I can't start memory integrity because of an incompatible driver .sys file

Question

I can't start memory integrity because of an incompatible driver. I uninstalled the .inf files, but there is a .sys file I can't delete because I need SYSTEM permission.

Answer 1

To resolve the issue of not being able to start memory integrity due to an incompatible driver, you may need to take the following steps:

1. Identify the Incompatible Driver: Use tools like Device Manager or check the Code Integrity logs in Event Viewer to identify which driver is causing the issue.
2. Uninstall the Driver: If you have already uninstalled the .inf files but still have a .sys file that cannot be deleted due to SYSTEM permission, you can try the following:
   • Boot into Safe Mode: This can prevent the driver from loading and allow you to delete the .sys file.
   • Use Command Prompt with Elevated Permissions: Open Command Prompt as an administrator and attempt to delete the .sys file using the del command.
   • Use Sysinternals Tools: Tools like Process Explorer can help you identify which process is using the .sys file, and you can terminate that process before attempting to delete the file.
3. Check for Updates: Sometimes, the driver may have an updated version that is compatible with memory integrity. Check the manufacturer's website for any updates.
4. Disable Memory Integrity Temporarily: If necessary, you can disable memory integrity temporarily while you resolve the driver issue. You can do this through the Windows Security settings under Device Security.
5. Registry Modification: If you are comfortable with it, you can modify registry settings to disable the driver from loading, but this should be done with caution.

If you continue to experience issues, consider seeking assistance from a professional or the support community for your specific hardware or software.