Windows 10: Windows 11 Will Auto-Enable Memory Integrity Starting in October, With Possible Gaming...

Microsoft will start automatically turning on Memory Integrity for eligible Windows 11 devices via regular quality updates beginning in October 2026.

The feature is already enabled by default on fresh installations of Windows 11 and on Secured-core PCs, and the October update will bring it to systems that have been upgraded from previous versions of Windows or that originally had the feature turned off.

Memory Integrity includes a security measure that checks kernel-mode code, although it could lead to a decrease in gaming performance on older processors. For devices on which the feature had been disabled manually, that setting will be retained.

Microsoft makes the change via the usual monthly quality-update channel rather than through a feature update.

Windows 11 Memory Integrity and Possible Gaming Performance Impact


Memory Integrity, also referred to as Hypervisor-protected Code Integrity (HVCI), compares kernel-mode code and drivers against a list of trusted software before they are executed, the verification process being kept separate from the rest of Windows by the hypervisor. Malicious code cannot be loaded directly into the kernel unless it passes this check.

Microsoft already makes use of a Windows Defender Application Control policy in order to block vulnerable drivers, the policy preventing legitimately signed drivers that have known flaws from being loaded into the kernel, and Memory Integrity provides an additional level of screening at that same point of entry.

HVCI makes use of Virtualization-based Security (VBS), a feature that employs the computer's virtualization hardware to create an environment which the rest of Windows cannot access directly. If VBS is not already enabled, the October updates will enable it.

Peter Waxman of the Microsoft group program management team stated that "memory integrity protection will start to be enabled by Windows quality updates on qualifying devices, and if it has not already been enabled, the updates will also turn on Virtualization-based Security (VBS), thereby making further security features available and demonstrating our commitment to making Windows secure by design and secure by default."

The extent of the effect on performance varies according to the processor; those current-generation CPUs which have hardware support for virtualization features are able to carry out the additional verification step with only a small impact on frame rates, while older CPUs, which depend on software emulation to carry out the same checks, may experience lower and more erratic frame rates in some games.

Driver compatibility has usually been the main obstacle to turning on Memory Integrity. In the past, users have encountered a "driver can't load on this device" error when they turned the feature on, and incompatible drivers are still the primary reason why it is not active on all eligible PCs at present.

How to Check Memory Integrity Settings and What Changes in October


Microsoft has stated that the current settings will stay as they are when the rollout gets under way. For devices on which Memory Integrity has already been switched off manually via the registry, Group Policy, or Intune, the existing setting will be retained.

As Microsoft said, "Existing administrator and user decisions and policies remain in effect." However, devices that have never had the feature altered will have it turned on.

The update is sent via the usual monthly quality-update channel and does not involve a new version of the operating system. If IT administrators are in charge of enterprise fleets, the update will be installed automatically on the devices that are managed unless current policies counter this action.

Checking and adjusting Memory Integrity takes a few seconds:

1. To open the appropriate page in the Windows Security app, type 'Core Isolation' into the Windows search bar.
2. Find the Memory Integrity toggle in Device security.
3. You can turn it on or off without needing to use any command-line tools or modify the registry.

Microsoft advises gamers who wish to prioritize frame rates to switch off Memory Integrity at the start of a session and then reenable it afterward.

The automatic rollout will start in October 2026 via the usual monthly quality updates. Memory Integrity is based on the hardware requirements that Microsoft established when Windows 11 was launched, namely the need for TPM 2.0 and Secure Boot support.

People using current hardware should not notice any difference, as the extra verification effort will remain within the normal range of frame-rate variation on modern processors.

Those using older CPUs can look at the Core Isolation setting before the update comes out and choose whether to keep Memory Integrity on or turn it off in advance.

Thank you for being a Ghacks reader. The post Windows 11 Will Auto-Enable Memory Integrity Starting in October, With Possible Gaming Impact on Older CPUs appeared first on gHacks.

read more...

 

Unable to enable memory integrity

I understand that you're having trouble enabling Memory Integrity on your system. Memory Integrity is a security feature in Windows that helps protect your computer from malware and other threats by ensuring the integrity of your system's memory.

If you've tried deleting the drivers identified in the scan and still can't enable Memory Integrity, here are some additional steps you can try:

1. Check System Requirements: Ensure that your computer meets the system requirements for Memory Integrity. Your system should support Virtualization-Based Security (VBS) and have a compatible CPU.
   
2. Update Your Drivers: Make sure that all your device drivers, including graphics drivers, are up to date. Outdated drivers can sometimes cause conflicts with Memory Integrity. You can usually update drivers through the device manager or by visiting the manufacturer's website.
   
3. BIOS/UEFI Settings: Check your computer's BIOS/UEFI settings to ensure that Virtualization Technology (VT-x) is enabled. Different manufacturers may have different names for this feature, so consult your motherboard or computer manual for the exact setting.
   
4. Hyper-V or Virtualization Software: If you have any other virtualization software installed, such as VMware or VirtualBox, they can interfere with Memory Integrity. Try disabling or uninstalling them temporarily and then attempt to enable Memory Integrity again.
   
5. Security Software: Certain third-party security software, such as antivirus or firewall programs, can conflict with Memory Integrity. Temporarily disable or uninstall these security applications and check if Memory Integrity can be enabled.
   
6. Windows Updates: Make sure your Windows operating system is fully updated. Sometimes, Microsoft releases updates or fixes that can resolve compatibility issues.
   
7. Reset Your Windows Security Policies: If nothing else works, you can try resetting your Windows security policies. To do this, open an elevated Command Prompt (right-click on Command Prompt and select "Run as administrator") and then run the following command:
   
   
   This command will reset your security policies, which might help in enabling Memory Integrity.
   

After trying these steps, restart your computer and attempt to enable Memory Integrity again. If you're still facing issues, it's possible that there could be some underlying system or hardware problems, and you may need to consult with Microsoft support or your computer manufacturer for further assistance.

 

Enabling Memory Integrity feature?

There should be no difference between Home and Pro for this. Here is Memory Integrity turned on in Windows 11 Home.

As I understand it, it should be on by default in W11. If it is not, then that is usually due to incompatible drivers. To find out, see my post #24 here: Microsoft's reasoning on CPU compatibility. | Page 2 | Windows 11 Forum As far as I know, the only difference in Core Isolation between Windows 10 and Windows 11 is that memory integrity off by default in 10 and on by default in 11.

https://support.microsoft.com/en-us/...9-87521df09b78

 

Enabling memory integrity windows 11 does not work

Hello Dr0wnedZephyr,



Welcome to Microsoft Community.



Let me first explain to you what memory integrity protection is and how it works.

Memory Integrity helps prevent attackers from injecting their own malicious code and helps ensure that all drivers loaded onto the OS are signed and trustworthy.

This is a feature that provides greater protection for Windows systems in general, when memory integrity protection is enabled, the system scans all drivers and applications in the device to ensure that they have the correct signatures and certificates.

Core isolation

Enable virtualization-based protection of code integrity

Options to Optimize Gaming Performance in Windows 11

However, considering that individual users may inevitably use some applications or drivers that do not contain signatures or expired certificates in daily use, if this function is enabled, the use of some users will be affected, light can not open some applications, prompting incompatible drivers, heavy can not compete for just started into the system.

Therefore, usually in the face of individual users, Our recommendation is not to rush to enable memory integrity protection, as this may affect your usage.

However, if you still want to try to turn on memory integrity, refer to the first link to try to identify which drivers or applications are incompatible, and try to uninstall them, remove them, or reinstall them to fix the problem.



Mitchell - | Microsoft community support expert from MSFT