Microsoft announces that memory integrity will be enabled by default on eligible Windows devices starting October 2026.
Microsoft plans to enable memory integrity protection by default on Windows devices starting October 2026. Through this expansion, organizations will receive stronger kernel-level protection against advanced attacks without additional configuration. This change is primarily aimed at devices that meet specific hardware and compatibility requirements.
The new approach builds on virtualization-based security (VBS), a technology that protects critical parts of the operating system from tampering.
Memory integrity on more devices
Starting October 2026, Windows quality updates will automatically enable memory integrity protection on eligible devices. This will occur without users or administrators needing to take extra steps. If memory integrity is not yet active, VBS will also be activated, enabling additional security options.
Windows automatically evaluates whether a device is ready for this security layer. This involves looking at hardware capabilities, compatibility, and performance. Only devices that meet all requirements will receive the new default protection. This is intended to ensure a reliable user experience without performance loss.
Flexibility for organizations
Despite the default rollout, organizations retain full control over security settings. Existing policy decisions and administrator configurations will be preserved. Devices where memory integrity was previously disabled will not be automatically adjusted by this update.
If desired, organizations and users can manually enable or adjust memory integrity via existing Windows security and management tools.