: v0.1.0             +"
+echo "+================================================+"
+echo ""
+
+Set-Location -LiteralPath $PSScriptRoot
+
+echo "Disabling the Windows hypervisor launch at boot for the current boot entry."
+bcdedit /set "{current}" hypervisorlaunchtype off
+echo ""
+
+echo "Disabling Virtualization-Based Security in Device Guard settings."
+reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v EnableVirtualizationBasedSecurity /t REG_DWORD /d 0 /f
+echo ""
+
+echo "Disabling required platform security features for Device Guard."
+reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard" /v RequirePlatformSecurityFeatures /t REG_DWORD /d 0 /f
+echo ""
+
+echo "Disabling Hypervisor-Enforced Code Integrity."
+reg add "HKLM\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v Enabled /t REG_DWORD /d 0 /f
+echo ""
+
+echo "Disabling Credential Guard through the LSA configuration flag."
+reg add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LsaCfgFlags /t REG_DWORD /d 0 /f
+echo ""
+
+echo "Disabling all Microsoft Hyper-V optional features."
+dism /online /disable-feature /featurename:Microsoft-Hyper-V-All /norestart
+echo ""
+
+echo "Disabling the Virtual Machine Platform optional feature."
+dism /online /disable-feature /featurename:VirtualMachinePlatform /norestart
+echo ""
+
+echo "Disabling the Windows Hypervisor Platform optional feature."
+dism /online /disable-feature /featurename:HypervisorPlatform /norestart
+echo ""
+
+echo "Disabling the Windows Sandbox optional feature."
+dism /online /disable-feature /featurename:Containers-DisposableClientVM /norestart
+echo ""
+
+echo "Allowing scripts to run in this PowerShell process only."
+Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass
+echo ""
+
+echo "Running the Device Guard and Credential Guard readiness tool to disable DG/CG."
+& .\dgreadiness_v3.6\DG_Readiness_Tool_v3.6.ps1 -Disable
+echo ""
+
+echo "Done. Please reboot to validate the settings."
+if ($args[0] -eq "True") {
+    shutdown -r -t 30
+}
+pause

py_win_ban_hyperv/core.py

@@ -0,0 +1,10 @@
+import py_admin_launch
+import os
+DIRNOW = os.path.dirname(os.path.abspath(__file__))
+BAN_HYPERV_PS1 = os.path.join(DIRNOW, "ban_hyperv.ps1")
+
+def ban_hyper_v(reboot:bool):
+    py_admin_launch.launch(["powershell", BAN_HYPERV_PS1, str(reboot)], cwd=DIRNOW)
+
+if __name__ == "__main__":
+    ban_hyper_v(True)