Newly leaked benchmark results and user reports surrounding a near-final build of Windows 11 indicate a potential performance decrease, particularly in gaming, stemming from a security feature called Virtualization-Based Security (VBS). While VBS significantly bolsters system defenses against malware, its impact on frame rates and overall responsiveness raises concerns for users prioritizing performance.
VBS leverages hardware virtualization capabilities present in modern CPUs to create an isolated memory region, known as a “secure enclave.” Within this enclave, critical system processes and security functions, like credential storage and code integrity checks, operate independently from the main operating system. This isolation prevents malware, even if it gains a foothold in the main OS, from compromising these protected areas. Microsoft has been integrating VBS into Windows 10 for enterprise users for some time. However, early indications suggest it will be enabled by default on many fresh Windows 11 installations.
The performance overhead associated with VBS originates from the virtualization layer itself. Running these sensitive processes in a separate, virtualized environment necessitates additional resource allocation and communication overhead between the virtualized enclave and the main operating system. This extra layer can manifest as reduced performance in resource-intensive tasks, most noticeably gaming.
Early leaked benchmarks, extensively reported on by tech outlets like PC Gamer and HotHardware, demonstrate a noticeable dip in gaming performance when VBS is active. Tests conducted using popular titles such as Shadow of the Tomb Raider, Far Cry New Dawn, and Horizon Zero Dawn show frame rate reductions ranging from a minor few percent to a significant 25% in some cases, depending on the specific hardware configuration and game. Systems with lower-end processors and less RAM seem to experience a more pronounced impact.
Microsoft acknowledges the potential performance implications of VBS. Public documentation highlights that, in certain scenarios, users might observe performance differences. The company positions VBS as a crucial security enhancement, particularly in the face of escalating cyber threats, and maintains that the security benefits outweigh the potential performance cost for most users.
The key dilemma for many users, especially gamers, will be deciding whether to disable VBS to reclaim that lost performance. Disabling VBS is possible through the Windows Features control panel (by unticking “Virtual Machine Platform” and “Windows Hypervisor Platform” ) or via registry edits. However, doing so weakens the system’s defenses against advanced malware, negating the primary advantage of this built-in security feature. It effectively returns the system to a Windows 10 level of vulnerability from certain attack vectors.
It’s essential to remember that these performance concerns are based on leaked builds and early testing. Microsoft could implement further optimizations before the final Windows 11 release. Also, the impact of VBS differs considerably based on hardware. Systems with powerful, multi-core CPUs and ample RAM are less likely to suffer substantial performance degradation.
The situation presents a complex trade-off for users. On one hand, VBS delivers a substantial security improvement, guarding against an increasingly sophisticated threat. On the other, the potential performance cost, specifically for gamers and users running resource-heavy applications, is real. The ultimate decision of whether to enable or disable VBS will rest with individual users, weighing their security needs against their performance requirements. Users with older or less powerful hardware face a more difficult decision, as the performance hit will be more noticeable. Clear guidance and perhaps a user-friendly toggle to choose performance or security modes within Windows 11 would significantly help users navigate this trade-off.
For the moment, the leaked information serves as a crucial preview of a potentially significant characteristic of Windows 11. Users planning to upgrade should be aware of VBS and its possible ramifications, allowing them to make informed decisions about their system configuration post-installation.
