search

memstechtips / UnattendedWinstall

Personalized Unattended Answer Files that helps automatically debloat and customize Windows 10 & 11 during the installation process.
MIT License
1.12k stars 167 forks source link

feat: add an optional to disable `Core Isolation` & `Memory Integrity` #3

Closed devCKVargas closed 1 week ago

devCKVargas commented 2 weeks ago

This creates enable/disable.reg files on desktop, so, the user has the option to disable or re-enable both Core Isolation & Memory Integrity read changelog for explanation.

I also did a minor update for the changelog of the last changes to make it a little bit more readable.

memstechtips commented 2 weeks ago

Thanks for the idea, could you give me a quick explanation of some of the benefits of having it enabled/disabled? I understand it could provide some protection against viruses etc. but on the other hand, does it have some performance benefits?

CloudAlb commented 1 week ago

Disabling Memory Integrity is officially mentioned by Microsoft as a form of optimizing performance in some scenarios. The same goes for the Virtual Machine Platform feature:

As part of continued testing and feedback from users, Microsoft has seen that in some scenarios and some configurations of gaming devices there may be a performance impact with memory integrity and VMP on.

As for your concern for protection against malicious software:

VMP provides core virtual machine services for Windows. Memory integrity helps prevent attackers from injecting their own malicious code and helps ensure that all drivers loaded onto the OS are signed and trustworthy.

I'm not sure what is the general consent about the Memory Integrity feature, but I still considered mentioning that Microsoft page anyways. It's most likely that it has different effects on each system, but my guess would be that it should have minor impact in performance in medium/high-end machines (at least from what I can tell from my experience).

memstechtips commented 1 week ago

Thanks for your idea about this, but I'm not going to add it at this time, maybe in the future. Really appreciate your contributions though!