This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
A yellow triangle appeared on the Windows Security iron yesterday. It says that Local Security Authority protection is off. Your device may be vulnerable.
I can press Go to settings or Dismiss but when I click go to settings, a notification saying "the page You want to access doesn't contain required functions and is unavailable".
There is also no option to turn the protection on in the Device Security panel (there is only "dismiss" option).
When I was looking at it yesterday, there was also a notification that "The tpm module is unavailable" but today it doesn't show. I checked the device manager and uefi and both say that the tpm is enabled.
I've found an advice to turn on SMV in UEFI (in the CPU settings) to solve the problem but I don't want to change anything in BIOS without consultation as I'm no expert. I've also found a reply from a truste source that this whole problem is a Microsoft bug and it's better to just wait till they fix it.
What should I do?
Screenshots are in Polish, I hope they can be useful somehow. The first one shows the notification about a page being not available and the second shows the Device security panel (the notification from the first screenshot displays when I close the device security page or when I click on "go to settings" below the information that the protection is turned off). There is also an information (second screenshot) that "standard device security is not supported".
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
Microsoft have just posted that they have resolved the "Local Security Authority protection is off" issue in an update. Has anyone tried to apply it from Windows Update?
Resolution: This issue was resolved in an update for Windows Security platform antimalware platform KB5007651 (Version 1.0.2306.10002). If you would like to install the update before it is installed automatically, you will need to check for updates.
After half a century Windows still expects you to tinker with its registry and that still doesn't work.
Just get a Mac!
Looks like one of the latest updates fixed it and made some changes. At least my device Security page looks different now.
Lucky for you!
I discarded the warning 4 weeks ago, since it was on and I had rebooted the PC once, following the official Microsoft answer regarding this issue (sorry, I don't find the Microsoft link where I got it). BUT, in my case, TODAY, some of the latest updates have popped up (again!!) the flag warning that LSA is off..., thought it seems it's on, because LSASS.exe is running (Task Administration screen shot, bellow):
Bellow, are the Windows Security screen shots (in Spanish) where warnings are appearing again --> Device Security/Core Isolation/...
Surprisingly, LSA activation tick has disappeared :-?
For anyone with this issue, this worked for me on Win 11
Right click on start menu and select Terminal (Admin)
Copy & Paste the code below and hit enter.
Restart computer.
CODE:
reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPL /t REG_DWORD /d 2 /f;reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPLBoot /t REG_DWORD /d 2 /f;
The 3rd May update to KB5007651 (Version 1.0.2303.28002) has caused this issue for me for the first time.
I upgraded to Windows 11 on 28th April and all was fine until today when KB5007651 1.0.2303.28002 was installed. Now I have the Local Security Authority protection is off warning.
