Enabling memory integrity protection on Windows 10 Pro 1803

10 Jun 2018

      On the aforementioned Lenovo laptop (Windows 10 Pro 1803 with updates
applied), I tried unsuccessfully to enable memory integrity protection in
Windows Defender Security Center to improve over-all security.

First, I discovered scripts on Lenovo's Web site that enabled me to change
the UEFI (BIOS) settings from within Windows.
https://support.lenovo.com/us/en/solutions/ht100612

This is much better than having to enlist help to change the firmware
configuration.

I enabled Intel virtualization support, then rebooted the machine and
confirmed that virtualization was in fact enabled using System Information.
I wanted virtualization anyway, so this was a desirable change on multiple
grounds - not only the need to enable it for virtualization-based security.

I then tried to enable memory integrity protection in Windows Defender
Security Center. The resulting error message, presented as a notification,
asserts:

"Memory integrity can't be started. There may be an incompatability.. There
may be an incompatability on your device.. . Received at 8:51 PM"

I'm curious - has anyone else here tried it, and if so, with what results?
I'm running JAWS 2018, although I have no reason to believe that it may be
involved other than the fact that it uses its own video and braille display
drivers. Various hardware drivers from their respective vendors are of
course installed as well.

For anyone who has enabled Memory Integrity Protection, have there been any
adverse consequences?

Jason White

Chris Nestrud

Jason White

tags

participants (2)