"This setting is managed by your administrator" can't turn ON Memory Integrity

Question

_{Friday, March 29, 2019 6:51 AM}

Hi, I have a Evaluation of Windows 10 LTSC on VMware and Windows 10 Host. I am trying to turn on all the security features on my LTSC VM. I have Secure Boot, TPM 2.0, Credential Guard (not sure) and it says "Your device meets the requirements for standard hardware security." I would like to turn on Memory Integrity under Core Isolation. The Memory Integrity is greyed out and says "This setting is managed by your administrator." It's just me at home. I'm guessing LTSC is the problem. When I installed (on VMware) it asked me for a business or school account email. I set up a local account and added my Microsoft Account when I was done. So how do I get the "managed by administrator" off? And turn ON Memory Integrity? I read online to go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity and add a 1 to turn it on. It was already on 1 but still not luck. Then I tried Computer Configuration > Administrative Templates > System > Device Guard and Enabled with UEFI Lock. I still can't change the settings for Memory Integrity. It says the administrator error. Everything I've found online is about disabling Memory Integrity but I want to enable it. So does anyone know how I can get rid of the error and turn it on? Please reply. Thanks

All replies (3)

_{Sunday, March 31, 2019 3:25 AM}

Hi, will I never get this fixed?

_{Monday, April 1, 2019 3:01 AM}

On my 1809 and 1903 machine, Memory Integrity can be turned on fine, look at my screenshot. So I guess your system version should be the reason.

Try to turn on Memory Integrity on your host or other different version machine for test.

Besides, your steps seems to be incorrect.

Go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity, Enabled key, set it value from 1 to 0.

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\CredentialGuard, Enable key, set it value from 0 to 1.

Restart computer.

Open Windows Security interface to check if you could turn on Memory Integrity

Regards

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Wednesday, April 3, 2019 9:47 AM}

Would you mind letting me know the update of the problem? If you need further assistance, feel free to let me know.

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].