![\"memory](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/memory-integrity-notification.png\")
<\/p>\n
Clicking on the “Review incompatible drivers” shows you the list of incompatible drivers.<\/p>\n
![\"defender](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/core-isolationb-incompatible-drivers-list.png\")
<\/p>\n
You need to click on each incompatible driver entry shown on the Windows (Defender) Security page to expand the section. It shows the Published name, Manufacturer name, driver information, and date. If the INF file name is not shown, the driver file name is displayed.<\/p>\n
The following drivers were shown as being incompatible with the Memory integrity feature:<\/p>\n
- \n
- ssudcdf.sys [Published Name: oem36.inf]<\/li>\n
- ssudmgr.sys [Published Name: oem34.inf]<\/li>\n
- ssudobex.sys\u00a0 [Published Name: oem42.inf]<\/li>\n
- ssudserd.sys [Published Name: oem36.inf]<\/li>\n
- igdkmd64.sys [Published Name: oem56.inf]<\/li>\n
- igdkmd64.sys [Published Name: oem40.inf]<\/li>\n
- igdkmd64.sys (without<\/strong> an INF file name**<\/strong>) – this item is not showing in the above screenshot.<\/li>\n<\/ul>\n
**Note:<\/strong> If the Windows Security page doesn’t show any OEM#.INF names on your computer, you can use Microsoft Sysinternals Autoruns<\/a> or the SC.exe console tool<\/a> to find and delete the driver.<\/p>\n
According to Microsoft:\u00a0If you want to restore the Memory integrity setting, you can try to resolve a driver incompatibility by seeing if an updated and compatible driver is available through Windows Update or from the driver manufacturer. Microsoft does not recommend that you delete drivers to attempt to restore this setting.<\/em><\/p>\n
However, an updated device driver version may be unavailable for some devices from the hardware vendor or Windows Update. In that case, you can uninstall the driver if it’s insignificant to the system.<\/p>\n
Can I delete the drivers?<\/h4>\n
Warning:<\/strong> Please exercise caution<\/a> when deleting device drivers. Delete them only if you’re 100% sure that the device driver is optional for the computer, or you no longer use the corresponding hardware anymore, or you’re found an updated version of the driver from the hardware vendor’s site.<\/p>\n
If you open the C:\\Windows\\INF\\OEM##.inf indicated on the Windows Security page, you can find the function of that driver.<\/p>\n
For instance, the OEM##.inf had the following information in the headers:<\/p>\n
[OEM32.inf]\r\n; Name : ssudobex.inf\r\n;\u00a0Function : Install SAMSUNG Escape USB Obex Serial Port driver\r\n\r\n[OEM36.inf]\r\n; Name : ssudcdf.inf\r\n; Function : Install SAMSUNG Escape USB CD Free driver\r\n\r\n[OEM40.inf]\r\n; Installation INF for the Intel Corporation graphics adapter.\r\n\r\n[OEM44.inf]\r\n; Name : ssuddmgr.inf\r\n; Function : Install SAMSUNG Escape USB Device Management Serial Port driver\r\n\r\n[OEM56.inf]\r\n; Name : ssudserd.inf\r\n; Function : Install SAMSUNG Escape USB Diagnostic Serial Port driver<\/pre>\n
Four items out of the above six appeared to be unnecessary components. The other entry
igdkmd64.sys<\/code> belongs to Intel Graphics, which is currently in use.<\/p>\nDeleting the drivers<\/h4>\n
After backing all the device drivers, I decided to bite the bullet and delete all six drivers.<\/p>\n
(To know how to backup the device drivers using DISM or PowerShell, check out the article How to Backup and Restore Device Drivers in Windows 11\/10<\/a>.)<\/em><\/p>\n
The command-line syntax to delete a driver from Admin Command Prompt is:<\/p>\n
pnputil \/delete-driver <Published Name> \/uninstall<\/pre>\n
Here are the actual commands I used:<\/p>\n
pnputil \/delete-driver oem44.inf \/uninstall\r\n\r\npnputil \/delete-driver oem32.inf \/uninstall\r\n\r\npnputil \/delete-driver oem56.inf \/uninstall\r\n\r\npnputil \/delete-driver oem36.inf \/uninstall\r\n\r\npnputil \/delete-driver oem40.inf \/uninstall<\/pre>\n
![\"pnputil](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/pnputil-delete-drivers.png\")
<\/p>\nThe first four commands were executed successfully, and their driver packages have been deleted. The 5th one (Intel graphics driver) returned the following error:<\/p>\n
