To enable Core Isolation on Windows 10, open Windows Security, go to Device security, and toggle Memory integrity On under Core isolation details.
Microsoft’s Core Isolation feature is one of the strongest built-in defenses against kernel-level malware in Windows 10. How to enable Core Isolation on Windows 10 is straightforward — flip a single switch inside the Windows Security app. But getting that switch to appear and stay on depends on your hardware, drivers, and a quick detour into the BIOS. Here is the exact process to get it running.
What Is Core Isolation in Windows 10?
Core Isolation is a virtualization-based security (VBS) feature that isolates core Windows processes in a protected memory region. It prevents malicious code from breaking into high-security parts of the operating system even if it gains user-level access. The main toggle you control is called Memory integrity — the component that blocks code injections aimed at critical system processes. This is the same underlying technology used in enterprise Hyper-V deployments, now available on consumer Windows 10 builds.
Step-by-Step Guide to Enabling Core Isolation
The entire process takes under two minutes if your hardware is compatible. Follow these steps exactly to turn on Memory integrity.
| Step / Requirement | What to Do | Why It Matters |
|---|---|---|
| 1. Check System Compatibility | Open Task Manager (Ctrl+Shift+Esc) > Performance tab > check Virtualization: Enabled | Core Isolation requires CPU virtualization support turned on in the BIOS. |
| 2. Update Windows & Drivers | Run Windows Update and update drivers from manufacturer websites | Old or incompatible drivers are the top reason the toggle gets blocked. |
| 3. Open Windows Security | Type “Windows Security” into the Start Menu search bar and click the app | The setting lives inside the built-in Windows Security app, not the old Control Panel. |
| 4. Navigate to Core Isolation | Select Device security > Core isolation details | This exact path leads to the Memory integrity toggle. |
| 5. Enable Memory Integrity | Click the toggle so it changes to On | This activates the core virtualization-based protection for system processes. |
| 6. Restart Your PC | Select Start > Power > Restart | The change only takes effect after a full system reboot. |
Troubleshooting Core Isolation on Windows 10
If the toggle is grayed out, missing entirely, or your PC behaves differently after enabling it, one of these scenarios is likely the cause. The table below covers the most common problems and their fixes.
| Problem | Likely Cause | The Fix |
|---|---|---|
| Memory integrity toggle is grayed out | An incompatible driver is installed on the system | Click “Review incompatible drivers” on the Core isolation page. Update or uninstall the listed driver, then restart. |
| “Core isolation details” is missing entirely | Virtualization support is disabled in the BIOS/UEFI | Restart the PC, enter the UEFI firmware (usually F2 or Del), and enable SVM (AMD) or Intel VT-x (Intel). |
| “This setting is managed by your administrator” | Group Policy or a registry key is blocking the change | This is standard on managed work or school PCs. You will need local administrative rights to change it. |
| Computer boots to a blue screen after enabling | A specific driver conflicts with virtualization | Boot into Safe Mode, navigate back to Core isolation details, and turn Memory integrity Off. Then update the crashing driver. |
| No Memory integrity toggle at all | Unsupported CPU or an older Windows 10 build | Core Isolation requires Windows 10 build 1903 or later and a CPU with SLAT (Second Level Address Translation). Run Windows Update to get the latest build. |
| Performance drop after enabling | Driver overhead or compatibility issue | Check the motherboard manufacturer for a firmware update. If gaming performance suffers significantly, you can disable it, but it is a trade-off against security. |
If the toggle was present but gray, the “Review incompatible drivers” link is your best friend. Microsoft makes it easy to identify which driver Windows is blocking you over.Microsoft’s official Core Isolation documentation confirms that updating or removing the listed driver resolves the conflict in nearly every case.
Does Core Isolation Affect Performance?
Microsoft designed Core Isolation to have a low overhead, but it does use some system resources to maintain the virtualized environment. Most users with modern CPUs (Intel 8th-gen or AMD Ryzen 2000 and later) will not notice a difference in everyday tasks or gaming. The common exception is users running very old hardware, specific anti-cheat software, or specialized drivers that do not play well with virtualization-based security. In those cases, switching Memory integrity off is an option — but it is a noticeable drop in your PC’s security posture against kernel-level exploits.
Final Checklist for a Secure Setup
After you restart, confirm that Core Isolation is working properly. Open Windows Security again and go to Device security. The page should report that your “Device is secure,” and the Memory integrity toggle will display On. If you ever run into a driver conflict later, you now know exactly where to turn the feature off temporarily — and exactly how to turn it back on when the conflict is resolved.
References & Sources
- Microsoft Support. “Device security in the Windows Security app.” Official documentation for Core isolation, Memory integrity, and the exact enablement steps.