How to silently dismiss Windows Security Memory Integrity warning on Windows 11

Ihab Abedrabbo 11 Reputation points
2024-03-13T13:07:32.7466667+00:00

Hello

After upgrading to Windows 11 from Windows 10, all our devices started displaying a warning icon related to Windows Security

01

The warning is related to CORE ISOLATION MEMORY INTEGRITY

02

03

In our environment on Windows 10 we do not have any policy to configure this setting, thus Memory Integrity is OFF, but Windows 10 does not display any warning regarding this issue. When we upgrade our devices to Windows 11, the setting remains OFF, but it seems that Windows 11 does care about this setting and displays a warning.

We do not want to enable Memory Integrity for several reasons, but our helpdesk is flooded by requests from users complaining and querying about this warning.

So we have two options, either er enable it turning the setting to ON with other sub configuration, OR, we click the DIMISS link to dismiss the issue and Windows Security will not display the warning anymore.

My question is: How do I configure Windows Security to dismiss this warning on all out 7000+ machines without having to tell the user to dismiss it manually?

Trying to dismiss it manually required administrative access and none of our users is an administrator. Our computers are hybrid joined computers, and we have SCCM as well.

Any help is highly appreciated

Thanks

Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,956 questions
Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
10,168 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Wesley Li 10,490 Reputation points
    2024-03-14T06:04:05.54+00:00

    Hello

    Windows Security in Windows 11 provides a Memory Integrity feature that enhances security by protecting core processes from malicious software. However, this feature can sometimes cause inconvenience, especially when it displays warnings to end users. To address this, you have a few options:

     

    Automatically Dismiss the Warning:

    You can configure Windows Security to automatically dismiss the Memory Integrity warning on all your devices without requiring manual intervention by users.

    Here’s how to do it:

    Open Windows Security.

    Click on Device security in the left pane.

    Under Core isolation, click on Core isolation details.

    Toggle the Memory integrity switch to Off.

    By turning off Memory Integrity, the warning will no longer appear for your users.

     

    Registry Modification:

    If you want to proactively dismiss the warning without user interaction, you can set a registry value.

    Open the Registry Editor (regedit.exe).

    Navigate to the following key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Security Health\State

    Create a new DWORD value named Hardware_HVCI_Off and set its value to 0.

    Restart the affected devices for the change to take effect.

     

    Group Policy or Intune:

    If you manage your devices using Group Policy or Microsoft Intune, you can configure the Memory Integrity setting centrally.

    Refer to the appropriate documentation for your management solution to find the relevant policy or configuration option.

     

    By implementing one of these approaches, you can ensure that the warning is dismissed across your 7000+ machines without requiring manual user intervention.


  2. Fabio Fernandez Bastos 0 Reputation points
    2024-08-30T03:38:37.5033333+00:00

    Or simply download the following .REG and run it as admin. Of course just right click and run with Notepad just to be sure.

    https://1drv.ms/f/s!AiiIDGCMUp8hzwfRPgpgT3Qveu3s?e=8yULIk

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.