Windows 11 Memory Integrity Is Turning On for More PCs: What to Check First

Windows 11 Memory Integrity is about to switch on for a lot more PCs. Microsoft says quality updates will start enabling it on eligible devices from October 2026, and Windows Latest ties the first wave to the October 13 Patch Tuesday update. If you’ve turned it off yourself, Windows should leave your choice alone.

Here are the facts you can check in about ten seconds.

• Rollout starts in October 2026 through regular Windows quality updates.
• It targets eligible PCs that don’t have the feature on yet, mostly older machines.
• Windows checks readiness first, including driver compatibility.
• If you disabled it manually or by policy, it shouldn’t be turned back on.
• Check it in Windows Security > Device security > Core isolation.

Those five points cover most readers. The rest of this post explains what the setting does and what to do if something breaks.

What Windows 11 Memory Integrity actually does

Memory Integrity is a kernel-level protection, also called HVCI. It uses virtualization to run code-integrity checks in an isolated space, so malware has a much harder time slipping bad code into the core of Windows.

Microsoft describes it as protection against “sophisticated attacks with little or no additional configuration,” according to Windows Central. It also underpins hotpatch updates, which let some PCs install fixes without a reboot.

If Virtualization-based Security isn’t already on, the same updates will enable that too. Most modern PCs already run it this way, so you may see no change at all.

Which PCs get it, and which are left alone

Microsoft hasn’t published a full hardware list in the coverage we found. Windows Latest reports the requirements below, so treat them as reported rather than official.

The driver check matters most. A PC with an old, incompatible driver should simply not get the feature, instead of failing to boot.

Will it slow down your games?

Possibly, on older hardware. PCWorld says Memory Integrity could cost games up to 15 percent, but it notes that figure comes from an older Tom’s Hardware test that combined HVCI with VBS.

Newer chips handle this far better, so many gamers won’t notice anything. Microsoft’s own past advice was to disable it temporarily if it hurts gaming performance, while accepting weaker security.

My advice: benchmark one game you play often before and after the update. If the drop is small, leave it on.

How to check Memory Integrity in Windows Security

You don’t need to wait for the update to see where you stand. Follow these steps.

1. Open Windows Security and go to Device security.
2. Click Core isolation details.
3. Look at the Memory integrity toggle. It reads On or Off.
4. If a driver is blocking it, Windows lists the incompatible driver below the toggle.

If a driver is flagged, look for an updated version from the maker. For deeper digging, Windows Latest says conflicts are logged in Event Viewer under Applications and Services Logs > Microsoft > Windows > CodeIntegrity > Operational, Event ID 3087.

This isn’t the only security change Microsoft is making to Windows 11 right now. Our post on Windows 11 execution containers for AI agents covers another one, and it’s worth checking whether you should install KB5124010 if you’re also weighing recent updates.

What can go wrong, and what IT admins should know

The main risk is an old driver. Windows Latest notes that a conflicting driver gets blocked from loading, and that on older hardware this has caused boot problems in the past. The readiness check is supposed to prevent that, but no check is perfect.

Before the update lands, update your chipset, graphics, and storage drivers from the maker’s site. Old utility software, such as hardware monitors and overclocking tools, is a common source of trouble because it ships its own low-level drivers.

If you manage several PCs, you don’t have to accept the default. Windows Latest says admins can pre-set the option through Group Policy, Intune, or the registry key under HKLM\System\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity. Test one machine from each hardware group first, then roll out to the rest.

Frequently Asked Questions

Is Memory Integrity the same as Core isolation?

Memory Integrity is one feature inside the Core isolation page of Windows Security. Core isolation is the group of virtualization-based protections, and Memory Integrity is the main toggle.

Can I turn Memory Integrity off after the update?

Yes. Microsoft says you can still switch it on or off, and a manual opt-out shouldn’t be reversed automatically. Turning it off lowers your protection, so only do it if a driver or app forces you to.

Does Memory Integrity affect Windows 10?

The rollout described by Microsoft and the reports above is for Windows 11 only. Windows 10 PCs aren’t part of this change.

Why did Microsoft choose to turn it on automatically?

Microsoft wants more PCs to be secure by default without users hunting through settings. It also supports hotpatching, which reduces reboots for updates.

The verdict

Leave it on. For most people, a kernel-level shield that costs little on modern hardware is a good trade. Only gamers on older PCs have a real reason to test and maybe opt out, and even then, measure first instead of guessing.