11

In Windows 10 Insider Preview builds, in Windows Defender Security Center, after the Fall Creators Update, Windows Insiders will see a new feature Core Isolation.

It's possible to turn the Memory Integrity switch on in the GUI so that part is easy. It may be hard for some people to turn it back off again because the feature was not fully designed properly, or the feature is buggy or incomplete.

I get a message that these settings are controlled by my administrator. I'm the local admin, there is no domain admin, and my settings are not controlled by someone else. Core Isolation prevents you from using third party virtualization technologies (like VMWare Player and Virtual Box).

There must be registry or group policy ways to disable this feature in Windows again. How is it done?

enter image description here

1
  • Have you noticed this impacting performance at all? – Matt DiTrolio May 16 '18 at 13:12
14

I've been wondering about this, too; fortunately, it seems that it's as easy as setting the following registry key to 0:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity\Enabled

Not the answer you're looking for? Browse other questions tagged or ask your own question.