How to silently dismiss Windows Security Memory Integrity warning on Windows 11

Question

Hello

After upgrading to Windows 11 from Windows 10, all our devices started displaying a warning icon related to Windows Security

The warning is related to CORE ISOLATION MEMORY INTEGRITY

In our environment on Windows 10 we do not have any policy to configure this setting, thus Memory Integrity is OFF, but Windows 10 does not display any warning regarding this issue. When we upgrade our devices to Windows 11, the setting remains OFF, but it seems that Windows 11 does care about this setting and displays a warning.

We do not want to enable Memory Integrity for several reasons, but our helpdesk is flooded by requests from users complaining and querying about this warning.

So we have two options, either er enable it turning the setting to ON with other sub configuration, OR, we click the DIMISS link to dismiss the issue and Windows Security will not display the warning anymore.

My question is: How do I configure Windows Security to dismiss this warning on all out 7000+ machines without having to tell the user to dismiss it manually?

Trying to dismiss it manually required administrative access and none of our users is an administrator. Our computers are hybrid joined computers, and we have SCCM as well.

Any help is highly appreciated

Thanks

Answer 1

Hello

Windows Security in Windows 11 provides a Memory Integrity feature that enhances security by protecting core processes from malicious software. However, this feature can sometimes cause inconvenience, especially when it displays warnings to end users. To address this, you have a few options:

 

Automatically Dismiss the Warning:

You can configure Windows Security to automatically dismiss the Memory Integrity warning on all your devices without requiring manual intervention by users.

Here’s how to do it:

Open Windows Security.

Click on Device security in the left pane.

Under Core isolation, click on Core isolation details.

Toggle the Memory integrity switch to Off.

By turning off Memory Integrity, the warning will no longer appear for your users.

 

Registry Modification:

If you want to proactively dismiss the warning without user interaction, you can set a registry value.

Open the Registry Editor (regedit.exe).

Navigate to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Security Health\State

Create a new DWORD value named Hardware_HVCI_Off and set its value to 0.

Restart the affected devices for the change to take effect.

 

Group Policy or Intune:

If you manage your devices using Group Policy or Microsoft Intune, you can configure the Memory Integrity setting centrally.

Refer to the appropriate documentation for your management solution to find the relevant policy or configuration option.

 

By implementing one of these approaches, you can ensure that the warning is dismissed across your 7000+ machines without requiring manual user intervention.

Answer 2

Or simply download the following .REG and run it as admin. Of course just right click and run with Notepad just to be sure.

https://1drv.ms/f/s!AiiIDGCMUp8hzwfRPgpgT3Qveu3s?e=8yULIk