不久微软也公布了相关内容 ，其中关于默认值的部分值得关注:Recommended Defaults for Enabling/Disabling Virtualization Extensions. The default setting of this switch requires some thought. Consider the costs of disabling Intel Virtualization Technology/AMD Virtualization through a system firmware setting: If these facilities are disabled by default in system firmware， users would have to explicitly enable that support on each platform instance for legitimate uses， which would represent a significant challenge for enterprises that have thousands of machines and plan on using the hardware extensions. The cost of enabling virtualization hardware support through a manual system firmware setting would result in an increase in deployment time and cost. This cost can be mitigated through the use of various in-band and out-of-band mechanisms for remote management. Given the current usage model for the virtualization extensions， we believe that the following default settings are the right ones for system firmware: For systems that are destined for a server role ， enable the virtualization extensions. The threat of running malicious code as an administrator on servers is reduced through Windows Server policies and organizational best practices. For systems that are destined for a client role， disable the virtualization extensions. For systems that might be deployed in either a server or client role ， it would be prudent to disable the extensions by default. As always， the exception to any guideline is when a customer specifically indicates to a manufacturer that they do not want to follow that guideline.
