Windows 11 Core isolation is a section of Windows Security that contains the Memory integrity feature (also known as HVCI): a protection mechanism that verifies kernel code in an isolated environment. Starting in October 2026, Microsoft began enabling it automatically on more compatible PCs through regular Windows updates. Below is what this means, who it affects, how to check the feature’s status, and how to disable it if it causes problems.
What Windows 11 Core Isolation and Memory Integrity Are
Memory integrity is a Windows feature that uses virtualization (VBS) and the system hypervisor to run kernel code integrity checks in an isolated environment. Put simply, it helps prevent malicious or untrusted code, including drivers, from running at the deepest level of Windows.
In Windows Security, it is located in the “Core isolation” section. It is also called Hypervisor-protected Code Integrity — HVCI.
What Exactly Microsoft Announced
According to Microsoft, starting in October 2026, regular Windows quality updates will begin enabling memory integrity on a larger number of eligible devices. If virtualization-based security (VBS) is not enabled, updates will also turn it on where required. Before doing so, Windows checks each device to determine whether the hardware supports it, whether drivers and applications are compatible, and whether performance would be affected.
The feature is already enabled by default on clean Windows 11 installations that meet the requirements and on Secured-core PCs. However, on devices upgraded from older versions, the existing default policy was not applied — and these are the devices the new rollout will primarily cover.
Important: PCs where memory integrity has already been disabled manually will not be automatically changed by this rollout.
Which PCs Need Memory Integrity
Materials describing the change list the following PC requirements:
- Intel 8th-generation processor or newer (for Windows 11 22H2), or AMD Zen 2 or newer;
- at least 8 GB of RAM on x64 systems;
- SSD with at least 64 GB;
- compatible drivers;
- hardware virtualization enabled (Intel VT-x / AMD-V in BIOS/UEFI).
If your computer does not meet the requirements or Windows detects driver problems, the feature will not be enabled automatically.
How to Check Windows 11 Core Isolation and Memory Integrity
The announcement sources do not provide step-by-step instructions, so below are the standard Windows methods. Check them on your own build.
Method 1. Through the interface
- Open “Settings” → “Privacy & security” → “Windows Security”.
- Select “Device security”.
- In the “Core isolation” section, click “Core isolation details”.
- Check the “Memory integrity” switch: “On” or “Off”.
Method 2. PowerShell (run as administrator)
Get-CimInstance -ClassName Win32_DeviceGuard -Namespace root\Microsoft\Windows\DeviceGuard | Select-Object SecurityServicesConfigured, SecurityServicesRunning, VirtualizationBasedSecurityStatusHow to read the result: if SecurityServicesRunning contains the value 2, Memory integrity (HVCI) is running. VirtualizationBasedSecurityStatus = 2 means VBS is active.
Method 3. System Information Press Win+R, enter msinfo32, and at the bottom of the main page find the lines “Virtualization-based security” and “Virtualization-based security services running”.
What to Do About Incompatible Drivers
If the feature will not turn on, the most common reason is an incompatible driver. In the “Core isolation details” window, Windows usually displays a list of drivers blocking activation. Update them to the latest versions from the device manufacturer. Microsoft has also documented issues ranging from failures in certain applications to incompatibility with some anti-cheat systems in games. If a driver is old and no update is available, it generally needs to be removed or replaced rather than forcing the system to work with it.
Does Windows 11 Core Isolation Affect Games
Yes, it can, but not always. Back in 2022, Microsoft acknowledged that Memory integrity could reduce gaming performance on some configurations and advised users who prioritize performance to temporarily disable it while gaming, while warning that doing so reduces security.
The impact depends on the hardware: newer processors with hardware acceleration for isolation handle it better, while older ones that rely more on software emulation may lose more performance. The announcement sources do not provide specific numbers, so do not trust “universal” FPS tables — test it on your own PC.
How to Disable Windows 11 Core Isolation (and Whether You Should)
If enabling it causes problems with a specific game, application or driver, Windows 11 Core isolation can be disabled. A separate case is AMD overclocking: according to user reports, Ryzen Master may refuse to work while virtualization-based security (VBS) is enabled. Before disabling the protection, consider whether you really need that program.
Through the interface: “Windows Security” → “Device security” → “Core isolation details” → “Memory integrity” switch → “Off” → restart.
Through the registry (run as administrator, with a backup):
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrityThe Enabled (DWORD) value: 1 — enabled, 0 — disabled. A restart is required after changing it. On corporate PCs, the setting may be managed by policy, in which case you should change it through those policies.
Verification after the change: repeat the PowerShell command from Method 2 — the value 2 in SecurityServicesRunning should disappear.
Should you disable it? Generally, no: this is one of the important kernel protection layers. Disable it only for a specific reason (for example, anti-cheat incompatibility or a significant FPS loss), and consider whether updating drivers could solve the issue instead. If you disable it temporarily for gaming, remember to turn it back on.
In Brief: The Key Points
- Starting in October 2026, Windows 11 updates enable Memory integrity on more eligible PCs
- The feature is already enabled on clean installations that meet the requirements and on Secured-core PCs
- If you disabled it manually, it will not be turned back on automatically
- Windows 11 Core isolation = a section of Windows Security; Memory integrity (HVCI) is its key feature
- Requirements: Intel 8th gen+ or AMD Zen 2+, 8 GB RAM, SSD of at least 64 GB, compatible drivers, virtualization
- Check it through “Windows Security” → “Device security” → “Core isolation” or PowerShell (
SecurityServicesRunning= 2) - The gaming performance impact depends on the PC; the sources provide no exact figures
FAQ
What is Windows 11 Core isolation? It is a kernel protection feature (HVCI) that verifies code in a virtualization-based isolated environment and prevents malicious or untrusted drivers from running.
Is Memory integrity enabled automatically? Starting in October 2026, Microsoft is enabling it through quality updates on a larger number of eligible PCs. On clean installations that meet the requirements, it is already enabled.
Will it be enabled if I turned it off manually? No. According to Microsoft, devices where the feature was manually disabled will not be automatically changed by the rollout.
Does Memory integrity reduce FPS in games? It can on some configurations, especially on older processors. The sources provide no exact figures, so test it on your own PC.
How do I disable Memory integrity? In “Windows Security” → “Device security” → “Core isolation details”, switch “Memory integrity” to “Off” and restart the PC. But this reduces security, so do it only when necessary.
