Microsoft is expanding its memory integrity protection feature across Windows 11 installations, with the rollout beginning in October. This security enhancement operates at the kernel level, safeguarding the operating system from sophisticated attacks by malicious actors. The feature uses Virtualization-based Security (VBS) to create isolated virtual environments, allowing the OS to assume the kernel can be compromised.

Microsoft developed this robust protection mechanism using VBS, enabling more security hotpatches to be installed on the fly without requiring a hard restart. For large organizations with managed Windows 11 devices, setup will be easy as all devices will automatically benefit from the memory integrity addition. Devices with memory integrity currently disabled will not have it automatically enabled by the October rollout.

For regular Windows 11 users and PC enthusiasts, the rollout will automatically enable VBS and allow the OS to use these security features by default.