Failed to delete drivers package: One or more devices are presently installed using the specified INF.<\/pre>\n
I reran the pnputil command, but this time used the
\/force<\/code> option.<\/p>\npnputil \/delete-driver oem40.inf \/force<\/pre>\n
That did the trick!<\/p>\n
![\"pnputil](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/pnputil-delete-drivers-force.png\")
<\/p>\nYou can also try the following command-line, which is more comprehensive than the earlier one:<\/p>\n
pnputil \/delete-driver oem40.inf \/uninstall \/force<\/pre>\n
After rebooting, the Core Isolation again showed the incompatibility list (the 6th item
igdkmd64.sys<\/code> – without an OEM#.INF file name<\/strong> showed up again.)<\/p>\n![\"incompatible](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/defender-incompatible-drivers.png\")
<\/p>\n<\/a>Deleted the driver using Autoruns<\/h4>\n
I downloaded Autoruns<\/a> from Microsoft, searched for the exact driver file name (
igdkmd64.sys<\/code>), and deleted the driver\/service from the “Drivers” tab.<\/p>\n![\"autoruns](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/igfx-autoruns-delete.png\")
<\/p>\nAfter another reboot, I could turn on the Memory integrity feature under Core isolation on Windows (Defender) Security page.<\/p>\n
![\"defender](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/core-isolation-success.png\")
<\/p>\n\nEditor’s note:<\/strong><\/a> After the reboot, my Intel Graphics driver didn’t load, but the system was working perfectly fine even without it. Device Manager showed a yellow exclamation (Code 48 error) next to the Intel Graphics driver.
![\"intel](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/devmgr-yellow-exclamation-intel.png\")
<\/p>\nIt stated the following:<\/p>\n
The driver for this device has been blocked from starting because it is known to have problems with Windows. Contact the hardware vendor for a new driver. (Code 48)\r\n\r\nClick 'Check for solutions' to send data about this device to Microsoft and to see if there is a solution available.<\/pre>\n
I got the following pop-up at startup, which I dismissed.<\/p>\n
![\"intel](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/intel-driver-cannot-load.png\")
<\/p>\nA driver cannot load on this device\r\n\r\nDriver: Intel Graphics Kernel Mode Driver\r\nIntel Corporation\r\n\r\nA security setting is preventing this driver from loading. You'll need to adjust your settings to load this driver.<\/pre>\n
Neither Intel nor Dell has the updated drivers for this hardware. The latest version (20.19.15.5063, A08 – Released three years ago) available on Dell’s site is what I had installed and is incompatible with Microsoft Defender’s Core Isolation.<\/p>\n
Anyway, the system (“OptiPlex 9020”) is working fine with Memory Integrity turned On, except that the “Sleep” feature is disabled due to the missing Graphics driver. The “Power” menu will no longer list “Sleep”.<\/div>\nRunningpowercfg.exe \/a<\/code> (which reports the sleep states available on the system) from a Command Prompt window will show this:<\/div>\nThe following sleep states are available on this system:<\/pre>\n
- \n
- \n
- \n
- Hibernate<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
<\/p>\n
- \n
- \n
- \n
- Fast Startup<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
<\/p>\n
The following sleep states are not available on this system:<\/p>\n
- \n
- \n
- \n
- Standby (S1) The system firmware does not support this standby state. An internal system component has disabled this standby state. Graphics<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
<\/p>\n
<\/pre>\n
However, the hibernate option works fine for me.<\/p>\n<\/div>\n
Additional Information<\/h2>\n
An alternate way to delete the drivers<\/h3>\n
You can also delete driver packages using the “Driver Store Explorer” software as an alternative to Pnputil.exe. But it shows the “Original Name” instead of the “Published Name” for the drivers\/INF files.<\/p>\n
So, it would be easier if you ran the following DISM command-line first and noted the INF file name under the “Original File Name” column.<\/p>\n
