FeatureSettingOverride Registry value update

Question

if i change the registry value of this following path

System\currentcontrolset\Control\SessionManager\MemoryManagement\FeatureSettingsOverrideMask:0x00000003(3)

System\currentcontrolset\Control\SessionManager\MemoryManagement\FeatureSettingsOverride:0x00000003(3)

What will be the actuall changes in windows server 2019.

Need your expertise on it.

Answer 1

Hello

Thank you for your question and reaching out. I can understand you are having query related to Registry settings.

To disable mitigations for CVE-2017-5715 (Spectre Variant 2) and CVE-2017-5754 (Meltdown)

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 3 /f

reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f

Note: Setting FeatureSettingsOverrideMask to 3 is accurate for both the "enable" and "disable" settings.

Reference :
https://support.microsoft.com/en-us/topic/kb4072698-windows-server-and-azure-stack-hci-guidance-to-protect-against-silicon-based-microarchitectural-and-speculative-execution-side-channel-vulnerabilities-2f965763-00e2-8f98-b632-0d96f30c8c8e

---------------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--