Share via

Cannot enable Kernel-Mode Hardware-enforced Stack Protection

Anonymous
2023-04-18T11:24:26+00:00

Hi all,

I noticed today that the Windows Security app was showing me an issue to look at, which turned out to be that the "Kernel-Mode Hardware-enforced Stack Protection" was off. In the Windows Security app settings I am however not able to enale this feature. It shows a yellow message "This setting is managed by your administrator.":

How would I go about resolving this?

Some information that may be relevant:

  • The machine is a very recently bought new model Zen 3 laptop, so it should support the feature. I have also enabled the relevant (and to be certain pretty much all) security settings in the BIOS.
  • I am using a local administrator account on the machine
  • My machine is not managed by any organisation (no connections under "Accounts > Access work or school")
  • I took a look at the group policy editor to check whether something has been set there, but everything in the administrative template tree shows as "not configured"
  • I have tried resetting the Windows Security app, no change
Windows for home | Windows 11 | Settings

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

11 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-04-24T13:33:53+00:00

    I tried this and turned off memory integrity and now I cannot get it back on. After I turned if off and restarted I tried to turn it on and click on review incompatible drivers but there were none listed. Now I can't turn on memory integrity or kernel mode hardware enforced stack protection.

    8 people found this answer helpful.
    0 comments
  2. DaveM121 868K Reputation points Independent Advisor
    2023-04-18T11:56:05+00:00

    Hi MarcoTiemann

    I am Dave, I will help you with this.

    Click your Start Button, then just type cmd

    On the resulting list, right click Command Prompt and select 'run as Administrator'

    Paste each of these commands into Command one at a time and press Enter, wait for each command to complete, before running the next command, if you receive an error on any command, ignore that and continue to the next command.

    reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies" /f

    reg delete "HKLM\Software\Microsoft\WindowsSelfHost" /f

    reg delete "HKLM\Software\Policies" /f

    reg delete "HKLM\Software\WOW6432Node\Microsoft\Policies" /f

    reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies" /f

    reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware

    reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" /f

    reg delete "HKCU\Software\Microsoft\WindowsSelfHost" /f

    reg delete "HKCU\Software\Policies" /f

    reg delete "HKLM\Software\Microsoft\Policies" /f

    Then, close Command Prompt and restart (not shut down) your laptop.

    4 people found this answer helpful.
    0 comments
  3. Anonymous
    2023-04-23T23:08:06+00:00

    Yea this is what worked for me. Turned off Memory Integrity then restarted then tried to turn it back on to find incompatible drivers from an old phone I used to have. Uninstalled those drivers, restarted my PC, then I was able to turn both back on.

    2 people found this answer helpful.
    0 comments
  4. Anonymous
    2023-04-21T03:19:51+00:00

    I had the same issue. I just disabled Memory Integrity and rebooted after this the managed by administrator thing disappeared. But now I realised I can`t turn off Memory Integrity complitely. After rebooting it stays on and although the toggle switch for the Kernel-Mode Hardware-enforced Stack Protection is working now it still stays off after PC restart.

    2 people found this answer helpful.
    0 comments
  5. Anonymous
    2023-04-20T11:40:51+00:00

    Hi there,

    Thank you for the suggestions, but wiping the group policy settings in the registry following your guide has not resolved my issue.

    I see that some other users have subscribed to this thread. Trying this had no positive or negative impact on my system in case you were wondering whether deleting a fair few registry keys would break your installation. May be worth trying in case you get a different outcome.

    2 people found this answer helpful.
    0 comments