The Local Security Authority protection is off - Windows 11 Home

Anonymous
2023-03-17T06:10:20+00:00

A yellow triangle appeared on the Windows Security iron yesterday. It says that Local Security Authority protection is off. Your device may be vulnerable.

I can press Go to settings or Dismiss but when I click go to settings, a notification saying "the page You want to access doesn't contain required functions and is unavailable". 

There is also no option to turn the protection on in the Device Security panel (there is only "dismiss" option).

When I was looking at it yesterday, there was also a notification that "The tpm module is unavailable" but today it doesn't show. I checked the device manager and uefi and both say that the tpm is enabled.

I've found an advice to turn on SMV in UEFI (in the CPU settings) to solve the problem but I don't want to change anything in BIOS without consultation as I'm no expert. I've also found a reply from a truste source that this whole problem is a Microsoft bug and it's better to just wait till they fix it.

What should I do?

Screenshots are in Polish, I hope they can be useful somehow. The first one shows the notification about a page being not available and the second shows the Device security panel (the notification from the first screenshot displays when I close the device security page or when I click on "go to settings" below the information that the protection is turned off). There is also an information (second screenshot) that "standard device security is not supported".

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2023-07-06T07:36:56+00:00

Microsoft have just posted that they have resolved the "Local Security Authority protection is off" issue in an update. Has anyone tried to apply it from Windows Update?

Resolution: This issue was resolved in an update for Windows Security platform antimalware platform KB5007651 (Version 1.0.2306.10002). If you would like to install the update before it is installed automatically, you will need to check for updates.

Was this answer helpful?

10+ people found this answer helpful.
0 comments

174 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-05-26T17:37:22+00:00

    Then don't. If one is patient the issue will be resolved by Microsoft. My laptop had the issue and I just waited a few days and it was fixed.

    People are just too impatient now days, expect instant gratification. It's a computer, not emergency heart surgery.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  2. Anonymous
    2023-05-24T04:43:24+00:00

    I couldn't figure out a non-hacky way to fix this even after 11 pages of this thread and internet searches, so I just dismissed the warning in Windows Security, and the shield is now green in the notification bar.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  3. Anonymous
    2023-05-23T20:49:33+00:00

    Hello Dear,

    I also faced that issue and by failing many attempts i came to know about the solution.

    1.Open search bar

    2.Type powershell

    3.Run as adminstrator

    4.Copy and paste the code :-

    reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPL /t REG_DWORD /d 2 /f;reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPLBoot /t REG_DWORD /d 2 /f;

    5.Press Enter

    6.Restart the pc.

    I think it will work and if there is any problem you can check the following article:- https://www.windowslatest.com/2023/03/18/windows-11-incorrectly-warns-local-security-authority-protection-is-off/

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  4. Anonymous
    2023-05-17T10:46:20+00:00

    Hello,

    If I understood correctly then, they do not recommend doing this procedure:

    1. Open Windows Registry Editor.
    2. Navigate to the following location: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
    3. Make sure you have RunAsPPL and RunAsPPLBoot. entries. If you don’t have RunAsPPLBoot listed, create DWORD entries for RunAsPPL and RunAsPPLBoot.
    4. Value for both entries should be 2.
    5. Reboot and warnings should stop.

    Now we are still in the most total vagueness: is it better to do nothing and ignore the warnings? Is it better to create these RunAsPPL and RunAsPPLBoot registry entries, or does this manipulation only turn off the Windows Security warning without further protecting our PCs? I haven't seen any article certifying something about this problem one way or the other, a little annoying

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments