Kernel-Mode Hardware-enforced Stack Protection suddenly off?

Ok.. so should this setting be enabled or should i just leave it disabled?

Zinoviev said:

Ok.. so should this setting be enabled or should i just leave it disabled?

Click to expand...

What does this even mean? I've got a line in the water for someone who is both (1) smart at this rubbish, and (2) not so arrogant about their tech knowledge that they can only hint at general ideas that don't enable victory, and now I've got you in here derailing this badboy like a train blowing through Lebanon. Sigh! PLZ

Zinoviev said:

Ok.. so should this setting be enabled or should i just leave it disabled?

Click to expand...

I'm convinced it should be enabled. Trick is, how to do it. The widespread issue people are having seems to point to a bug or something. I wonder if anyone can figure out how to fix it.

Zinoviev said:

Ok.. so should this setting be enabled or should i just leave it disabled?

Click to expand...

I'm wondering the same thing...
I was able to enable it after setting SVM to enabled in my bios as other AMD users pointed out but then I was like.. do I even need this kernal mode stock protection??
I just never like seeing ! in defender...

Kreinzer said:

This is what I got this morning. Worse, it says that the Kernel-mode Hardware-enforced stack protection is managed by my administrator and I can't turn it on - but I'm the administrator. My specs and OS are below.

The only thing Windows updated last night was the Intel driver, namely 11.7.1007 (see image below).

Does anyone know how to resolve this?

View attachment 58162

View attachment 58163

Click to expand...

What processor do you have? I know it's 11th gen and up for intel, not sure for AMD. If the processor isnt compatible I would assume that's just microsoft locking you out.

derekamoss said:

What processor do you have? I know it's 11th gen and up for intel, not sure for AMD. If the processor isnt compatible I would assume that's just microsoft locking you out.

Click to expand...

I'm on 13900 KS. Got an intel update 11.7.1007 last night and today when I turned on the PC I got the Kernel thing turned off.

EDIT: Oh you're saying this is happening with 11th gen and newer?

WindBanan9 said:

I had same problem, now, the problem is, it crashes the hell out of my pc when trying to run certain apps/games after i turn it on i get blue screened with Kernel security check failure, ironically if i turn it off i don't have that problem anymore, sadly it's not the first time microsoft pushes updates that literally breaks the system

Click to expand...

I was fine turning it on, rebooting - all looked normal. Then when I tried to launch the game I normally play I get BSOD. Rebooted, tried again and same. Turned it back off and have the Warning symbol On Defender but now I can launch the game fine.......

For now, the official workaround is to dismiss the 2 warnings, reboot, and check to see that lsass.exe is running in the BG. What a crock. Guess we wait for someone smart to figure out the real workaround, or for MS to get their act together.

Having the similar problem being caused by Logitech C910 webcam. Deleted all logitech files and folders using Revo Uninstaller. Need to delete the 3 files in FileRepository. Been so long sense I fiddled with all this I can't remember how to get permission from the SYSTEM. All help is appreciated. Had the same problem about a year ago. Did this and problem solved.

JonInVegas said:

Having the similar problem being caused by Logitech C910 webcam. Deleted all logitech files and folders using Revo Uninstaller. Need to delete the 3 files in FileRepository. Been so long sense I fiddled with all this I can't remember how to get permission from the SYSTEM. All help is appreciated. Had the same problem about a year ago. Did this and problem solved.

Click to expand...

I have the Logitech C920 webcam, I can enable Memory Integrity although I don't use it. My webcam has generic MS drivers, I never installed any from Logitech.

Since the Malware platform update 1.0.2303.27001 yesterday I've found that the Security app will only crash if I click on the 'Security Processor details' link on the UI, it otherwise seems to be running ok. With the previous version I couldn't even open the Security UI at all.

An improvement - at least now I can actually have the update installed...

JonInVegas said:

Having the similar problem being caused by Logitech C910 webcam. Deleted all logitech files and folders using Revo Uninstaller. Need to delete the 3 files in FileRepository. Been so long sense I fiddled with all this I can't remember how to get permission from the SYSTEM. All help is appreciated. Had the same problem about a year ago. Did this and problem solved.

