Switch on memory integrity on windows 11 devices

Question

Switch on memory integrity on windows 11 devices

Jay Tee 40

Hello everyone,

Does anybody know how to identify which Windows 11 devices across the network have Memory Integrity issues? Is there any policy I can create on Intune?

Best Regards,

JT

Pauline Mbabu 1,840 Reputation points Microsoft Employee

2025-10-13T17:17:12.1566667+00:00
Hello Jay,
Thank you for reaching out. Here is what I found regarding using Intune to Identify which Windows 11 devices across the network have Memory Integrity issues.

Refer to this guide to configure Virtualization-Based Security (VBS) and Hypervisor-Protected Code Integrity (HVCI) via Intune.

Steps:

Go to Intune Admin Center → Devices → Configuration profiles → Create profile

Platform: Windows 10 and later

Profile type: Settings catalog

In the catalog, search for and enable:

Enable Virtualization Based Security

Require Platform Security Features

Hypervisor-Protected Code Integrity

This will enforce Memory Integrity on supported devices. Devices that fail to apply these settings may indicate compatibility issues or missing hardware support.
I hope this helps
Jay Tee 40 Reputation points

2025-10-14T07:24:00.94+00:00

Thank you for the response. Before I enforce, how would I identify which devices have memory integrity turned off?

Your answer

Pauline Mbabu 1,840 Reputation points Microsoft Employee

2025-10-13T17:17:12.1566667+00:00

Hello Jay,
Thank you for reaching out. Here is what I found regarding using Intune to Identify which Windows 11 devices across the network have Memory Integrity issues.

Refer to this guide to configure Virtualization-Based Security (VBS) and Hypervisor-Protected Code Integrity (HVCI) via Intune.

Steps:

Go to Intune Admin Center → Devices → Configuration profiles → Create profile

Platform: Windows 10 and later

Profile type: Settings catalog

In the catalog, search for and enable:

Enable Virtualization Based Security

Require Platform Security Features

Hypervisor-Protected Code Integrity

This will enforce Memory Integrity on supported devices. Devices that fail to apply these settings may indicate compatibility issues or missing hardware support.
I hope this helps
Jay Tee 40 Reputation points

2025-10-14T07:24:00.94+00:00

Thank you for the response. Before I enforce, how would I identify which devices have memory integrity turned off?