Windows 10 Windows Security - setting Memory Integrity to OFF

[Sepiax]

Hi,

I need to set the Memory Integrity feature (under Windows Security - Device Security - Core isolation) to OFF.
I set the switch to OFF, Windows asks for restart, but after the restart the switch turns out to be ON again, so the feature cannot be disabled.
Anyone can help?

Thanks.

Alessandro

 

[Neemobeer]

Depending on which version of Windows 10 you're on it may still be a bug. You'll need to disable it in the registry and reboot.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity\Enabled

 

[Sepiax]

I had already set the mentioned Registry Value to 0: unfortunately it was not working

 

[Neemobeer]

Are there GPOs in place? or is Credential guard enabled with UEFI lock?

 

[Sepiax]

Credential Guard has been disabled. All comes from a VMware error: "VMware Player and Device/Credential Guard are not compatible. VMware Player can be run after disabling Device/Credential Guard." The problem is that I did disabled Credential Guard but, despite this, VMware Workstation was still not working. I have also read that Memory Integrity can in some cases cause problems to VMs, so I tried to turn it OFF but I was not able to do it: every time I restart the machine I find it ON again.

 

[Neemobeer]

You may need to disable hyperv launch type if it's enabled.

bcdedit /set hypervisorlaunchtype off