Windows 10 Windows Security - setting Memory Integrity to OFF

Sepiax · Apr 15, 2020

Hi,

I need to set the Memory Integrity feature (under Windows Security - Device Security - Core isolation) to OFF.
I set the switch to OFF, Windows asks for restart, but after the restart the switch turns out to be ON again, so the feature cannot be disabled.
Anyone can help?

Thanks.

Alessandro

Neemobeer · Apr 15, 2020

You may need to disable hyperv launch type if it's enabled.

bcdedit /set hypervisorlaunchtype off

Neemobeer · Apr 15, 2020

Depending on which version of Windows 10 you're on it may still be a bug. You'll need to disable it in the registry and reboot.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity\Enabled

Sepiax · Apr 15, 2020

I had already set the mentioned Registry Value to 0: unfortunately it was not working

Neemobeer · Apr 15, 2020

Are there GPOs in place? or is Credential guard enabled with UEFI lock?

Sepiax · Apr 15, 2020

Credential Guard has been disabled. All comes from a VMware error: "VMware Player and Device/Credential Guard are not compatible. VMware Player can be run after disabling Device/Credential Guard." The problem is that I did disabled Credential Guard but, despite this, VMware Workstation was still not working. I have also read that Memory Integrity can in some cases cause problems to VMs, so I tried to turn it OFF but I was not able to do it: every time I restart the machine I find it ON again.

Neemobeer · Apr 15, 2020

You may need to disable hyperv launch type if it's enabled.

bcdedit /set hypervisorlaunchtype off

Windows 10 Windows Security - setting Memory Integrity to OFF

Sepiax

New Member

Neemobeer

Neemobeer

Cloud Security Engineer

Sepiax

New Member

Neemobeer

Cloud Security Engineer

Sepiax

New Member

Neemobeer

Cloud Security Engineer

Similar threads