Microsoft will begin automatically enabling memory integrity protection on more Windows 11 computers starting in October, a security feature that can reduce performance in video games.
The feature has been available in Microsoft's operating system for several years, but many compatible systems currently have it turned off. Under the new rollout, monthly Windows quality updates will turn on the defense by default on machines that meet specific hardware, compatibility, and performance requirements.
Memory integrity, which is also known as Hypervisor-Enforced Code Integrity or HVCI, forms part of the broader Virtualization-Based Security (VBS) architecture in Windows 11. The mechanism uses hardware virtualization to create an isolated execution environment separate from the standard operating system. Within this isolated space, Windows checks and verifies code before allowing it to run inside the system kernel, the central core of the operating system that holds unrestricted access to critical hardware and software resources. By blocking unverified drivers or malicious code from executing at the kernel level, the operating system prevents attackers from taking administrative control of the computer.
Impact on video game performance
Writing in a publication on the Microsoft Tech Community platform, Microsoft program manager Peter Waxman said that Windows quality updates would begin activating memory integrity protection on compatible devices. Waxman explained that if the protection was not currently enabled, the updates would also turn on Virtualization-Based Security. He added that enabling the feature provides access to additional security tools and reflects the company's broader commitment to building products that are secure by design and secure by default.
The automated security update presents a trade-off for users who primarily use their personal computers for gaming, as running hardware virtualization defenses carries a measurable processing cost. Microsoft has previously acknowledged that both VBS and memory integrity can diminish gaming performance. The severity of the frame rate impact varies according to the specific hardware configuration and the individual title being played. Modern central processing units generally experience a minimal performance penalty, but systems equipped with older processors can suffer a more noticeable drop in frame rates during gameplay.
Microsoft stated that it will respect choices previously made by system administrators and individual users. Anyone who has manually disabled memory integrity in their settings should not find the feature automatically re-enabled after installing future Windows updates. The upcoming policy change will focus on compatible computers where memory integrity was never turned on by default, assuming Microsoft determines the hardware meets all performance and system stability thresholds.
How to check and disable memory integrity
Users can check whether the security feature is active on their machine by opening the Start menu, searching for Core isolation, and selecting the corresponding menu under Device Security. The section contains a toggle switch labeled Memory integrity that allows users to turn the protection on or off. Microsoft recommends that players who disable memory integrity to boost game performance turn the setting back on once they finish playing to maintain system protection.
On some computers, the Memory integrity switch may not appear even when the Core isolation page is visible in Windows Security. To diagnose the issue, users can press the Windows key + R to open the Run window, type msinfo32, and verify whether Virtualization enabled in firmware is listed as Yes. If the system reports No, the user must restart the computer, enter the BIOS or UEFI firmware setup screen, and turn on processor virtualization. The setting is typically listed as SVM Mode on systems running AMD processors and as Intel Virtualization Technology on platforms using Intel hardware. Microsoft confirmed that hardware-level virtualization must be enabled in firmware for memory integrity to function.
In other cases, Windows 11 may display the memory integrity toggle but prevent users from turning it on due to an incompatible device driver. Microsoft recommends searching for an updated version of the affected driver. If no updated software is available, the company advises removing the underlying hardware device or the software application that relies on the incompatible driver before attempting to enable memory integrity again.
