Windows 11: Microsoft Will Automatically Enable Memory Integrity

Microsoft announced in a new blog post that starting in October 2026, Memory Integrity Protection will be automatically enabled on additional compatible devices. This is a core-level security feature of Windows 11 that is already running by default on most modern computers.

"Memory Integrity builds on virtualization-based security (VBS) and helps protect critical parts of Windows from tampering," Microsoft states. According to the company, it forms the foundation of modern security innovations, including hotpatch updates. The protection aims to block "sophisticated attacks" without requiring any configuration.

How Memory Integrity Will Expand to More Computers

The protection will begin to be enabled through Windows quality updates on compatible devices. "If it is not already active, these updates will also enable VBS, thereby unlocking additional security features," the announcement states. The change will primarily affect older computers where the protection has not yet been activated. For users of these devices, it is intended to be completely invisible.

However, the decision remains with the users. Those who have manually disabled the protection will not have it automatically re-enabled. "To ensure reliable operation of the device, Windows will automatically assess its readiness before enabling memory integrity," Microsoft writes. "Memory Integrity allows this by only running trusted code and drivers in kernel mode."

Related Changes in Windows Update

This step fits into Microsoft's broader effort to create a more secure Windows 11. In recent months, the company announced a complete overhaul of Windows Update, which will prompt for a restart no more than once a month. Additionally, hotpatching is available for commercial editions of the system, allowing updates to be installed without a restart. The Home and Pro editions do not yet offer this feature.