Kernel-Mode Hardware-enforced Stack Protection suddenly off?

wrogg · Apr 18, 2023

quick way is task manager> performance> CPU and look bottom right.

I never had a dell, but check you have everything up to date on their website.

Siabot · Apr 18, 2023

wrogg said:
quick way is task manager> performance> CPU and look bottom right.

I never had a dell, but check you have everything up to date on their website.

Looks like virtualization isn't the issue in my case.

But it's hard to imagine that this issue popping up for me the same moment as the rest of the crowd here, means that it's a bunk update or something similar.

wrogg · Apr 18, 2023

There seems to be a lot of activity!
Oh, it's just started up!

Siabot · Apr 18, 2023

Update: Don't turn off Memory Integrity, as I did that and it's also stuck off now T_T

wrogg · Apr 18, 2023

that'll be the same driver I guess. Can you contact Dell? Or is there a tool to check for Dell updates?

Mochie · Apr 18, 2023

Turning on CPU virtualisation allowed me to access the core isolation page, it just said "page not found" before, but now I'm at the same step as you guys. It's claiming my USB drivers are incompatible with memory integrity, which is ridiculous, I obviously can't uninstall those.

wrogg · Apr 18, 2023

but can you update them?

Mochie · Apr 18, 2023

Seems I was incorrect, they're actually bluetooth drivers, but those are equally important to my usage of the PC. And no, there doesn't appear to be any updates, either on windows update or on their website (as you can see in the image).

wrogg · Apr 18, 2023

I have 3 'optional drivers' in WU, all of them break compatibility. They are quite old, but Windows is finding and suggesting them, my keyboard, watch and GPS all break it I had to find this out by process of elimination.
It's sometimes easier just to turn it off I guess?

BrianInEngland · Apr 18, 2023

I had the dreaded Update to Windows Antimalware Platform come through today, version 1.0.2303.27001. I'm getting crashes on the Security UI app (as expected!)

Seems more stable than before though and I have this

Ben Hastings · Apr 18, 2023

Same here. I just found this today. What I always wonder about these security features is, if it will break any games, especially older games.

Last summer, I used to be able to play Mass Effect trilogy on my computer. It ran perfectly fine. Now, it crashes with "radar pre leak" errors. Don't know if it the memory integrity feature, or what.

BrianInEngland · Apr 18, 2023

Ben Hastings said:
Same here. I just found this today. What I always wonder about these security features is, if it will break any games, especially older games.

Last summer, I used to be able to play Mass Effect trilogy on my computer. It ran perfectly fine. Now, it crashes with "radar pre leak" errors. Don't know if it the memory integrity feature, or what.

I've disabled Memory Integrity

Kreinzer · Apr 18, 2023

This is what I got this morning. Worse, it says that the Kernel-mode Hardware-enforced stack protection is managed by my administrator and I can't turn it on - but I'm the administrator. My specs and OS are below.

The only thing Windows updated last night was the Intel driver, namely 11.7.1007 (see image below).

Does anyone know how to resolve this?

JacksonS · Apr 18, 2023

JacksonS said:
I had this too. Can only assume the Defender update did it. The Update Stack Packages have been occuring since March with the changes being made to Windows Update without this specific issue, although the last Cumulative (March) triggered the LSASS 'issue'. I hacked that with a registry change and now April has been it returns if I remove the added Registry key, so I've left it in.

But, as I see this has been an issue for people who don't already have Virtualisation on, I'm gonna assume it's more a widespread issue with Defender.

I have an AMD machine I can try to update but SVM is already enabled. I'll add to this if anything notable happens - I'll boot up a few games.

Had the issue, simply set the setting and rebooted. 'The Last Of Us' plays fine, 'F1 22' I ran a benchmark, because playing isn't fun. No crashes.

glasskuter · Apr 18, 2023

Check for a UEFI bios update.

With 10-11-12 generation systems Dell has been issuing UEFI bios updates on the regular; 13 updates for mine in the last 18 months and mostly related to security. Whether other OEMs are updating their bios as often, I cannot say.
I strongly suggest that anyone, especially if you own a newer system, to disable driver updates through windows update and get your drivers directly from the manufacturer. I also recommend for anyone who is unfamiliar with updating drivers that you use your OEM's driver update utility to manage your drivers. ie: Dell Command Update. Other OEM's have similar apps.

