Microsoft to Enable Memory Integrity Protection by Default on Windows 11 from October 2026

Microsoft announced that from October 2026, eligible Windows 11 devices will have memory integrity protection enabled by default. The feature builds on virtualization-based security (VBS), using hardware virtualization to create an isolated environment that prevents malicious programs from hijacking a computer through low-level drivers. It is also known as hypervisor-protected code integrity (HVCI). Starting in October 2026, Microsoft will gradually roll out the security enhancement to eligible devices, enforcing stricter kernel-level protection by default.

IT administrators will retain granular control. Windows will offer new security baselines, but existing policies and security configurations will still be respected. If a device was previously configured to disable memory integrity protection, Windows Update will not forcibly re-enable it. For organizations still evaluating whether to enable the feature, Microsoft provides guidance to help administrators understand memory integrity protection and complete its activation. The feature allows only trusted kernel-mode code and drivers to run, protecting the device from one of the lowest levels of system interfaces.