Share via

Memory integrity error

ArunKishore Muthurhavi 0 Reputation points
2025-11-20T11:08:50.33+00:00

We are trying to enable Memory Integrity and Local Security Authority Protection policies via Intune. The policies have been deployed on 23H2 and 24H2 versions, but we are encountering issues only with Memory Integrity.

  • On some devices, it shows “This setting is managed by your administrator”, but the switch does not turn on.
  • On other devices, the switch turns on, but “This setting is managed by your administrator” does not appear.

We want this feature to be properly turned on on all endpoint devices and to show as “Managed by your administrator” and turn on Memory Integrity.

Moved from: Microsoft 365 and Office | Publisher | For business

Microsoft Security | Intune | Other
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pauline Mbabu 1,785 Reputation points Microsoft Employee
    2025-11-25T13:13:21.63+00:00

    Hello Arunkishore,
    Thank you for reaching out. Here are some troubleshooting steps that you can take

    To ensure Memory Integrity (HVCI) and Local Security Authority (LSA) protection are properly enforced on Windows 11 23H2/24H2 devices via Intune, use the Settings Catalog to configure Virtualization-Based Security (VBS) and set HypervisorEnforcedCodeIntegrity = Enabled with UEFI lock, which makes the Windows Security UI show “Managed by your administrator” and prevents user toggling. Confirm hardware prerequisites (UEFI, Secure Boot, virtualization extensions) and remediate incompatible drivers, as these are the most common blockers for HVCI activation. Remove legacy GPO or ConfigMgr conflicts, ensure policy deployment succeeds, and validate compliance using msinfo32 or PowerShell checks. Roll out in phases: pilot readiness (driver inventory), enforce with UEFI lock, then expand. Use proactive remediation scripts and Endpoint analytics for monitoring, and keep LSA protection enabled via Intune account protection policies.
    I hope this helps

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.