I turned off Memory Integrity on Windows 11, and you might want to do the same

Microsoft is expanding kernel-level protection, but you can still disable it if you encounter compatibility or performance problems.

Memory Integrity disabled
Memory Integrity disabled / Image: Mauro Huculak
  • Microsoft is enabling Memory Integrity automatically on more eligible Windows 11 computers through Windows Update.
  • Memory Integrity uses virtualization-based security to protect critical operating system components against malicious code and compromised drivers.
  • Windows 11 respects previously disabled user settings and administrator policies during the automatic rollout.
  • You can disable Memory Integrity through Windows Security, although doing so reduces protection against certain kernel-level attacks.

Microsoft is enabling Memory Integrity automatically on more eligible Windows 11 computers through Windows Update. The change adds another layer of protection against malicious drivers and attacks targeting the Windows kernel, but users can still control this security feature.

If you don’t want to use it, you can turn it off through the Windows Security app. Microsoft also says the automatic rollout will respect existing user settings, meaning the system won’t automatically enable the feature if you previously disabled it.

In this guide, I’ll outline how to disable Memory Integrity, why Microsoft is enabling it, and what to consider before changing the setting.

Disable Memory Integrity on Windows 11

To turn off Memory Integrity on Windows 11, follow these steps:

  1. Open Start on Windows 11.

  2. Search for Windows Security and click the top result.

  3. Click the Device security page.

  4. Click on “Core isolation details.”

    Core isolation details

  5. Turn off the “Memory integrity” toggle.

    Windows 11 disable Memory integrity

  6. Restart your computer if prompted.

After completing the steps, Windows 11 will stop using Memory Integrity protection. You can return to the same settings page and turn the feature back on whenever you want.

Get the Pureinfotech newsletter

Expert Windows guides, practical tips, and the latest updates that make your PC easier to use, delivered to your inbox

If your organization manages your computer, an administrator policy may control this setting and prevent you from changing it.

What is Memory Integrity, and why is Microsoft enabling it?

Memory Integrity, also known as Hypervisor-Protected Code Integrity (HVCI), is a Windows security feature that protects critical parts of the operating system against malicious code and compromised drivers.

The feature uses Virtualization-Based Security (VBS) to create an isolated environment where Windows performs important code integrity checks. This makes it harder for malware to tamper with security checks or execute malicious code with kernel-level privileges.

Microsoft is expanding automatic enablement because many existing setups don’t have this protection enabled. Previously, the feature was generally enabled by default on supported new devices and certain clean installations, leaving many upgraded computers without it.

Starting with the November 2026 Security Update, Windows 11 can enable Memory Integrity automatically on more eligible computers.

Before enabling the protection, the operating system checks hardware capabilities, driver compatibility, and performance considerations. Some computers may also have Virtualization-Based Security enabled automatically because Memory Integrity depends on it.

The rollout is gradual, so not every eligible computer will receive the change immediately.

Will Windows 11 respect your existing Memory Integrity settings?

Yes. Microsoft says Windows 11 will respect existing user and administrator configurations.

If you previously turned off Memory Integrity, the automatic rollout won’t turn it back on. The same applies to administrator-managed policies, which take precedence over automatic enablement.

This means the company isn’t simply overriding a user’s previous decision to disable the protection. The automatic enablement primarily targets eligible computers where Memory Integrity hasn’t already been explicitly disabled.

If Windows enables the feature automatically on your computer, you can still turn it off using the instructions above.

Should you turn off Memory Integrity?

I recommend leaving Memory Integrity enabled for most users because it adds protection against attacks targeting the Windows kernel. However, disabling it might make sense in some situations.

Some older drivers and apps may not work correctly with Memory Integrity enabled. Windows 11 might prevent an incompatible driver from loading, which could affect a hardware device or application. Microsoft recommends updating the driver before disabling the protection.

Memory Integrity can also introduce performance overhead because it relies on virtualization. The impact depends on your hardware and workload. Microsoft previously acknowledged that some gaming configurations could experience performance problems with the feature enabled.

If you’re experiencing compatibility problems or noticeable performance issues, you can temporarily disable Memory Integrity to test whether it makes a difference.

Personally, I recommend keeping the protection enabled unless you encounter a specific compatibility or performance problem. However, users should also have control over security features that can affect hardware compatibility and system performance. Windows Security provides that control without requiring Registry changes or additional utilities.

Are you keeping Memory Integrity enabled on Windows 11, or would you rather control this security setting yourself? Let me know in the comments.

Thank you for your feedback!
About the author

Mauro Huculak is a Windows How-To Expert and founder of Pureinfotech in 2010. With over 23 years as a technology writer and IT Specialist, Mauro specializes in Windows, software, and cross-platform systems such as Linux, Android, and macOS.

Certifications: Microsoft Certified Solutions Associate (MCSA), Cisco Certified Network Professional (CCNP), VMware Certified Professional (VCP), and CompTIA A+ and Network+.

Mauro is a recognized Microsoft MVP and has also been a long-time contributor to Windows Central.

You can follow him on YouTube, Threads, BlueSky, X (Twitter), LinkedIn and About.me. Email him at [email protected].

Comments

Join In