Memory Integrity (part of Windows 11’s Core Isolation) helps protect your PC from malicious code that tries to exploit low-level drivers. When it’s off, you may see a warning in Windows Security. This guide walks you through the steps to turn it back on, including what to do if the toggle won’t stay on or if you encounter a blue screen.
What You’ll Need
- Administrator access to your Windows 11 PC
- At least a few minutes of time (the process may require a restart)
- Optional: a list of any third-party drivers you’ve installed recently (to help identify conflicts)
Step-by-Step
- Open Windows Security. Click the Start button, type “Windows Security,” and press Enter. Alternatively, go to Settings > Privacy & Security > Windows Security.
- Go to Device Security. In the Windows Security window, click “Device security” in the left sidebar (or on the main page).
- Open Core Isolation details. Under “Core isolation,” click “Core isolation details.” (If you don’t see this, your PC may not support Memory Integrity, or it may be managed by your organization.)
- Turn on Memory Integrity. Toggle the switch under “Memory integrity” to the On position. If the toggle is grayed out, you’ll need to fix the underlying issue first (see Troubleshooting).
- Restart your PC. After turning it on, you’ll be prompted to restart. Save your work and click “Restart now.” Your PC will reboot with Memory Integrity enabled.
- Verify it’s on. After restarting, go back to the Core Isolation details page. The toggle should be On, and the warning in Windows Security should disappear.
Common Mistakes
- Not restarting after enabling. The setting only takes effect after a reboot. If you don’t restart, it may appear off.
- Ignoring incompatible drivers. If a driver is not compatible, Windows will automatically turn Memory Integrity off after a restart. You must remove or update that driver first.
- Confusing Memory Integrity with other Windows Security features. Memory Integrity is specifically under Core Isolation. Don’t toggle other settings like “Kernel-mode Hardware-enforced Stack Protection” unless you know what they do.
- Assuming the toggle is the only fix. If the toggle won’t stay on, simply toggling it repeatedly won’t help. You need to address the root cause (usually a driver).
- Forgetting to check for Windows updates. Sometimes a pending update contains a driver fix. Always run Windows Update before troubleshooting.
Tips
- Update your drivers first. Go to Settings > Windows Update > Advanced options > Optional updates, and install any driver updates listed there. Also check your PC manufacturer’s support site for the latest drivers.
- Use the “Compatibility” view. In the Core Isolation details page, you may see a list of “Incompatible drivers.” If so, note the names and search for updates.
- Run the Hardware and Devices troubleshooter. Open Settings > System > Troubleshoot > Other troubleshooters, and run “Hardware and Devices.” This can sometimes detect driver issues.
- Keep your system clean. Uninstall any old or unused third-party antivirus software—these often use drivers that conflict with Memory Integrity.
- Consider a clean boot. If you can’t identify the culprit, perform a clean boot (disable all non-Microsoft startup items) to see if the issue persists. This can help isolate the problematic driver.
Troubleshooting
Toggle is grayed out or won’t turn on. This usually means a driver is incompatible. Go to Windows Security > Device security > Core isolation details. If you see a list of “Incompatible drivers,” note them. Search for updated drivers on the manufacturer’s website or via Windows Update. If no update exists, you may need to uninstall the device that uses that driver (e.g., an older sound card or network adapter).
PC restarts but Memory Integrity is off again. This is a classic sign of an incompatible driver that causes a blue screen. Windows automatically disables Memory Integrity to prevent the crash. Check the Reliability Monitor (type “reliability” in Start) for error reports. Look for “Kernel-Power” or “BugCheck” events and note the driver mentioned. Update or remove that driver.
Blue screen after enabling. If you see a blue screen with an error like “MEMORY_INTEGRITY_VIOLATION,” your PC will likely boot back to Windows after a couple of attempts. If it doesn’t, boot into Safe Mode (hold Shift while clicking Restart, then choose Troubleshoot > Advanced options > Startup Settings > Restart, then press 4). In Safe Mode, open Device Manager and disable or uninstall the problematic device. Then restart normally and try again.
“Memory integrity cannot be enabled” error. This can happen if your PC’s firmware (BIOS/UEFI) is outdated. Check your manufacturer’s website for a BIOS update. Also, ensure that virtualization is enabled in your BIOS—look for “Intel VT-x” or “AMD-V” and turn it on. After updating BIOS, retry.
Still stuck? Use the System Information tool (type “msinfo32” in Start) and look under “System Summary” for “Virtualization-based Security.” If it says “Not enabled,” your hardware may not support it, or it’s disabled in BIOS. If your CPU is relatively recent (Intel 8th gen or later, AMD Ryzen 2000 or later), it should support it—check BIOS settings.
Frequently Asked Questions
What does Memory Integrity do?
It runs kernel-mode processes in a hardware-isolated environment, preventing malicious code from gaining elevated access through vulnerable drivers.
Will enabling Memory Integrity slow down my PC?
There may be a slight performance impact, especially on older CPUs, but on modern hardware it’s usually negligible. Most users won’t notice a difference.
Why is Memory Integrity off by default on some PCs?
Microsoft disables it if it detects incompatible drivers or if the hardware doesn’t support virtualization-based security. It’s also off if you upgraded from Windows 10 and the system detected potential issues.
Can I enable Memory Integrity if I have an older CPU?
You need a CPU that supports virtualization (Intel VT-x or AMD-V) and has SLAT (Second Level Address Translation). Most CPUs from the last decade support this. Check your BIOS to ensure virtualization is enabled.
Do I need to reinstall Windows to fix this?
No. In most cases, updating or removing a conflicting driver is enough. Reinstalling Windows is a last resort and rarely necessary.
Is Memory Integrity the same as Secure Boot?
No. Secure Boot ensures only trusted software loads at startup. Memory Integrity protects the kernel from injection attacks. They work together but are separate features.
Related
General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.
More in this bed
- Gmail Gemini Privacy: Data Access & Limit Settings
- Fix Outlook Inbox Corruption with DISM in Windows
- How to Set Up Apple Pay on iPhone
- How to Choose a Refurbished iPhone With Years of Support
- Voice Dictation in Google Docs: How to Use It
- Turn Off Message Notifications on Mac