Update SonicWall NetExtender to a version newer than 10.2.324; if Memory Integrity still lists NxDrv.sys, remove the confirmed stale SonicWall driver packages from the Windows Driver Store.
1. Update or uninstall NetExtender
Older NetExtender releases prior to 10.2.324 can install the incompatible NxDrv.sys driver.^1^
- If you still use the SonicWall VPN: obtain and install a NetExtender version newer than 10.2.324 from your organization’s SonicWall administrator or SonicWall download portal.
- If you no longer use it: open Settings → Apps → Installed apps, find SonicWall NetExtender, select … → Uninstall, and restart Windows.
Microsoft recommends obtaining a compatible driver from the manufacturer or removing the application/device that requires the incompatible driver.^2^
After restarting, try Windows Security → Device security → Core isolation details → Memory integrity.
2. Remove any stale SonicWall driver package
Do this only if Memory Integrity continues to identify NxDrv.sys or another SonicWall driver.
Removing the wrong package can stop associated hardware or software from working. Create a restore point first, and delete only entries whose provider/files clearly identify SonicWall or NxDrv.sys.^3^
- Right-click Start, select Terminal (Admin), and approve the administrator prompt.
- List third-party driver packages and their files:
pnputil /enum-drivers /files
- Locate each block containing:
-
NxDrv.sys, or the exact filename shown by Memory Integrity; and
- a SonicWall provider or package description.
- Record its Published Name, such as
oem73.inf. Do not use that example unless it is the value displayed on your PC.
- Remove the confirmed package:
pnputil /delete-driver oem73.inf /uninstall
Replace oem73.inf with the actual Published Name. The /uninstall option removes the package from devices using it before deleting it from the Driver Store.^4^
If normal removal reports that the confirmed SonicWall package is still in use, close NetExtender and retry. SonicWall also documents /force for stale NetExtender packages:
pnputil /delete-driver oem73.inf /uninstall /force
Use /force only after confirming the exact package because it can remove a driver that is currently in use.^1^
- Restart Windows.
- Return to Windows Security → Device security → Core isolation details, turn Memory integrity on, and restart again.
If the two incompatible entries have different published names, repeat the identification and removal for each confirmed SonicWall package. If either driver is not NxDrv.sys, use the exact filename shown by Windows when matching it in pnputil; do not assume every SonicWall entry belongs to NetExtender.
If a current NetExtender release reinstalls the same incompatible driver, keep Memory Integrity off only as a temporary compatibility fallback and contact SonicWall or the organization managing the VPN for a compatible build. Turning Memory Integrity off reduces this Windows security protection.^5^
References
- Unable to enable Memory Integrity on Windows due to ... - SonicWall
- Device Security in the Windows Security App | Microsoft Support
- Using Device Manager to uninstall devices and driver packages
- PnPUtil Command Syntax
- A driver can't load on this device | Microsoft Support