How To Enable Or Disable Memory Integrity Core Isolation In Windows 11

What is Core Isolation and Memory Integrity?

Core isolation and memory integrity are built-in Windows security features that create a safe, isolated area of memory to protect your computer from malicious software. Core isolation uses your hardware to keep normal system processes separate, while memory integrity specifically stops bad actors from attacking low-level driver software on your system.

Memory Integrity is a security setting inside Core Isolation on Windows 11. Memory Integrity protects driver software, which consists of small programs that help Windows talk to your computer hardware like graphics cards and printers. If a bad actor tries to put harmful code into a driver, Memory Integrity blocks that harmful code right away. This protection stops malicious code from taking over your computer system.

How to Check If Memory Integrity Is Enabled

You can check if memory integrity is enabled on your Windows 11 computer by opening the Windows Security app and looking at your device security settings. Go to the start menu ⊞, open the security app, click on device security, and open the core isolation details to see the current status of the toggle switch.

• Click the Start button on your taskbar and type Windows Security.
• Click the Windows Security app from the search results.
• Click on Device security on the left-hand menu.
• Under the Core isolation section, click the Core isolation details link.
• Look at the toggle switch next to Memory integrity to see if it is turned On or Off.

How to Enable Memory Integrity in 🪟 Windows 11

You can enable memory integrity in Windows 11 by opening the Windows Security app, going to device security, opening the core isolation details, and switching the memory integrity toggle to the on position. This turns on extra protection to stop malicious software from getting into your computer system drivers.

• Open the Windows Security app from your Start menu search.
• Select Device security from the side menu.
• Click on Core isolation details.
• Click the toggle switch under Memory integrity to move it to the On position.
• If a User Account Control prompt appears asking for permission to make changes, click Yes. (Note: This step requires administrator privileges).
• Restart your computer when Windows prompts you to finish turning on the feature.

How to Disable Memory Integrity in 🪟 Windows 11

You can disable memory integrity in Windows 11 by opening the Windows Security app, clicking device security, opening the core isolation details, and turning off the memory integrity toggle switch. People usually turn this setting off when an older game, app, or piece of hardware will not run properly while it is active.

• Open the Windows Security app by searching for it in your Start menu.
• Click on Device security on the left side of the window.
• Click on the Core isolation details link.
• Click the toggle switch under Memory integrity to move it to the Off position.
• If a User Account Control prompt appears asking for permission, click Yes. (Note: This step requires administrator privileges).
• Restart your computer to apply the changes.

How to Fix Common Problems When Memory Integrity Won't Turn On

You can fix common problems when memory integrity will not turn on by checking your system for incompatible drivers that block the security setting. Windows Security usually shows a review incompatible drivers link when this happens, letting you see the exact files you need to update or remove from your computer.

When incompatible software blocks Memory Integrity from turning on in Windows 11, Windows Security provides a helpful link called Review incompatible drivers. Clicking the Review incompatible drivers link shows you a list of specific software files that block Memory Integrity from turning on. To fix the issue, you need to remove the incompatible files or update the software.

• Open the Windows Security app and go to Device security, then Core isolation details.
• Click on Review incompatible drivers to see the list of problematic software.
• Note the names of the drivers or companies listed. Common culprits include older security tools like Trusteer Rapport, older printer software, or niche gaming accessories.
• Open your Windows settings, go to Installed apps, find the software associated with those drivers, and uninstall it completely.
• If you cannot find the app in your settings, you may need to delete the specific driver file manually from your system folders.
• Restart your computer and try turning Memory Integrity back on using the steps in the previous section.

Alternative Ways to Manage Memory Integrity (Group Policy and Registry)

You can manage memory integrity using alternative methods like local group policies or manual registry adjustments if the main security menu is locked or unavailable. These advanced methods let system administrators and home users control the security feature directly through system files and policy settings.

If you need to make these changes using the Windows Registry Editor directly, you can navigate to the correct location to control virtualization-based security settings. Alternatively, you can use the Group Policy Editor on professional versions of Windows 11 to enforce this setting.

To use the local Group Policy Editor:

• Press the Windows Key + R on your keyboard to open the Run dialog box.
• Type gpedit.msc and press Enter. (Note: This step requires administrator privileges and is only available on Windows Pro or Enterprise editions).
• In the window that opens, use the left folder tree to go to Computer Configuration, then Administrative Templates, then System, and finally Device Guard.
• Double-click on the setting named Turn On Virtualization Based Security.
• Select Enabled, and then make sure the options below it are configured to turn on Secure Boot and Direct Memory Access Protection, along with virtualization-based protection of code integrity.
• Click Apply and then OK, and restart your computer.

Advanced Troubleshooting: What to Do When Files Are Left Behind

To fix this stubborn issue, you need to find the exact file name shown in the security warning and delete it from your system storage manually. You will typically find these stubborn driver files located in the system folders where Windows stores hardware instructions. Deleting these leftover files allows Windows Security to finally turn on Memory Integrity without any more error messages.

Summary

Memory integrity is an important Windows 11 security feature that keeps your computer safe by protecting low-level system drivers from malicious attacks. You can easily check, turn on, or turn off this setting using the Windows Security app, and fix most trouble by removing incompatible drivers.