Event details

Get answers to your questions about adopting Windows 11 and managing the Windows devices used by remote, onsite, and hybrid workers across your organization. Get tips on keeping devices up to date ef...
Char_Cheesman
Updated Jan 18, 2024
Office Hours
HeyHey16K's avatar
HeyHey16K
Iron Contributor
Jan 18, 2024
In Windows Security > Device Security > Core Isolation on Windows 11 (Memory Integrity and Kernel-Mode Hardware-enforced Stack protection) - if the computer has been in-place upgraded from W10 to 11 often this will not enable due to problem drivers. Is there a central way to manage/rectify these problem drivers please?
  • David_Guyer's avatar
    David_Guyer
    Icon for Microsoft rankMicrosoft
    Jan 18, 2024
    Hi Michelle, It will depend on whether those drivers are available on Windows Update. If they are, you can use the Drivers policy to approve those drivers to update on the device. If they are not, there isn't a central way to do this. The alternative option is to download the drivers and deploy them as Win32 applications in the Apps blade in Intune. Not great, which is why we built the Drivers policy, though Drivers policy can only deploy drivers available on Windows Update. HTH, -David
    • HeyHey16K's avatar
      HeyHey16K
      Iron Contributor
      Jan 18, 2024
      Thank you David :). Is there a central way to identify which computers MI/KMSESP aren't enabled on due to driver issues and which drivers are an issue on each device please? On ours so far, it's been different drivers on each device, so we unfortunately cannot mass deploy one driver to fix all 😞