sodcalculator

10 Tech How-To

Fix Memory Integrity Off in Windows: Full Guide

Guide 10-36823 · Updated · Step by step

If you see “Memory integrity is off” in Windows Security, it means Core Isolation’s virtualization-based security is disabled, leaving your system more exposed to certain malware attacks. You can turn it back on in Windows Security under Device Security, but the setting may be blocked by incompatible drivers, BIOS settings, or other software. This guide explains what memory integrity does, why it turns off, and how to fix it safely.

What Is Memory Integrity and Why Does It Matter?

Memory integrity is a Windows 10 and Windows 11 security feature that runs inside a virtualized environment called Hyper-V. It prevents malicious code from injecting into high-integrity system processes by checking the integrity of drivers and other kernel-level code before they run. When it is on, the operating system creates a hardware-isolated area of memory, so even if an attacker finds a vulnerability, they cannot easily tamper with critical system files.

The feature is part of Core Isolation, which uses the CPU’s virtualization extensions (Intel VT-x or AMD-V) to create a security boundary. Microsoft enables it by default on most new Windows 11 installations, but many users see it turned off after a Windows update, a driver installation, or a BIOS change. Turning it off reduces protection against exploits that target kernel memory, so it is generally recommended to keep it on if your hardware supports it.

Why Memory Integrity Turns Off

Several common reasons cause the setting to switch off:

  • Incompatible drivers: An outdated or poorly written driver may not be compatible with memory integrity. Windows will automatically disable the feature to avoid system crashes.
  • BIOS virtualization disabled: If virtualization (VT-x/AMD-V) is turned off in the BIOS, memory integrity cannot run, and the toggle becomes grayed out.
  • Third-party security software: Some antivirus or anti-cheat programs interfere with the virtualization-based security, forcing the feature off.
  • Windows update issues: A failed update or a pending reboot can temporarily disable the feature.
  • Manual user choice: You or another user may have turned it off to improve gaming performance or to run an older driver.

If the toggle is grayed out, it is almost always because virtualization is disabled in the BIOS or because a required Windows feature (like Hyper-V) is not enabled.

How to Check If Memory Integrity Is Off

Open Windows Security by clicking the shield icon in the system tray or searching for “Windows Security” in the Start menu. Then go to Device security > Core isolation details. Under “Memory integrity,” you will see either “On” or “Off.” If it is off, you will also see a warning message that your device may be vulnerable.

You can also check via PowerShell. Right-click the Start button and select “Terminal (Admin)” or “Windows PowerShell (Admin)”, then run:

Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" -Name "Enabled"

If the value is 0, memory integrity is off. If it is 1, it is on. This registry check is useful if the Windows Security app is not showing the setting correctly.

How to Turn Memory Integrity Back On

Follow these steps in order. If one step does not work, move to the next.

  1. Enable virtualization in BIOS: Restart your PC, press the key shown on the screen (usually F2, F10, Del, or Esc) to enter BIOS/UEFI. Look for a setting called “Intel Virtualization Technology,” “AMD SVM Mode,” or “Virtualization Extensions.” Enable it, save, and exit. Boot back into Windows.
  2. Turn on the feature in Windows Security: Open Windows Security > Device security > Core isolation details. Toggle “Memory integrity” to On. You will be prompted to restart your PC.
  3. Update incompatible drivers: If the toggle turns off again after restart, open Device Manager (right-click Start > Device Manager). Look for any device with a yellow warning icon. Right-click and select “Update driver,” then “Search automatically.” Also check Windows Update for optional driver updates.
  4. Remove conflicting software: Temporarily uninstall any third-party antivirus or anti-cheat software (like some game launchers). Restart, enable memory integrity, and see if it stays on. If it does, reinstall the software one by one to find the culprit.
  5. Run the Windows Memory Integrity Troubleshooter: In Windows Security, go to Settings > Update & Security > Troubleshoot > Additional troubleshooters, and run “Windows Memory Integrity.” This can automatically find and fix driver conflicts.
  6. Check for Windows updates: Install all pending updates, including optional driver updates, then try again.

What to Do If the Toggle Is Grayed Out

A grayed-out toggle means the feature cannot be enabled due to a system-level restriction. The most common cause is virtualization being disabled in the BIOS. Re-enable it as described above. If virtualization is already enabled, check if Hyper-V is disabled. In Windows Features (search “Turn Windows features on or off”), ensure “Virtual Machine Platform” and “Windows Hypervisor Platform” are checked. Note that enabling these features may affect performance in some games that use their own hypervisor.

Another possibility is that your CPU does not support virtualization or SLAT (Second Level Address Translation). Most CPUs from the last decade support it, but older budget processors might not. You can check by running the command systeminfo in Command Prompt and looking for “Virtualization Enabled In Firmware.” If it says “No,” you must enable it in BIOS.

Should You Leave It Off?

For most users, leaving memory integrity off is not recommended because it weakens a core security boundary. However, there are legitimate reasons to keep it off:

  • Performance impact: Memory integrity can cause a small performance hit (1-5% in some games and applications) because it adds a layer of checking.
  • Driver compatibility: Some older but essential drivers (e.g., for printers, audio interfaces, or specialized hardware) may not work with memory integrity enabled.
  • Gaming anti-cheat conflicts: Some anti-cheat systems, like certain versions of Easy Anti-Cheat or BattlEye, may flag the virtualization environment as a threat.

If you decide to keep it off, ensure you have other protections: keep Windows updated, use a reputable antivirus, and avoid downloading untrusted software. If you turn it off for gaming, turn it back on when you are not playing that particular game.

Common Problems and Misconceptions

“Turning it on will break my PC.” It can cause a blue screen if an incompatible driver is loaded. That is why Windows disables it automatically. If you force it on and get a BSOD, boot into Safe Mode and uninstall the problematic driver.

“Memory integrity is the same as Secure Boot.” They are different. Secure Boot ensures only trusted bootloaders run; memory integrity protects kernel memory at runtime. Both are good to have on.

“I need to disable it for better FPS.” The performance impact is usually minor, and you should only disable it if you actually see a meaningful difference in your specific games.

“It’s off because my PC is old.” Age alone does not matter; what matters is CPU virtualization support. Check your CPU model online to confirm.

Frequently Asked Questions

Will turning on memory integrity slow down my PC?

It can cause a small performance drop, typically under 5% in CPU-heavy tasks. Most users will not notice it. If you do, you can turn it off, but understand the security trade-off.

Why does memory integrity keep turning off after I enable it?

This usually means an incompatible driver is present. Windows disables the feature to prevent a crash. Check Device Manager for yellow warning icons and update those drivers. Also check Windows Update for optional driver updates.

Can I enable memory integrity with Virtualization-Based Security (VBS) off?

No. Memory integrity is a component of VBS. If VBS is disabled, memory integrity cannot run. You can enable VBS by turning on “Core Isolation” and “Memory Integrity” in Windows Security; the system will enable the necessary virtualization features automatically.

Does memory integrity affect gaming performance?

Some games, especially those with aggressive anti-cheat, may see a small FPS drop or even fail to launch. If that happens, you can temporarily disable memory integrity while playing, then re-enable it afterward. For most games, the impact is negligible.

Is it safe to disable memory integrity permanently?

It is not ideal, but it is safe if you understand the risk. You lose an extra layer of defense against kernel-level attacks. Make sure you have a good antivirus and keep your system updated to compensate.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →