How to Turn On Kernel-Mode Stack Protection in Windows 11?

I’m using Windows 11 with an Intel i7-12700 CPU. Features like virtualization, Secure Boot, TPM, and Memory Integrity are all turned on. Everything is up to date.

But Kernel-Mode Hardware-Enforced Stack Protection is still off.
How do I turn it on? Could a driver be blocking it?

Thanks for any help.

This topic was modified 1 week, 2 days ago by Beatrice.
This topic was modified 1 week, 2 days ago by Beatrice.

Tagged: Windows 11

Windows data recovery

All Replies

Viewing 2 replies - 1 through 2 (of 2 total)

johnjacobb40

Participant

May 27, 2025 at 10:14 am

Since you’ve enabled virtualization, Secure Boot, TPM, and Memory Integrity, try these:

1. Make sure your CPU supports CET (most 12th Gen Intel do).

2. Check BIOS/UEFI and enable CET or Shadow Stack if available.

3. Update all drivers, especially chipset and GPU.

4. If using Windows Pro/Enterprise, check Group Policy settings for Device Guard.

5. Verify Memory Integrity is on in Windows Security.

6. Run sfc /scannow and DISM /RestoreHealth to fix system files.

If it’s still off, check Event Viewer for errors—some drivers or software may block it.

Mira Lennox Lennox

Participant

May 27, 2025 at 10:18 am

@johnjacobb40, you are right. You’ve done most of the necessary steps already. Next, confirm that your CPU supports CET and enable CET or Shadow Stack in your BIOS. Make sure all your drivers are up to date, and if you’re using Windows Pro or Enterprise, check the Group Policy settings. Also, verify that Memory Integrity is enabled in Windows Security. Running system file checks using sfc /scannow and DISM /RestoreHealth can help fix any issues. If the feature still doesn’t turn on, check the Event Viewer for errors, as some drivers might be blocking it.

Viewing 2 replies - 1 through 2 (of 2 total)