How to create identity map for PCIe Passthrough safely

Hey fellows,

As we know, currently more and more cheating systems are based on DMA to bypass anti-cheat system, especially in FPS games.
So as an anti-cheat developer, we can require players to turn on the vt-d or iommu switch on BlOS, and create indentity map foreach PCle Passthrough listed by Windows, in order to detect the abmornal devices and thenblock them.
But this solution may lead to BSOD for some players. l guess there is some compatible issue with Windows mechanism.
My question is, is there a safe way provided by Windows to create the indentity map for PClePassthrough, or is OS able to create the map for PCIe Passthrough instead to avoid the BSOD?

Much appreciated for your reply.