How to Turn On Kernel-Mode Stack Protection in Windows 11?
I’m using Windows 11 with an Intel i7-12700 CPU. Features like virtualization, Secure Boot, TPM, and Memory Integrity are all turned on. Everything is up to date.
But Kernel-Mode Hardware-Enforced Stack Protection is still off.
How do I turn it on? Could a driver be blocking it?
Thanks for any help.
All Replies
Viewing 2 replies - 1 through 2 (of 2 total)
Since you’ve enabled virtualization, Secure Boot, TPM, and Memory Integrity, try these:
1. Make sure your CPU supports CET (most 12th Gen Intel do).
2. Check BIOS/UEFI and enable CET or Shadow Stack if available.
3. Update all drivers, especially chipset and GPU.
4. If using Windows Pro/Enterprise, check Group Policy settings for Device Guard.
5. Verify Memory Integrity is on in Windows Security.
6. Run sfc /scannow and DISM /RestoreHealth to fix system files.
If it’s still off, check Event Viewer for errors—some drivers or software may block it.
Viewing 2 replies - 1 through 2 (of 2 total)
- You must be logged in to reply to this topic.
Recent Topics
-
How to Fix Windows 11 PC Not Waking Up from Sleep Mode?
by 2 days, 11 hours ago
-
How to Fix Valorant VAN 1067 Error on Windows 11?
by 2 days, 11 hours ago
-
How to Fix the “Secure Boot Can Be Enabled” Issue?
by 2 days, 11 hours ago
-
How to Resolve the 0xc00007b Error in Windows?
by 2 days, 11 hours ago
-
How to Fix “Windows Can’t Communicate With the Device or Resource” Error?
by 2 days, 11 hours ago
@johnjacobb40, you are right. You’ve done most of the necessary steps already. Next, confirm that your CPU supports CET and enable CET or Shadow Stack in your BIOS. Make sure all your drivers are up to date, and if you’re using Windows Pro or Enterprise, check the Group Policy settings. Also, verify that Memory Integrity is enabled in Windows Security. Running system file checks using sfc /scannow and DISM /RestoreHealth can help fix any issues. If the feature still doesn’t turn on, check the Event Viewer for errors, as some drivers might be blocking it.