@@ -217,7 +217,7 @@ func verifyPlatformContainerSettings(daemon *Daemon, hostConfig *containertypes.

 	warnings := []string{}

 	hyperv := daemon.runAsHyperVContainer(hostConfig)

-	if !hyperv && system.IsWindowsClient() {

+	if !hyperv && system.IsWindowsClient() && !system.IsIoTCore() {

 		// @engine maintainers. This block should not be removed. It partially enforces licensing

 		// restrictions on Windows. Ping @jhowardmsft if there are concerns or PRs to change this.

 		return warnings, fmt.Errorf("Windows client operating systems only support Hyper-V containers")

@@ -566,8 +566,9 @@ func (daemon *Daemon) stats(c *container.Container) (*types.StatsJSON, error) {

 // daemon to run in. This is only applicable on Windows

 func (daemon *Daemon) setDefaultIsolation() error {

 	daemon.defaultIsolation = containertypes.Isolation("process")

-	// On client SKUs, default to Hyper-V

-	if system.IsWindowsClient() {

+	// On client SKUs, default to Hyper-V. Note that IoT reports as a client SKU

+	// but it should not be treated as such.

+	if system.IsWindowsClient() && !system.IsIoTCore() {

 		daemon.defaultIsolation = containertypes.Isolation("hyperv")

 	}

 	for _, option := range daemon.configStore.ExecOptions {

@@ -586,7 +587,7 @@ func (daemon *Daemon) setDefaultIsolation() error {

 				daemon.defaultIsolation = containertypes.Isolation("hyperv")

 			}

 			if containertypes.Isolation(val).IsProcess() {

-				if system.IsWindowsClient() {

+				if system.IsWindowsClient() && !system.IsIoTCore() {

 					// @engine maintainers. This block should not be removed. It partially enforces licensing

 					// restrictions on Windows. Ping @jhowardmsft if there are concerns or PRs to change this.

 					return fmt.Errorf("Windows client operating systems only support Hyper-V containers")

@@ -8,8 +8,9 @@ import (

 )

 var (

-	ntuserApiset      = syscall.NewLazyDLL("ext-ms-win-ntuser-window-l1-1-0")

-	procGetVersionExW = modkernel32.NewProc("GetVersionExW")

+	ntuserApiset       = syscall.NewLazyDLL("ext-ms-win-ntuser-window-l1-1-0")

+	procGetVersionExW  = modkernel32.NewProc("GetVersionExW")

+	procGetProductInfo = modkernel32.NewProc("GetProductInfo")

 )

 // OSVersion is a wrapper for Windows version information

@@ -66,6 +67,22 @@ func IsWindowsClient() bool {

 	return osviex.ProductType == verNTWorkstation

 }

+// IsIoTCore returns true if the currently running image is based off of

+// Windows 10 IoT Core.

+// @engine maintainers - this function should not be removed or modified as it

+// is used to enforce licensing restrictions on Windows.

+func IsIoTCore() bool {

+	var returnedProductType uint32

+	r1, _, err := procGetProductInfo.Call(6, 1, 0, 0, uintptr(unsafe.Pointer(&returnedProductType)))

+	if r1 == 0 {

+		logrus.Warnf("GetProductInfo failed - assuming this is not IoT: %v", err)

+		return false

+	}

+	const productIoTUAP = 0x0000007B

+	const productIoTUAPCommercial = 0x00000083

+	return returnedProductType == productIoTUAP || returnedProductType == productIoTUAPCommercial

+}

+

 // Unmount is a platform-specific helper function to call

 // the unmount syscall. Not supported on Windows

 func Unmount(dest string) error {