Windows Security / Memory Integrity
flo88 Posted messages 28485 Registration date Status Contributor Last intervention -
Hello,
I have Windows 10 Home and in Windows Security I am unable to enable Memory Integrity and it says there are incompatible items preventing me from doing so.....
See screenshot
https://up.security-x.fr/file.php?h=Rdca51129a933f7a5473e3b43b8689364
Could someone give me a hand? Thanks
11 answers
-
RE_
You can indeed disable it as Brucine mentioned.
On my PC, it's disabled and I've never had any issues.
-
Hello,
You need to update all the drivers one by one, through the control panel then Device Manager, and from the beginning to the end of the row, update them.
-
Hello,
Indeed, a number of third-party device drivers are not "signed" for memory integrity; this issue arose not long ago with a poorly recognized Bluetooth device, in which case Windows installs an unsigned generic driver on the fly, making it impossible to update or remove it if the device is within range but not at home, and therefore cannot be done without.
This situation can also occur with specific software/hardware for which the drivers are not designed for this purpose.In the case of Bluetooth, there is no proper solution; in other cases, one can always opt to give up the hardware or software in question.
One can also choose to either ignore the message in question, disable the memory integrity setting in Windows Security, or disable Windows Security altogether and use third-party software; the memory integrity item, isolated from other protection measures, remains quite theoretical; it is the role of protection software to intercept calls to memory in the same way as those made to executables.
-
-
Hello Didi64_549, I am still a beginner, could you give me a bit more detail on how to update the drivers? Which drivers are you talking about exactly? Thank you.
-
You don't go through all the drivers as suggested; you don't get out of it.
You just go to Device Manager (if you don't know how, type "Device Manager" in the search box); in the case of a generic driver (like the Bluetooth one I mentioned), there will be a device that is not neatly categorized like the others, but in an "other" category.
While you're there, check that there's no unrecognized driver (there will be a yellow "danger" triangle in front of it) and that's all for Device Manager.
To identify the culprits, right-click on the Windows Security Center icon in the taskbar (shield) and select "Display Dashboard," go to the left to "Device Security" and look for incompatible drivers on the right in "Core Isolation" as illustrated (report the name and the publisher):
https://www.malekal.com/impossible-activer-integrite-memoire-isolation-du-noyau-windows-10-11/ -
Hello Brucine, here are the drivers that seem to be missing but everything is already up to date
https://up.security-x.fr/file.php?h=Rdca51129a933f7a5473e3b43b8689364
-
-
Hi,
See here for compatibility (and Brucine, stop disparaging those who know how to help if you don't have a solution to give, thank you).
https://support.microsoft.com/en-us/windows/make-older-programs-or-apps-compatible-with-windows-10-783d6dd7-b439-bdb0-0490-54eea0f45938
Or also, you can right-click on each driver one by one and update them.
Hello,
At least, I'm reading:
here are the drivers that seem to be missing but everything is already up to dateIn general, these are not drivers that would have been installed by software that was not designed for Windows 10, which is once again confirmed in the case we are concerned with, involving a Western Digital driver and 2 Intel drivers which are hardware drivers.
I don't see how I've disparaged anyone: in the scenario of memory integrity failure, I simply pointed out that it was enough to highlight the guilty drivers using the appropriate Windows menu, which has been done, and therefore spending time updating each driver (which moreover seems to already be done) serves no purpose other than wasting time.
The issue of software that is not compatible with Windows 10 is completely off-topic: one would have to start by assuming they install a driver for physical or virtual hardware, which is not the most common, and even then, a compatibility mode would not secure these drivers.
So the question is not about attacking a person; it is about trying to find solutions on a forum: for the reasons I mentioned in <6>, it is not certain that there are any (for example, there cannot be a software update for memory integrity for older Intel/AMD processors that do not manage it).But it is certainly not about repeating in <7> what was said in <1> and which is not relevant (it is enough to try updating the guilty drivers as illustrated in the link in <4>), and even less to show such arrogance at the same time while writing nonsense regarding compatibility mode: in this scheme, you did not show yourself to be more informed, quite the opposite, that you were one of the "people who know how to help," and even if that were the case, you do not hold the monopoly on it.
-
-
Okay everyone, thanks for the information, I have no intention of starting a debate. If I summarize, since everything is up to date, I understand that my PC is too old to be compatible with the drivers, is that right? So the feature cannot be activated and that's not such a big deal?
Thank you
-
flo88 Posted messages 28485 Registration date Status Contributor Last intervention Ambassadeur 5 168
Hello
I don't really see the connection between the Windows security section/memory integrity and drivers... it's a security setting to prevent malicious programs from accessing high-security processes, in plain terms, to avoid bypassing Windows UAC.
This setting is only accessible if you use Windows Defender (a third-party security suite disables it) and if secure boot is enabled (TPM 2.0)
Signature
Euskadi Ta Askatasuna -
-
"Device security" is not defender.
Read carefully what I've written, let's simplify, if the processor does not handle W11, thus the TPM 2.0, end of story.
Hello,
You are confused.
The security center consists of a large number of items, the presentation of which may differ depending on the version of Windows, some of which relate to antivirus and firewall; if we use protection software other than Windows Defender (which is my case), all items in the security center continue to function including kernel isolation and security processor (unless we have deliberately disabled the service), with the difference that those concerning antivirus and firewall can no longer be configured.
Some of these elements depend on hardware capabilities and those of the BIOS (TPM, Hyper-V); TPM is mandatory in Windows 11 but may exist in Windows 10 on a sufficiently recent machine (TPM 2.0 dates from 2016), virtualization is automatic in Windows 11, and can be activated in Windows 10 if it is also enabled in the BIOS.
All of this is not related to UAC but constitutes additional protections.
TPM is independent of drivers in that it directly encrypts exchanges between the operating system and the firmware.
Memory integrity, through the kernel isolation item, uses virtualization to create a sort of "sandbox" which indeed has the role of preventing the execution of malicious code by intercepting drivers that could transmit it, it operates under the all-or-nothing rule: it is completely disabled as soon as an incompatible driver is detected, it is indeed active in Windows 10 if the processor and BIOS allow it, independently of TPM.
https://support.microsoft.com/fr-fr/windows/isolation-de-base-e30ed737-17d8-42f3-a2a9-87521df09b78
-
-
Hello,
Read carefully what I wrote, we're going to simplify it; if the processor doesn’t support W11, i.e., TPM 2.0, that’s the end of the story.
Except here, we are on Windows 10 Home.
"Device security" is not Defender.
Yes, it is!! It’s part of the security center.
-
Do you understand why Mr. MysteryBean I turned to you in the first place..... Can you confirm if it’s not a big deal if this function is not enabled because despite several attempts it seems that I can’t do anything about these incompatibilities..... thank you :)
-
Thank you Brucine for the clarifications, but I admit that I am totally lost right now.... As I said, I am far from being an expert. I tried to solve the problem but I wasn't able to.
Thank you anyway for your time and support.
-
I wanted to explain so that everyone understands, but we don't have to understand the why and how; if these drivers can't be updated for the reasons I indicated, we don't need to complicate things, we do as MisteryBean and I said: we disable memory integrity.
It is also that way for me, I believe, with a machine that is not a powerhouse, that the fewer non-essential services there are, the better it performs.
The reason for these protections is mainly ransomware; you must have heard about it on TV, those things that encrypt all your files and hold them for ransom.
But it overlooks the fact that the best protection is between the keyboard and the ears: there is little chance of being affected by avoiding clicking on suspicious links, opening unfamiliar attachments, or downloading dubious software.
-