Drivers from WU are not always the latest nor are they always the customized drivers configured by the OEM.

Enable or Disable Include Drivers with Windows Updates in Windows 11 Tutorial

This tutorial will show you how to enable or disable including drivers with Windows Updates in Windows 10 and Windows 11. Windows Update will include drivers when available in Windows 11 by default. You can enable the Do not include drivers with Windows Updates policy to not include drivers...

www.elevenforum.com

It's a good idea as well to also make this change.

Open System Properties by typing “sysdm.cpl” (without quotes) in the Search box on the Taskbar, then hit the Enter key.

In System Properties, select the Hardware tab, then click on Device Installation Settings.

In the Device installation settings screen, choose NO.

Click on Save Changes to exit.

Restart the system.

safron · Apr 18, 2023

I have a similar issue to @Kreinzer, with the Kernel-mode option and greyed out. In my case, Windows is saying it's because Memory Integrity is off - something I've been trying to resolve here, so I'm going to focus first on the Memory Integrity issue, then circle back to this if necessary.

FYI, Virtualization is enabled.

Siabot · Apr 18, 2023

glasskuter said:
Check for a UEFI bios update.

With 10-11-12 generation systems Dell has been issuing UEFI bios updates on the regular; 13 updates for mine in the last 18 months and mostly related to security. Whether other OEMs are updating their bios as often, I cannot say.
I strongly suggest that anyone, especially if you own a newer system, to disable driver updates through windows update and get your drivers directly from the manufacturer. I also recommend for anyone who is unfamiliar with updating drivers that you use your OEM's driver update utility to manage your drivers. ie: Dell Command Update. Other OEM's have similar apps.

Drivers from WU are not always the latest nor are they always the customized drivers configured by the OEM.

Enable or Disable Include Drivers with Windows Updates in Windows 11 Tutorial

This tutorial will show you how to enable or disable including drivers with Windows Updates in Windows 10 and Windows 11. Windows Update will include drivers when available in Windows 11 by default. You can enable the Do not include drivers with Windows Updates policy to not include drivers...

www.elevenforum.com

It's a good idea as well to also make this change.

Open System Properties by typing “sysdm.cpl” (without quotes) in the Search box on the Taskbar, then hit the Enter key.

In System Properties, select the Hardware tab, then click on Device Installation Settings.

In the Device installation settings screen, choose NO.

Click on Save Changes to exit.

Restart the system.

This does not resolve the issue. I tried it earlier today, and again just now, and there is no change in the disabled features, and the list of offending drivers is still entirely blank / unpopulated.

Zac · Apr 18, 2023

Merrydoc said:
Hello,

i have never seen Kernel-Module Hardware-enforced stack protection before todays Update! It replaced Local Security Authority today for me, or is it the same? Kinda confused now.

I made a topic about this replacement and sudden appearance

LSA protection setting gone, but instead staple protection setting appeared

I checked after last monthly update, if the LSA protection bug was fixed. But it still said, computer needs to be restarted. A week later i got the yellow ! mark at defender icon, and checked if i need to dismiss the notification of the bug again. But now the setting for LSA protection was...

www.elevenforum.com

4goTTen21 · Apr 18, 2023

Has any of you tried "verifier" in CMD ?

Siabot · Apr 18, 2023

Zac said:
I made a topic about this replacement and sudden appearance

LSA protection setting gone, but instead staple protection setting appeared

I checked after last monthly update, if the LSA protection bug was fixed. But it still said, computer needs to be restarted. A week later i got the yellow ! mark at defender icon, and checked if i need to dismiss the notification of the bug again. But now the setting for LSA protection was...

www.elevenforum.com

4goTTen21 said:
Has any of you tried "verifier" in CMD ?

Pretend we don't know what to do once we get there, if you can be bothered. I'm in there digging around, and not smart enough to risk wailing the pup by deleting something critical