dism \/online \/get-drivers \/format:table<\/pre>\n
The above command shows the driver information in the following format:<\/p>\n
(Note: The list below is shown as an example. It’s not the complete list of drivers.)<\/em><\/p>\n
Obtaining list of 3rd party drivers from the driver store...\r\n\r\nDriver packages listing:\r\n\r\n\r\n-------------- | ----------------------- | ----- | --------------------- | ------------------------------ | ---------- | ---------------\r\nPublished Name | Original File Name | Inbox | Class Name | Provider Name | Date | Version\r\n-------------- | ----------------------- | ----- | --------------------- | ------------------------------ | ---------- | ---------------\r\noem0.inf | ssudrmnetmp.inf | No | Net | SAMSUNG Electronics Co., Ltd. | 1\/2\/2014 | 2.11.7.0\r\noem1.inf | jswpslwfx.inf | No | NetService | Atheros | 5\/15\/2008 | 1.0.0.50\r\noem10.inf | hpoa1ss.inf | No | Image | Hewlett-Packard | 6\/21\/2006 | 6.2.8306.0\r\noem11.inf | iastorac.inf | No | SCSIAdapter | Intel Corporation | 11\/17\/2015 | 14.8.1.1043\r\noem12.inf | ntprint.inf | No | Printer | Microsoft | 6\/21\/2006 | 10.0.19041.1806\r\noem13.inf | netwtw02.inf | No | net | Intel | 4\/29\/2019 | 18.33.17.1\r\noem14.inf | dbutildrv2.inf | No | DellUtils | Dell Technologies | 5\/6\/2021 | 2.7.0.0\r\noem15.inf | netwtw04.inf | No | net | Intel | 4\/29\/2019 | 19.51.21.1\r\noem16.inf | ss_conn_usb_driver.inf | No | USB | SAMSUNG Electronics Co., Ltd. | 1\/2\/2014 | 2.11.7.0\r\noem18.inf | intcdaud.inf | No | MEDIA | Intel(R) Corporation | 4\/26\/2018 | 6.16.0.3208\r\noem19.inf | ssudmarv.inf | No | USB | SAMSUNG Electronics Co., Ltd. | 1\/2\/2014 | 2.11.7.0\r\noem2.inf | oemvista.inf | No | Net | ExpressVPN | 4\/30\/2019 | 9.24.2.45\r\n<\/pre>\n
Once you note the “Original File Name”, switch to Driver Store Explorer and delete the corresponding items.<\/p>\n
![\"driver](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/drivers-store-explorer-dashboard.png\")
<\/p>\n
\nwdcsam64_prewin8.sys<\/h3>\n
If the Western Digital external hard disk driver
wdcsam64_prewin8.sys<\/code> is shown as incompatible, note down its OEM#.inf number as explained earlier, and delete it using the following command:<\/p>\n![\"pnputil](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/wdcsam64_prewin8_sys.png\")
<\/p>\nIn the above case, run this command:<\/p>\n
pnputil \/delete-driver oem23.inf \/uninstall \/force<\/pre>\n
The above command deletes the driver from the driver store (location mentioned below) and the registry.<\/p>\n
C:\\Windows\\System32\\DriverStore\\FileRepository\\wdcsam.inf_amd64_7ce69fc8798d6116<\/pre>\n
\n<\/a>wdcsam64.sys<\/h4>\n
On some systems, the driver wdcsam64.sys shows up without an OEM#inf number.<\/p>\n
![\"western](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/wdcsam64.png\")
<\/p>\nCompany: Western Digital Technologies\r\nDescription: WD SCSI Architecture Model (SAM) driver\r\nProduct: WD External Storage\r\nMachine Type: 64-bit\r\nBinary Version: 1.0.7.2<\/pre>\n
You should be able to find and delete the above item (
wdcsam64.sys<\/code>) from the Drivers tab of Autoruns<\/a>, like we deleted the Intel Graphics driverigdkmd64.sys<\/code>.<\/p>\n![\"wdcsam.sys](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/wdcsam-autoruns.png\")
<\/p>\nThat deletes the
WDC_SAM<\/strong><\/code> driver\/service. Next, delete the corresponding driver file “C:\\Windows\\System32\\Drivers\\wdcsam64.sys<\/code>” manually. If the file is in use, please reboot and then delete the file.<\/p>\n\nDelete WD driver via Device Manager<\/h4>\n
Western Digital suggests<\/a> that you delete the incompatible driver via Device Manager.<\/p>\n
- \n
- Uninstall all WD software.<\/li>\n
- Uninstall the older WD driver.<\/li>\n
- Access Device Manager.<\/li>\n
- From the the View menu, click “Show Hidden Devices”.<\/li>\n
- Look for WD Drive Management devices.<\/li>\n
- Select WD SES Device, right-click, and click “Uninstall device”.
\n![\"](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/wdc-delete-driver-devmgr-1.png\")
<\/li>\n - Check the box for “Delete the driver software for this device.”
