1. One or more computer-readable media having computer-readable instructions therein that, when executed by a computing device, cause the computing device to perform acts comprising: providing at least a first partition and a second partition by a virtual machine monitor; receiving, at memory that is inaccessible by an entity operating within an operating-system privilege mode, an enforcement policy that identifies a set of one or more resources of an operating system operating in the first partition provided by the virtual machine monitor; identifying, with use of the enforcement policy and from the memory inaccessible by an entity operating within the operating-system privilege mode, the set of one or more resources of the operating system operating in a first partition provided by the virtual machine monitor; determining, from the memory, whether one or more of the set of one or more resources have been altered; and in response to determining that one or more of the set of one or more resources have been altered (i) terminating the operating system or (ii) notifying the operating system upon reboot of an illegal operation; wherein the receiving of the enforcement policy, the identifying of the set of one or more resources and the determining of whether one or more of the set of one or more resources have been altered occur within (i) the virtual machine monitor or (ii) the second partition provided by the virtual machine monitor.