Microsoft is set to enhance the security landscape for Windows PCs by automatically enabling its Memory Integrity feature on a wider array of eligible devices starting in October 2026. This initiative, announced in a blog post on September 1, aims to bolster kernel-level protection against potential threats targeting the Windows kernel, ensuring that more devices benefit from this advanced security measure by default. Notably, PCs that currently have Memory Integrity disabled will maintain their existing settings.
Strengthening Security with Quality Updates
As part of the upcoming quality updates, Windows will also activate Virtualization-based Security (VBS) where necessary. This isolated environment serves as the foundation for Memory Integrity, enhancing the overall security framework of the operating system. Prior to implementing these changes, Windows will conduct an automatic assessment of each device, utilizing what Microsoft refers to as readiness signals. These signals evaluate hardware capabilities, compatibility, and performance to determine eligibility for the updates.
The rollout will apply to Windows 11 installations that meet Microsoft’s hardware specifications, including Secured-core PCs. Current requirements stipulate the use of an 8th Generation or newer Intel processor for Windows 11 22H2, an AMD Zen 2 or newer processor, a minimum of 8GB of RAM on x64 systems, an SSD with at least 64GB of storage, compatible drivers, and enabled hardware virtualization. It is important to note that this automatic activation policy pertains to clean installations rather than upgrades of existing devices.
Memory Integrity, also known as Hypervisor-Protected Code Integrity (HVCI), has been a part of the Windows ecosystem since the Windows 10 era, initially introduced as a component of Microsoft’s Device Guard security technology. This feature leverages VBS and the Windows hypervisor to relocate kernel-mode code-integrity checks into an isolated environment, thereby preventing the execution of malicious or untrusted code and drivers within the Windows kernel. While Windows 10 generally offered this protection as an optional feature, Windows 11 has made it a more integral aspect of security for compatible new installations.
However, the introduction of this feature is not without its challenges, particularly for the gaming community. Many gamers have opted to disable Memory Integrity due to its potential impact on gaming performance. Microsoft acknowledged in 2022 that both Memory Integrity and the Virtual Machine Platform could hinder gaming experiences on certain Windows 11 configurations. Consequently, the company advised gamers who prioritize performance to consider temporarily disabling these protections during gameplay, while also cautioning that such actions may compromise security. This guidance has persisted in Microsoft’s recommendations for optimizing gaming performance.
