Figure 5.25 Console access and PowerShell Direct blocked for shielded VM
The process to create an encryption-supported VM instead of shielded is exactly the
same, except -Shielded is set to $false instead of $true in the Set-VMSecurityPolicy.
The VM still uses a key protector, and the process is identical. Microsoft has some
great additional resources that I recommend:
http://download.microsoft.com/download/1/B/C/ 1BCB8707-8D67-44BB-9317-
DBA3F2D3A07F/Windows_Server_Shielded_Virtual_Machines_infographic.pdf
https://gallery.technet.microsoft.com/Shielded-VMs-and-Guarded-b05d8078
https://gallery.technet.microsoft.com/Shielded-VMs-and-Guarded-70c5b471