Memory Integrity is a Windows security feature that protects the kernel by enforcing that only trusted kernel-mode code and drivers execute, leveraging hardware virtualization to isolate and validate kernel code. Microsoft will automatically enable this feature on more Windows devices starting October 2026, following readiness assessments for hardware support, driver compatibility, and performance. This expansion is intended to reduce kernel-level exploitation by preventing untrusted or vulnerable drivers from loading. Users can also enable Memory Integrity manually via Windows settings or management tools. The update will also enable Virtualization-Based Security (VBS) on some devices. This proactive protection approach aims to harden Windows against attacks that exploit kernel vulnerabilities.

By expanding Memory Integrity, Microsoft aims to reduce the risk of kernel-level exploits that can disable security controls or load malicious drivers. This will improve overall system security by blocking untrusted kernel-mode code, which is a common attack vector. However, some older or incompatible drivers may be blocked, potentially causing compatibility issues on affected devices. The automatic enablement after readiness checks seeks to minimize disruption while enhancing protection.

Microsoft will automatically enable Memory Integrity on supported Windows devices via quality updates starting October 2026 after performing compatibility and performance readiness checks. Users and administrators should review current Memory Integrity and VBS configurations, identify devices with driver compatibility issues, and ensure hardware and drivers meet Microsoft’s requirements for this protection. Manual enabling is also possible through Windows Security settings or management tools like Intune and Group Policy. No additional urgent action is required beyond preparing for this change and validating device readiness.