Turn On or Off Core Isolation Memory Integrity in Windows 10

Cliff S · 11 May 2018

In device manager, right click the driver, and select update, and then the4 following:

Turn On or Off Core Isolation Memory Integrity in Windows 10-image-002.png

select "Let me pick...."

Turn On or Off Core Isolation Memory Integrity in Windows 10-image.png

Henk Poley · 12 May 2018

Hey thanks, but it seems that the usbfilter.sys filter driver is attached on another level than these devices in the overview. And when you uninstall it through the commandline, you have to break out the old PS/2 keyboard

er557 · 13 May 2018

tried the readiness tool on my dual xeon system, rebooted, and aside from secure boot being disabled, many device drivers I need were not compatible, as well as other parameters. This functionality is only ready for prime time on non customized devices, cleanly- installed and probably not for pc enthusiasts. Although core isolation does seem to be enabled as well as aslr

ericnixmd · 13 May 2018

@er557 Where is the readiness tool? Maybe I overlooked it.

er557 · 13 May 2018

here it is
Download Device Guard and Credential Guard hardware readiness tool from Official Microsoft Download Center
you need to start power shell admin, and launch the script via command from where you extracted the archive

BTW, anyone knows if I need to reboot again afterwards to restore the config, or the single reboot of the tool is enough

Henk Poley · 14 May 2018

Edit: nonsense old content from 2017.. oops..

Henk Poley · 14 May 2018

er557 said:

BTW, anyone knows if I need to reboot again afterwards to restore the config, or the single reboot of the tool is enough

You need to run `verifier /reset` and reboot afterwards; or open the verifier and choose the reset option in the GUI and reboot (same thing).

The readiness tool keeps the "Code Integrity compatibility checks" enabled in verifier.

shmu26 · 15 May 2018

Has anyone succeeded in enabling Core isolation on a Dell laptop?
I have a Dell Latitude 3440, and after reboot, core isolation turns off.

ericnixmd · 15 May 2018

It was running on my Precision 3520, but I turned it off due to some BSOD's that I'm trying to sort through.

Henk Poley · 15 May 2018

shmu26 said:

I have a Dell Latitude 3440, and after reboot, core isolation turns off.

In principle you can check compatibility using the 'Download Device Guard and Credential Guard hardware readiness tool'. It is not entirely clear what checks are compulsory to pass for 'Memory Integrity'. My F1A75-M system now checks okay for the drivers, but it still bluescreens and switches Memory Integrity off. It does not store a minidump, even though I use Microsoft's own SATA driver.

It seems to be a mostly pure Intel laptop from 2014 (built for Windows 8.1). You'd think it would work. Many of the requirements for Core Isolation were already in place for WHQL drivers for Win8.1

Edit:

http://www.dell.com/support/article/nl/nl/nlbsdt1/sln304974/windows-10-enterprise-security-credential-guard-and-device-guard?lang=en said:

Dell has verified select Precision, Latitude and OptiPlex systems that must have updated BIOS and HVCI compliant drivers.

Your Dell Latitude 3440 is not on the list. Neither is @ericnixmd Dell 3520. See: Here are all the systems that Dell supports this feature set on.