Click to expand...

Try RAPR-Driver Store Explorer it allows you to view, install & uninstall drivers from the Driverstore folder. It can show drivers organised by provider, pick older drivers if more than one version exists and force uninstall if needed.
The app is very powerful, use with caution, strongly suggest making image of current system before making changes, if possible.
GitHub - lostindark/DriverStoreExplorer: Driver Store Explorer [RAPR]

Another potentially useful app for taking control of drivers/ services is Autoruns from Sysinternals (can be downloaded through the MS Store), it can show all drivers, services and tasks in use, plus more. The app allows for temporary disabling of items and removal of items with a simple check box, again use with caution.
Both these apps are free.

At the end of October 2022 Microsoft published a workaround to gain a little more performance on gaming, those steps included disabling memory integrity check and virtualization.

Since I did those steps, I've had the stack protection disabled warning, I just dismised, but this week the warning reappeared, I dismissed it again, so may be some of you guys want to check the steps in reverse mode to see if that solves your warnings.

Options to Optimize Gaming Performance in Windows 11

Kreinzer said:

I'm on 13900 KS. Got an intel update 11.7.1007 last night and today when I turned on the PC I got the Kernel thing turned off.

EDIT: Oh you're saying this is happening with 11th gen and newer?

Click to expand...

Think it's Zen 3 in AMD. My other (AMD) system had the same 'issue', the Update Stack Service package wasn't listed as installed, so I'm still thinking it's a Defender update that's triggered it. Both systems had that. KB5007651, listed as a Definition Update.

My Windows 10 system 7th Gen and a couple of Windows 11 systems 8th and 10th Gen don't have the issue. It's definitely a W11 11th Gen/Zen 3 up thing.

ainomx said:

At the end of October 2022 Microsoft published a workaround to gain a little more performance on gaming, those steps included disabling memory integrity check and virtualization.

Since I did those steps, I've had the stack protection disabled warning, I just dismised, but this week the warning reappeared, I dismissed it again, so may be some of you guys want to check the steps in reverse mode to see if that solves your warnings.

Options to Optimize Gaming Performance in Windows 11

Click to expand...

I did benchmarks before and after with HVCI/uCode basically any kind of security enhancements and found all benchmarks within margins of error. YMMV based on actual CPU and particular / specific games. But I went Intel (4th Gen i7) to AMD (Zen+/2/3). I don't have a huge range of games either.

This warning appeared after the latest update. Yesterday I did Dismiss, but I was surprised today that the warning came back again
Microsoft claims that the device may be in danger if it is not activated, and given that it depends on activating memory integrity, which causes some problems in programs and games, this may be a problem and requires an urgent fix from Microsoft to stop these warnings

My issue stems from a Logitech C910 webcam. Ran in to this trying to fix the kernel. Seems they know about the issues we are all having. What is a fix for Logitech HD Pro Webcam C910 Windows 11 Defender - Core isolation/Memory integrity ERROR?

I have a Logitech C920, on Windows 10 it had it's own drivers and a capture program.
When I change to Windows 11 there is literally nothing on the Logitech website any more and it only installs generic Microsoft driver (but names it Logi C920) However.... I do have several optional update drivers that will destroy Defender if I so much as download them! I know this from experience and wish I could hide them.

I found somewhere that disabling "Memory integrity" and re-enabling it could help with getting Kernel-mode Hardware-enforcement Stack Protection enabled, but I was only able to enable memory integrity again by manually enabling it in the registry. I would recommend against disabling this setting until the problems with kernel enforcement are resolved as they appear to be linked

Additionally, I'm guessing the "Review Incompatible Drivers" is supposed to give a list of incompatible drivers. I have no list and only a link where Microsoft recommends against uninstalling drivers to resolve the issue

I have updated every driver I could find from Dell, but the issue still persists. (Dell Latitude 3420)

@linuxfish I have the same issue on a Dell XPS 8950, but (so far) have not resorted to modifying the Registry. If I discover anything, I'll let you know.