MC1465669 Medium
Expanding memory integrity protection across Windows devices
Summary AI-generated
Starting October 2026, Windows quality updates will enable memory integrity and, for some, VBS on eligible devices to enhance Windows security.
Suggested actions AI-generated
- Review existing memory integrity and VBS policies and device configurations
- Review Microsoft rollout info
- See Microsoft guidance for configuration and management
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1506290 Hardening changes for ReFS volumes on removable media
- MC1248388 Plan for Change: Windows Autopatch is enabling hotpatch updates by default
- MC1226925 Windows news you can use: January 2026 recap
- MC1466750 Microsoft Secure Score: New AI-readiness recommendations for device security
- MC1247859 Windows Autopatch is enabling hotpatch updates by default
- MC1478956 Microsoft Windows Autopatch: enhancements to update approval control and management capabilities
Original post from Microsoft
What and why
Beginning in October 2026, Windows quality updates will start enabling memory integrity on more eligible Windows devices. On some devices, this change will also enable virtualization-based security (VBS).
Memory integrity helps protect critical parts of Windows from tampering by allowing only trusted kernel-mode code and drivers to run. Before enabling the protection, Windows evaluates device readiness based on hardware capabilities, compatibility, performance considerations, Windows 11 system requirements, and recommended built-in protections.
Rollout schedule
The gradual rollout begins in October 2026. It might not reach all eligible devices at the same time.
Impact on your organization
Eligible devices might have memory integrity, and in some cases VBS enabled, automatically through Windows quality updates.
Existing administrator and user choices and policies remain in effect. This rollout won't automatically change devices on which you explicitly disable memory integrity.
Action required/recommendations
Organizations should:
• Review existing memory integrity and VBS policies and device configurations.
• Review Expanding memory integrity protection across Windows devices for information about the rollout.
• See Enable memory integrity for configuration and management guidance.
Compliance considerations
No compliance considerations are identified. Review as appropriate for your organization.