Categories: Windows 11 & Windows 10Windows Server

SOLVED: Core Isolation Memory Integrity Incompatible Drivers WDCSAM64_PREWIN8.SYS

If you are trying to tighten up your security by adding Virtualization-Based Security (aka VBS) to your Windows 11 you might find this error:

Core Isolation  Memory Integrity
Incompatible Drivers WDCSAM64_PREWIN8.SYS

Driver date: 11/29/2017
Driver version: 1.2.0.0

Published name: oem26.inf

This is an old driver that ships with both Windows 10 and Windows 11 and very few people need it.  In fact we have never run into a situation of any machine using WDCSAM64_PREWIN8.SYS .

Fortunately, it is very easy to remove:

  1. RIGHT click on the START button and select WINDOWS TERMINAL (ADMIN)
    • If you are on Windows 10, select POWERSHELL (ADMIN)
  2. You can then list all of the drivers on your computer using pnputil /enum-drivers and find the one with WDCSAM64_PREWIN8.SYS or you can just look at the error message.  In my case the driver that needs to go is OEM26.INF
  3. Uninstall the driver using pnputil /delete-driver oem<XX>.inf

You do NOT need a reboot so you can immediately retry to enable CORE ISOLATION and you should see a prompt to reboot once Core Isolation > Memory Integrity is turned ON.

View Comments

    • I get an error message that says the driver is in use by one or more devices and will not delete.

      • Hi Robert;

        Three things to try:
        1: reboot
        2: reboot in safe mode
        3: uninstall any programs / addins you are not using - many people leave software intalled for old scanners, printers, cameras... and that really expands your attack surface

        Let us know how that goes and thanks for checking in with us.

        • I have tried to elminate the driver with pnputil /delete-driver oem97.inf in safe mode. I can't delete
          I searched the oem97.inf file in C:\windows\INF and find oem97.inf and oem97.pnf. I renamed the two files to oem97.inf.bak and oem97.pnf.bak. I restarted in normal mode but I cant delete with pnputil /delete-driver oem97.inf, I continue obtaining the error message.
          "Error al eliminar el paquete de controladores: Actualmente están instalados uno o más dispositivos que utilizan el archivo INF especificado."

1 … 7 8 9
Leave a Comment
Published by
Ian Matthews
2 years ago

This website uses cookies.