Enable Hyper-V via Intune with PowerShell Scripts

The purpose of the blog post is to inform you how to enable Hyper-V via Intune on Windows 10 or Windows 11. Hyper-V is required for e.g. Windows Defender Credential guard, Application Guard and Application Control. You can enable Hyper-V in various ways, but I’ll explain in this blogpost the PowerShell script method.

Requirements Intune:

Microsoft Intune license
Intune MDM managed device
Intune Admin or Global Admin Role

Requirements Device:

Hypervisor enabled in BIOS
Windows 10 Enterprise/Pro/Education min. 1709
64bit processor
4GB memory

Note. I use the PowerShell command Enable-WindowsOptionalFeature to enable Hyper-V via Intune. I’ve decided to use the built-in PowerShell script method via Intune. If you want to enable Hyper-V via Intune but you want to use a Remediation scripts, you can use the following blog post.

You can also enable Hyper-V via the DISM Command and/or wrap the PowerShell script in a Win32 app.

My opinion is that the Apps section in Intune should only be used for installing applications and should not be misused for any other purpose.

PowerShell Scripts

PowerShell is commonly used for automating the management of systems. It will also be used to build, test, and deploy solutions, often in CI/CD environments. PowerShell is built on the .NET Common Language Runtime (CLR). All inputs and outputs are .NET objects.

More information about PowerShell can be found here

How to verify Hyper-V Hardware compatibility

Almost all corporate device models support Hyper-V, especially the modern ones. If you want to be sure if your device supports Hyper-V. Start with checking the operating system and hardware requirements. After checking the requirements you have to check the compatibility. You can use the following CMD or PowerShell command: systeminfo. If all listed Hyper-V requirements have a value of Yes, your system can run the Hyper-V role. If any item returns No, check the requirements and make adjustments where possible.

More information about Hyper-V requirements and compatibility can be found here

PowerShell script to be uploaded to Intune

#Check if Hyper-V is enabled and enable it if necessary if((Get-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V-Hypervisor).State -eq "Disabled") { Write-host "Enabling Microsoft-Hyper-V ...." Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V -All -NoRestart } else { Write-host "Microsoft-Hyper-V has succesfully been installed" } #Check if Hyper-V Gui is enabled and enable it if necessary if((Get-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V-Management-Clients).State -eq "Disabled") { Write-host "Enabling Microsoft-Hyper-V GUI ...." Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V -All -NoRestart } else { Write-host "Microsoft-Hyper-V With GUI has succesfully installed" }

#Check if Hyper-V is enabled and enable it if necessary if((Get-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V-Hypervisor).State -eq "Disabled") { Write-host "Enabling Microsoft Hyper-V...." Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V -All -NoRestart } else { Write-host "Microsoft Hyper-V was already succesfully installed" } #Check if Hyper-V Gui is enabled and enable it if necessary if((Get-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V-Management-Clients).State -eq "Enabled") { Write-host "Disabling the Microsoft-Hyper-V GUI ...." Disable-WindowsOptionalFeature -Online -FeatureName Microsoft-Hyper-V-Management-Clients -NoRestart } else { Write-host "Microsoft-Hyper-V without GUI was already succesfully installed" }