This default Windows setting can restrict gaming performance by up to 10%

Daniel Sims

Posts: 1,370   +43
Staff
PSA: Upon Windows 11's initial launch, some users complained that a default security feature significantly impacted gaming performance. If you switched it off in 2021 and forgot about it, you might want to check whether an update since then flipped it back on. Testing shows that even the latest hardware can suffer noticeable, though not ruinous, performance penalties.

Tom's Hardware recently discovered that, at some point since the initial controversy surrounding Windows 11's Virtualization-based Security (VBS), updates have reenabled it for seemingly all Windows 11 and Windows 10 systems. Leaving it on can lower some games' framerates by almost 10 percent, though often less than one percent depending on the title.

VBS is an optional extra security layer that uses virtualization to isolate a corner of a PC's memory, protecting it from malicious code and drivers. It also employs features like Hypervisor-Enforced Code Integrity (HVCI), which Digital Trends thinks is the real culprit behind the performance loss.

The usefulness of VBS and HVCI has been under debate and may depend on each user's situation. Home desktops that never go anywhere and have only one user might not need them as much as laptops or PCs sitting in offices. Ultimately, each user should decide individually whether the extra protection is worth the performance hit.

Click for full chart

When the controversy first arose in 2021, tests showed that VBS created an almost 30 percent performance hit in the worst-case scenarios, particularly on older CPUs like 1st-generation Ryzens or 10th-generation Intels. Tom's Hardware tested how the security feature affects the hardware released in the last couple of years, finding that even the mighty GeForce RTX 4090 doesn't come away unscathed.

Testing 15 PC games like Far Cry 6, Spider-Man: Miles Morales, and Forza Horizon 5, showed that most suffered a roughly five percent average framerate hit. Minimum framerates are slightly worse. The impact is more acute at lower resolutions like 1080p and generally falls to less than three percent at 4K, suggesting the culprit is a CPU bottleneck. Microsoft Flight Simulator is the hardest hit, with an 11 percent performance decrease at 1080p and an eight percent drop at 4K.

To check whether VBS is running, open the System Information app and look for a row that says "Virtualization-based security" under System Summary. It should say either "Not Enabled" or "Running."

Users who feel safe enough to disable the feature should head to Settings > Update & Security > Windows Security, and select "Open Windows Security." From there, go to Device Security > Core Isolation Details where you'll see a toggle for Memory Integrity. Flip the toggle on or off and then restart the PC to toggle VBS on or off. Alternatively, searching for Core Isolation in the taskbar should bring users directly to the toggle.

Image source: Tom's Hardware

Permalink to story.

 
I don't think it's worth disabling security measures for a 4% performance gain, unless you're on the very edge of fluid gameplay.
In gaming, any performance gain is a plus. Gamers don't care about anything but performance. Anyone using a computer n don't know the risks, is a you issue. Know the devices you use and use them appropriately.
 
I don't think it's worth disabling security measures for a 4% performance gain, unless you're on the very edge of fluid gameplay.
Those security measures are in place to prevent breach only in case where hacker have already access to the pc, e.g. server instance or containers. It address certain cpu based attacks and for normal use, and especially for gaming, are not really needed and mostly are academical.
 
If I had any PCs that were 100% dedicated to gaming / entertainment, I'd consider turning this off on those devices.

But since in practice any of my machines might end up having work content or family data on them, even if only temporarily or in a browser cache, I keep it on. I'm not necessarily even convinced it's an important defense against the attacks most likely to get something off my machine. But either way I don't want to ever have to explain to my boss, client, or family member that data was lost because I prioritized getting 4% more performance in a video game.
 
I thought modern processors, like Zen 3 and Zen 4, have mitigations in silicon that make the performance hit not nearly as big.
 
I always disable virtualization in the bios. If you have done that, then this will never affect you.

Yes perhaps I might do this method if I wanted to haphazardly remove all virtualization features like a simpleton - removing any benefit and extended functionality for the sake of 1 minor element that can be disabled much simpler in more than 1 way. Reg, memory isolation, cmd etc.
 
What if we have 12th/13th gen intels eith 12-26 cores? Surely there's no performance hits w/ all those extra cores?
 
The testing by Tom’s Hardware was done on a Core i9-13900K (8P, 16E).
Interesting. I was under the impression that that wasn't supposed to be a problem since new Intel and AMD chips support MBEC (Mode Based Execution Control).
 
Back