diff --git a/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Disable VBS.cmd b/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Disable VBS.cmd
index 5d00649c89..ea6976fbd0 100644
--- a/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Disable VBS.cmd
+++ b/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Disable VBS.cmd
@@ -16,6 +16,12 @@ fltmc > nul 2>&1 || (
exit /b
)
+if /i not "%~1"=="/silent" (
+ echo WARNING: Disabling VBS may prevent WSL2 and Docker Desktop from starting.
+ choice /c:yn /n /m "Continue? [Y/N] "
+ if errorlevel 2 exit /b
+)
+
:: Update Registry (State and Path)
reg add "HKLM\SOFTWARE\AtlasOS\Services\%settingName%" /v state /t REG_DWORD /d %stateValue% /f > nul
reg add "HKLM\SOFTWARE\AtlasOS\Services\%settingName%" /v path /t REG_SZ /d "%scriptPath%" /f > nul
diff --git a/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Enable VBS.cmd b/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Enable VBS.cmd
index a4d5a21e9b..be8b412e03 100644
--- a/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Enable VBS.cmd
+++ b/src/playbook/Executables/AtlasDesktop/7. Security/Core Isolation (VBS)/Enable VBS.cmd
@@ -2,7 +2,7 @@
:: Change to match the setting name (e.g., Sleep, Indexing, etc.)
set "settingName=VbsState"
:: Change to 0 (Disabled) or 1 (Enabled/Minimal) etc
-set "stateValue=0"
+set "stateValue=1"
set "scriptPath=%~f0"
set "___args="%~f0" %*"
diff --git a/src/playbook/Executables/AtlasModules/Scripts/ScriptWrappers/ConfigVBS.ps1 b/src/playbook/Executables/AtlasModules/Scripts/ScriptWrappers/ConfigVBS.ps1
index 7c5916b06e..5d7b354551 100644
--- a/src/playbook/Executables/AtlasModules/Scripts/ScriptWrappers/ConfigVBS.ps1
+++ b/src/playbook/Executables/AtlasModules/Scripts/ScriptWrappers/ConfigVBS.ps1
@@ -11,7 +11,7 @@ $kernelShadowStacks = "HKLM:\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenar
$credentialGuard = "HKLM:\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\CredentialGuard"
if ($DisableAllVBS) {
- Write-Warning "Disabling VBS features..."
+ Write-Warning "Disabling VBS features. This may prevent WSL2 and Docker Desktop from starting."
# Memory Integrity
New-ItemProperty -Path $memIntegrity -Name "Enabled" -Value 0 -PropertyType DWORD -Force # Need to be forced since Windows 11 24H2
diff --git a/src/playbook/playbook.conf b/src/playbook/playbook.conf
index dce56c2269..0d25cf6e43 100644
--- a/src/playbook/playbook.conf
+++ b/src/playbook/playbook.conf
@@ -107,7 +107,7 @@ Atlas makes your computer snappier and more private with lots of usability impro
disable-power-saving
- Disable Core Isolation
+ Disable Core Isolation (may break WSL2/Docker)
disable-core-isolation