How to Enable Core Isolation Memory Integrity in Windows 11
Core Isolation Memory Integrity in Windows 11 blocks malicious low-level attacks by creating a secure, isolated space in your computer’s memory. This built-in security tool relies on Virtualization-based Security (VBS) and Hypervisor-protected Code Integrity (HVCI) to stop unapproved software and bad drivers from running on your system.
Windows 11 checks every driver before it loads to make sure only trusted code runs on your PC. You need a processor with hardware virtualization turned on in your BIOS or UEFI settings to use this feature. On Intel machines this is usually called Intel Virtualization Technology (VT-x). On AMD machines it is usually called SVM Mode. The exact name varies by manufacturer.
The feature is available in both Windows 11 Home and Pro. On many new PCs, and on clean installs of recent Windows 11 versions, it is already on. Check the switch first before you change anything.
Open Windows Security, click Device security, then click Core isolation details. Set the Memory integrity switch to On and restart your PC. If the switch is greyed out or blocked, update incompatible drivers listed on that screen first.
How to enable or disable Core Isolation Memory Integrity
Core Isolation Memory Integrity stops harmful software from taking over your PC by blocking untrusted system drivers. You can turn it on or off by opening Windows Security, going to Device security, and choosing Core isolation details. If an incompatible driver blocks the switch, Windows will list the problematic file so you can remove or update it before trying again.
Save your work first. You need an administrator account to change it.
- Type Windows Security in the search box on your taskbar and select it from the list. The Windows Security window opens.
open windows security app - Click Device security in the Windows Security window. You should see a page with security items for your hardware.
- Click the link labeled Core isolation details under the Core isolation heading. If you do not see a Core isolation section, your hardware or its virtualization settings do not support it. Check that virtualization is turned on in your BIOS or UEFI settings.
windows 11 core isolation memory integrity - Set the Memory integrity switch to On to enable it, or to Off to disable it. Windows may ask for administrator approval. When it finishes, it asks you to restart. Restart the PC to apply the change. If the switch is greyed out, an administrator or a policy on your PC may be controlling the setting. If it will not turn on, Windows shows an incompatible driver message, and the next sections cover that.
windows 11 turn on memory integrity core isolation
Troubleshooting Incompatible Drivers
Troubleshooting incompatible drivers is necessary when Core Isolation Memory Integrity refuses to turn on because of outdated hardware software. Windows prevents the security feature from starting if an old driver could allow malware access to your system memory. Check the Core isolation screen to see which file is causing the block. On current Windows 11 builds, the message includes a Review incompatible drivers link that lists the driver names. Write these down, then visit the hardware manufacturer's website to download an updated version.
To fix this, visit your computer manufacturer's website and look for updated drivers for your hardware. Check the chipset, graphics, audio, and network drivers first, since these are common causes. If you cannot find an update, you may need to uninstall the device or the software associated with that driver. You can often find the specific file path, such as C:\Windows\System32\drivers, to identify the culprit.
If you turn the setting off to keep an old device working, remember that your PC is less protected. Turn it back on once a compatible driver is available.
Comparison of Windows Security Features
| Feature | Purpose |
|---|---|
| Core Isolation | Uses virtualization to isolate core processes. |
| Secure Boot | Ensures only trusted firmware boots the PC. |
| Kernel-mode Hardware-enforced Stack Protection | Protects against memory-based attacks. |
Summary
Core Isolation Memory Integrity is a security feature that uses virtualization to protect your computer's core system from harmful software. It runs driver code checks in an isolated area, so malware that gets past other defenses cannot easily change how the system behaves.
Why is Memory Integrity greyed out?
Memory Integrity might be greyed out if your computer's hardware doesn't support virtualization, or if this setting is turned off in your computer's BIOS.
Have a question about this guide?
Answered by AI from this guide. Good questions may be added to this page — please don't include personal details.
Did this guide fix your problem?
About the Author
Richard
Tech Writer, IT Professional
Richard is a writer at Geek Rewind who turns complex IT tasks into clear, step-by-step guides. He draws on years of hands-on experience in system administration and enterprise IT operations, focusing on Windows, Linux and WordPress: the problems people actually run into, and the fixes that work. His server and WordPress guides come from systems he runs himself. Richard builds and maintains the platform behind Geek Rewind, from its Ubuntu servers and Nginx configuration to its custom WordPress plugins. Many new tutorials start with readers' questions, and he's always glad to answer them in the comments.
No comments yet — be the first to share your thoughts!