\n![\"](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/wdc-delete-driver-devmgr-2.png\")
<\/li>\n - Click Uninstall.<\/li>\n
- Reboot the computer.<\/li>\n
- Enable memory integrity.<\/li>\n
- Download and install the latest release of WD Software if available.<\/li>\n<\/ol>\n
Here is a related WD support forum thread you may want to check out.<\/p>\n
- \n
- Unable to Enable Core Isolation Memory Integrity due to Western Digital Driver<\/a><\/li>\n<\/ul>\n<\/div>\n
\n<\/a>You can use the SC.exe command as well<\/h4>\n
The
SC.exe<\/code> command-line can also be used to delete the driver\/service<\/a> if you want to automate the task on other systems; if you don’t want to download Autoruns on every computer.<\/p>\nFirst, find the service’s short name using WMIC.exe console tool.<\/p>\n
Example 1: igdkmd64.sys<\/strong><\/p>\n
Assuming you want to find the service name of the driver “
igdkmd64.sys<\/code>“, run this command:<\/p>\nwmic sysdriver where \"PathName like '%igdkmd64%'\" get Name, PathName, State<\/pre>\n
The output looks like this:<\/p>\n
Name PathName State\r\nigfx C:\\WINDOWS\\system32\\DRIVERS\\igdkmd64.sys Stopped\r\n<\/pre>\n
![\"wmic](\"https:\/\/www.winhelponline.com\/blog\/wp-content\/uploads\/2022\/09\/wmic-driver-info.png\")
<\/p>\nOptionally, if you want to get additional info about the driver, run the following:<\/p>\n
wmic sysdriver where \"PathName like '%igdkmd64%'\" get Name, PathName, State, Description, Caption\r\nor\r\nwmic sysdriver where \"PathName like '%igdkmd64%'\" get \/format:list<\/pre>\n
Now that you know the service name (“
igfx<\/code>“), run this command to delete the service:<\/p>\nsc.exe delete igfx<\/pre>\n
That’s it. The Intel Graphics service is now deleted.<\/p>\n
Example 2: wdcsam64.sys<\/strong><\/p>\n
Likewise, for wdcsam64.sys, find its service’s short name (which is “
WDC_SAM<\/code>“) using this command:<\/p>\nwmic sysdriver where \"PathName like '%wdcsam64%'\" get Name, PathName, State<\/pre>\n
Then run:<\/p>\n
sc.exe delete WDC_SAM<\/pre>\n
Output:<\/strong><\/p>\n
C:\\windows\\system32>sc.exe delete WDC_SAM\r\n[SC] DeleteService SUCCESS<\/pre>\n
The Western Digital driver is now deleted.<\/p>\n
Example 3: xhunter1.sys<\/strong><\/p>\n
xhunter1.sys is a component of XIGNCODE3 anti-cheat program, which is installed with various game titles. If uninstalling the component or the respective game software doesn’t help you enable Core Isolation, then you may delete its driver (whose service name “
xhunter1<\/code>“) using the following command:<\/p>\nsc.exe delete xhunter1<\/pre>\n
Then, manually delete
C:\\Windows\\System32\\Drivers\\xhunter1.sys<\/code> after a reboot.<\/p>\nExample 4: wacomhidfilter.sys<\/strong><\/p>\n
Wacomhidfilter.sys is the Wacom tablet driver. To uninstall it, run:<\/p>\n
sc.exe delete wacomhidfilter<\/pre>\n
To see if it has registered any filter drivers, run:<\/p>\n
reg query hklm\\system \/f wacomhidfilter \/s<\/pre>\n
Check the output. Open Regedit.exe and go to that location and delete the “wacomhidfilter” entry in LowerFilters or UpperFilters. Please create a Restore Point first before editing the registry.<\/p>\n
Example 5: PxHlpa64.sys<\/strong><\/p>\n
PxHlpa64.sys is a module supplied with DVD-burning programs such as Roxio\/Sonic, which Corel Corporation now owns. Other programs, such as Adobe Premiere Elements, seem to use this module for DVD-burning capability.<\/p>\n
RELATED:<\/strong> What is PxHlpa64.sys and How to Uninstall it<\/a><\/div>\nTo delete the service, run this command:<\/p>\n
sc.exe delete PxHlpa64<\/pre>\n
And then run these two commands to delete the “PxHlpa64” filter driver<\/a> reference in the registry and rename the driver file:<\/p>\n
\r\nreg.exe delete \"HKLM\\SYSTEM\\CurrentControlSet\\Control\\Class\\{4d36e965-e325-11ce-bfc1-08002be10318}\" \/v \"LowerFilters\" \/f\r\n\r\nren C:\\WINDOWS\\system32\\drivers\\PxHlpa64.sys PxHlpa64.sys.old<\/pre>\n
- Unable to Enable Core Isolation Memory Integrity due to Western Digital Driver<\/a><\/li>\n<\/ul>\n<\/div>\n
- Standby (S1) The system firmware does not support this standby state. An internal system component has disabled this standby state. Graphics<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
- \n
- Fast Startup<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
- \n
- Hibernate<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
- \n