How to Enable Core Isolation Memory Integrity in Windows 11

How to enable or disable Core Isolation Memory Integrity

Memory integrity stops harmful software from taking over your PC by blocking untrusted system drivers. You turn it on or off in Windows Security, under Device security, on the Core isolation details page. If an incompatible driver blocks the switch, Windows lists the problem driver so you can update or remove it and try again.

A change to this setting takes effect only after a restart, so save your work first. You need an administrator account to change it. If you sign in with a standard account, Windows asks for administrator credentials.

1. Type Windows Security in the search🔍 box on your taskbar🖥️ and select it from the results. The Windows Security window opens.

   

2. Click Device security in the Windows Security window. You should now see a page with security items for your hardware.
3. Click the Core isolation details link under the Core isolation heading. The Core isolation page opens. If you do not see a Core isolation section, your hardware or its virtualization settings do not support the feature. In that case, check that virtualization is turned on in your BIOS or UEFI settings.

   

4. Set the Memory integrity switch to On to enable it, or to Off to disable it. Windows may ask for administrator approval. When the change is saved, Windows asks you to restart, so restart the🔄 PC to apply it. If the switch is greyed out, an administrator or a policy on your PC may be controlling the setting. If it will not turn on, Windows shows an incompatible driver message, and the next sections cover that.

   

That’s it. After the restart, Memory integrity runs in the state you chose. To undo the change, return to the same page and flip the switch the other way.

Troubleshooting Incompatible Drivers

Windows refuses to turn on Memory integrity when an outdated driver could give malware access to system memory. The Core isolation page tells you which file causes the block. On current Windows 11 builds, the message includes a Review incompatible drivers link that lists the driver names.

Write those names down before you do anything else. You need them to find the right update on the hardware maker’s website.

1. Open Windows Security › Device security › Core isolation details, then click Review incompatible drivers. You should see a list of the drivers that block the feature. Note each name.
2. Visit your computer manufacturer’s website and look for updated drivers for your hardware. Check the chipset, graphics, audio, and network drivers first, since these are common causes.
3. Install any updated driver you find. If no update exists, uninstall the device or the software associated with that driver. You can often find the specific file path, such as 📁C:\Windows\System32\driverscopy, to identify the culprit.
4. Restart the🔄 PC, then go back to the Memory integrity switch and try turning it on again.

That’s it. If the switch now stays on, the blocking driver is no longer a problem and your PC has the protection. If another driver appears in the list, repeat the steps for that one.

If you turn the setting off to keep an old device working, remember that your PC is less protected. Turn it back on once a compatible driver is available.

Comparison of Windows Security Features

Summary

Core Isolation Memory Integrity is a security feature that uses virtualization to protect the core of your system from harmful software. It runs driver code checks in an isolated area, so malware that gets past other defenses cannot readily change how the system behaves.

Heads-up: Microsoft has announced a memory integrity protection expansion, but it is not in Windows yet. According to Microsoft’s “Windows news you can use: August 2026” post, it is expected in October 2026. Microsoft says it will extend memory integrity protection across eligible devices, giving stronger kernel-level protection by default with little or no extra configuration. The steps in this guide stay the same for now, and checking the switch as shown above is still the way to confirm your current setting.

Why is Memory Integrity greyed out?