Categories: Windows 11 & Windows 10Windows Server

SOLVED: Core Isolation Memory Integrity Incompatible Drivers WDCSAM64_PREWIN8.SYS

If you are trying to tighten up your security by adding Virtualization-Based Security (aka VBS) to your Windows 11 you might find this error:

Core Isolation  Memory Integrity
Incompatible Drivers WDCSAM64_PREWIN8.SYS

Driver date: 11/29/2017
Driver version: 1.2.0.0

Published name: oem26.inf

This is an old driver that ships with both Windows 10 and Windows 11 and very few people need it.  In fact we have never run into a situation of any machine using WDCSAM64_PREWIN8.SYS .

Fortunately, it is very easy to remove:

  1. RIGHT click on the START button and select WINDOWS TERMINAL (ADMIN)
    • If you are on Windows 10, select POWERSHELL (ADMIN)
  2. You can then list all of the drivers on your computer using pnputil /enum-drivers and find the one with WDCSAM64_PREWIN8.SYS or you can just look at the error message.  In my case the driver that needs to go is OEM26.INF
  3. Uninstall the driver using pnputil /delete-driver oem<XX>.inf

You do NOT need a reboot so you can immediately retry to enable CORE ISOLATION and you should see a prompt to reboot once Core Isolation > Memory Integrity is turned ON.

View Comments

  • Thank you Ian. Your instructions were very good, and I was able to remove the old, no longer needed, driver.

  • Thank you very much. I had a different incompatible driver (AsIO64.sys, oem45.inf) but the same problem. I tried so many things without success before I tried your technique. Your solution worked perfectly.

  • I deleted every driver that was unnecessary and listed there. After deleting & scanning there are no incompatible drivers, but still I can't turn on Memory Integrity.

    • in response to Nihaal and others. I have found the problem related to malware programs,including Malwarebytes, Unhackme and kaspersky. I also found Logitech Virtual drivers for F710 gamepad to be incompatible. My solution is to leave core integrity off under the assumtion that the fore mentioned programs have a similar funtion.

    • Hi Robert, we responded to your previous comment with the same suggestions we would make here:

      Hi Robert;

      Three things to try:
      1: reboot
      2: reboot in safe mode
      3: uninstall any programs / addins you are not using - many people leave software intalled for old scanners, printers, cameras... and that really expands your attack surface

      Let us know how that goes and thanks for checking in with us.

    • I get an error message that says the driver is in use by one or more devices and will not delete.

      • Hi Robert;

        Three things to try:
        1: reboot
        2: reboot in safe mode
        3: uninstall any programs / addins you are not using - many people leave software intalled for old scanners, printers, cameras... and that really expands your attack surface

        Let us know how that goes and thanks for checking in with us.

        • I have tried to elminate the driver with pnputil /delete-driver oem97.inf in safe mode. I can't delete
          I searched the oem97.inf file in C:\windows\INF and find oem97.inf and oem97.pnf. I renamed the two files to oem97.inf.bak and oem97.pnf.bak. I restarted in normal mode but I cant delete with pnputil /delete-driver oem97.inf, I continue obtaining the error message.
          "Error al eliminar el paquete de controladores: Actualmente están instalados uno o más dispositivos que utilizan el archivo INF especificado."

1 … 7 8 9
Leave a Comment
Published by
Ian Matthews
3 years ago

This website uses cookies.