Disable the kernel DMA protection on surface laptop4

Question

I've turn off it in the Windows security, but when I open the ”MSINFO32.EXE“ to check it, it still on.

I know it can be disabled in the BIOS，but in my surface laptop 4 UEFI，I can not find a option to turn it off.

Is there any other way to disable it?

Windows 10 Home
21H1

Answer 1

From your screenshot, you turn off the Memory integrity and it is different from Kernel DMA, you won't be able to turn off Kernel DMA using Windows Setting and it is being done from the UEFI.
You have to turn off Virtualization Technology in the UEFI.
Take a look at:
https://learn.microsoft.com/en-us/windows/security/information-protection/kernel-dma-protection-for-thunderbolt