Windows 10: W11 device security memory integrity

Seems like a W11 recent update has led to issues with device security memory integrity. Both of my Lenovo computers won't allow memory integrity to be turned on because of the driver tib.sys, associated with Acronis True Image. In addition, one of the computers has an additional issue with PxHIpa64.sys from Sonic Solutions. Anybody know how to resolve this issue? No issue with my W10 computer.

:)

 

Cannot Turn On Core Isolation Memory Integrity in Settings

From Tutorial -> Turn On or Off Core Isolation Memory Integrity in Windows 10 Windows 10 Tutorials

Not able to perform steps in Option 1
Under "Windows Defender Security Center", "Device Security" is not an option.
Winver reports Version 1709 (OS build 16299 402)
The processor is Intel I3
Virtualization is enabled in system BIOS.


Please advise.

 

Memory Integrity?

Hi.

Seems that some of these security features are more for Windows Defender and Virtualization.

I think that this sums it all up pretty well -

https://support.microsoft.com/en-us/...#hardwarescore

I'm just going with the defaults for now.
Memory Integrity is in the OFF state.

I'm not using Windows Defender on this system yet I am virtualizing Linux MInt 19.3 under VMware.

For me this means -

"Your device meets the requirements for enhanced hardware security."

You might also wish to read this -

What Are “Core Isolation” and “Memory Integrity” in Windows 10?

Let's bring in @Kari who is the resident virtualization expert for his opinions.

*Think

 

Windows 10 - Memory Integrity - Incompatible Drivers

Hi Kurnn,

I haven't tried deleting the files as of yet because I need my laptop for work, and I don't want to risk causing any stability issues in the meantime.

It's all a bit puzzling because my memory integrity setting was enabled before I intentionally disabled it for 64-bit virtualisation.

I'm also sure the drivers listed above were present whilst Memory Integrity was enabled before. I suspect there will be no conflict when I get the setting re-enabled. Could there be a solution which involves temporarily disabling the drivers so my system doesn't detect them whilst I re-enable memory integrity?

Autoruns lists each driver with a checkbox alongside, but disabling them had no effect, and my system still detects the conflicting drivers.

I appreciate the suggestion, but could there be another way, before I resort to deleting system files?

Thanks!