How to Fix Memory Integrity Is Off Error on Windows 11

Windows 11 includes several advanced security features designed to protect your system from malware and unauthorized access. One of these features is Memory Integrity, part of Core Isolation, which helps prevent malicious code from running in high-security areas of memory.

However, many users encounter the message: “Memory integrity is off. Your device may be vulnerable.”

Even worse, sometimes Windows won’t let you turn it back on — showing messages like:

“Can’t turn on Memory Integrity.”
“This setting is managed by your administrator.”
“A driver can’t be loaded on this device.”

If you’re facing this issue, don’t worry. This guide explains what Memory Integrity is, why it gets disabled, and how to fix it step-by-step on Windows 11.

1. What Is Memory Integrity in Windows 11?

Memory Integrity (also called Hypervisor-Protected Code Integrity, or HVCI) uses virtualization-based security (VBS) to isolate critical parts of your operating system. It ensures that only trusted drivers and programs can access protected memory regions.

When it’s off, your system may be more vulnerable to low-level attacks — but turning it back on can sometimes fail if incompatible drivers or settings block it.

2. Common Causes of “Memory Integrity Is Off”

Here’s why Windows might show the “Memory Integrity is off” message:

Outdated or incompatible drivers (especially GPU, chipset, or USB drivers).
Third-party antivirus or virtualization software interfering with Core Isolation.
Virtual Machine Platform (VMP) or Hyper-V settings disabled.
Corrupted system files preventing Core Isolation from enabling.

3. Check the Memory Integrity Status

Before fixing the issue, let’s verify whether Memory Integrity is actually off.

Press Windows + I to open Settings.
Go to Privacy & Security → Windows Security → Device Security.
Under Core isolation, click Core isolation details.
Check the toggle next to Memory integrity.

If it says Off, click the switch to try turning it On.

If it fails or shows an error about incompatible drivers, continue with the steps below.

4. Identify Incompatible Drivers

Windows blocks Memory Integrity when certain drivers are outdated or incompatible. You can check which ones are causing the issue.

On the Core Isolation details screen, look for a message that says: “Incompatible drivers detected.”
Click Review incompatible drivers.
Note the names or locations of any drivers listed (e.g., .sys files).

If drivers are listed, proceed to remove or update them in the next step.

5. Uninstall or Update Problematic Drivers

The quickest way to fix the error is to update or remove the incompatible drivers.

Option 1: Update Drivers

Press Windows + X → select Device Manager.
Expand the relevant category (e.g., Display adapters, Network adapters, USB controllers).
Right-click the driver → Update driver → Search automatically for drivers.

Option 2: Uninstall Drivers Manually

If no update is available, uninstall the driver.

Right-click the problematic driver → Uninstall device.
Restart your PC.

After rebooting, Windows will reinstall a compatible version automatically or through Windows Update.

Option 3: Delete the .SYS Driver File

If a driver still blocks Memory Integrity, remove it manually:

Open File Explorer and navigate to the driver’s file path (noted earlier).
Right-click the .sys file → select Delete.
Restart your computer.

Note: Make sure you delete only drivers you’ve identified as incompatible. Deleting critical system files can cause instability.

6. Use Windows Update to Install New Drivers

Windows Update can often automatically fetch updated driver versions that are compatible with Memory Integrity.

Press Windows + I → Windows Update.
Click Check for updates.
If available, install any optional driver updates under Advanced options → Optional updates.
Restart your PC and try enabling Memory Integrity again.

7. Enable Core Isolation and Memory Integrity via Registry

If the setting is grayed out or managed by your organization, you can force-enable Memory Integrity through the Registry.

Warning: Editing the registry incorrectly can cause system instability. Back up your registry before making changes.

Press Windows + R, type regedit, and press Enter.
Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity
Double-click Enabled on the right pane.
Set the value to:
- 1 to enable Memory Integrity
- 0 to disable it
Click OK and restart your PC.

After restarting, check the setting again under Windows Security → Core isolation details.

8. Enable Virtualization-Based Security (VBS)

Memory Integrity relies on virtualization technology. If virtualization is disabled, the feature won’t start.

Press Windows + S and search for Windows Features.
Click Turn Windows features on or off.
Make sure the following options are checked:
- Virtual Machine Platform
- Hyper-V
- Windows Hypervisor Platform
Click OK and restart your PC.

You can also verify virtualization in BIOS:

Restart your PC and enter BIOS (press F2, F10, or DEL).
Enable Intel VT-x or AMD-V under CPU Configuration.
Save and exit BIOS.

After rebooting, try enabling Memory Integrity again.

9. Repair Corrupted System Files

If Windows components related to Core Isolation are damaged, repairing system files can fix the problem.

Open Command Prompt as Administrator.
Run these commands one by one: sfc /scannow dism /online /cleanup-image /restorehealth
Wait for both commands to complete and then restart your PC.

Once restarted, try enabling Memory Integrity from Windows Security again.

10. Disable Third-Party Antivirus or Security Software

Some third-party antivirus programs and performance boosters interfere with Windows Core Isolation.

Temporarily disable your third-party antivirus.
Reboot your computer.
Go to Windows Security → Device Security → Core isolation details and enable Memory Integrity.

If the issue resolves, consider keeping Windows Defender as your main antivirus, as it’s fully compatible with Memory Integrity.

11. Perform a Clean Boot

If the issue persists, a background service or startup app may be preventing Memory Integrity from enabling.

Press Windows + R, type msconfig, and press Enter.
Go to the Services tab → check Hide all Microsoft services → click Disable all.
Open Task Manager → Startup tab → disable all startup programs.
Restart your PC.

Now try enabling Memory Integrity. If it works, re-enable services one by one to identify the cause.

12. Reset or Reinstall Windows 11 (Last Resort)

If nothing else works, your system configuration might be severely corrupted. You can reset Windows while keeping your files.

Press Windows + I → System → Recovery.
Under Reset this PC, click Reset PC.
Choose Keep my files → follow the on-screen instructions.

After reinstalling, check Core isolation again — Memory Integrity should be enabled by default.

Wrapping Up

The “Memory Integrity is Off” message in Windows 11 usually means there are incompatible drivers, virtualization issues, or corrupted system components preventing it from turning on.

To fix it:

Remove or update incompatible drivers.
Enable virtualization features in BIOS and Windows.
Repair system files using SFC and DISM.
Use the Registry Editor if the toggle is grayed out.

Once resolved, Memory Integrity will be active again, giving you enhanced protection from kernel-level attacks and ensuring your Windows 11 system runs securely.