Skip to Content
Setup6. Disable ProtectionsKernel DMA Protection

Disable Kernel DMA Protection

Kernel DMA Protection can usually be disabled from Windows 11 security settings. In some PCs, the option is controlled by the BIOS instead, usually through Kernel DMA Protection, VT-d, or virtualization settings.

Check Current Status

  1. Press Win + R, type msinfo32, and press Enter.
  2. Look for Kernel DMA Protection.
  3. If the value is On, follow one of the methods below.

Method 1: Disable From Windows 11

  1. Press Win + I to open Windows Settings.
  2. Go to Privacy & security.
  3. Open Windows Security.
  4. Click Device security.
  5. Open Core isolation details.
  6. Find Memory access protection and turn it Off.
  7. Confirm the change with your administrator password or PIN if Windows asks.
  8. Restart your PC.

Method 2: Disable From BIOS

Use this method if the Windows option is missing, locked, or Kernel DMA Protection remains enabled after restarting.

  1. Restart your PC and enter the BIOS.
  2. Navigate through the sections below depending on your motherboard. The exact location varies by manufacturer.
  3. Disable the relevant option and save the changes.

Look for any of the following options — they all control the same underlying feature:

Option nameTypically found in
Kernel DMA ProtectionSecurity
VT-dAdvanced → CPU Configuration
Intel Virtualization Technology for I/OAdvanced → CPU Configuration
IOMMUAdvanced (AMD boards)
AMD IOMMUAdvanced → AMD CBS
Thunderbolt Security LevelAdvanced → Thunderbolt
DMA ProtectionSecurity

Disable whichever one is present on your system and save the BIOS changes.

If you cannot find any of these options, search for your motherboard or laptop model followed by disable VT-d or disable IOMMU.

Verify After Restart

Press Win + R, type msinfo32, and confirm that Kernel DMA Protection is disabled.

Last updated on