Microsoft to Turn On Memory Integrity by Default on Windows PCs Starting October 2026

Microsoft has announced that, beginning in October 2026, eligible Windows devices will receive quality‑update patches that automatically enable Memory Integrity, a core component of its kernel‑level protection suite. The move is aimed at tightening defenses against attacks that target the operating system’s most privileged code.

Memory Integrity, also known as Hypervisor‑Protected Code Integrity (HVCI), leverages a lightweight hypervisor to enforce that only signed, trusted kernel‑mode drivers and system files can execute. By isolating the kernel from potentially malicious code, the feature blocks a class of exploits that attempt to inject or replace low‑level components, a technique frequently used by ransomware and advanced persistent threats.

The decision follows a series of high‑profile incidents in which attackers bypassed traditional anti‑malware tools by exploiting vulnerabilities in kernel drivers. While Windows already offers Memory Integrity as an optional setting, adoption has been uneven, partly because of concerns over compatibility with older hardware and drivers. Microsoft’s default‑on approach reflects a broader industry trend of moving security controls from optional to mandatory as the threat landscape evolves.

Rollout will be handled through the standard Windows Update mechanism. Devices that meet the necessary hardware requirements—such as support for virtualization extensions—and have compatible drivers will have the feature turned on automatically. Users will retain the ability to disable Memory Integrity through the Windows Security app, but the default configuration will be active unless manually changed.

Microsoft acknowledges that the change could surface driver compatibility issues on legacy systems. To mitigate disruptions, the company is working with hardware manufacturers and driver developers to update signatures and provide guidance on remediation. Users are encouraged to keep their systems up to date and to review the Compatibility Center for any known conflicts before the October activation window.

Enabling Memory Integrity by default is part of Microsoft’s longer‑term security roadmap, which also includes Secure Boot, virtualization‑based security, and continuous monitoring of kernel integrity. Analysts predict that the initiative may set a new baseline for operating‑system security, prompting other platform vendors to adopt similar default protections in the coming years.