The Local Security Authority protection is off - Windows 11 Home

Anonymous
2023-03-17T06:10:20+00:00

A yellow triangle appeared on the Windows Security iron yesterday. It says that Local Security Authority protection is off. Your device may be vulnerable.

I can press Go to settings or Dismiss but when I click go to settings, a notification saying "the page You want to access doesn't contain required functions and is unavailable". 

There is also no option to turn the protection on in the Device Security panel (there is only "dismiss" option).

When I was looking at it yesterday, there was also a notification that "The tpm module is unavailable" but today it doesn't show. I checked the device manager and uefi and both say that the tpm is enabled.

I've found an advice to turn on SMV in UEFI (in the CPU settings) to solve the problem but I don't want to change anything in BIOS without consultation as I'm no expert. I've also found a reply from a truste source that this whole problem is a Microsoft bug and it's better to just wait till they fix it.

What should I do?

Screenshots are in Polish, I hope they can be useful somehow. The first one shows the notification about a page being not available and the second shows the Device security panel (the notification from the first screenshot displays when I close the device security page or when I click on "go to settings" below the information that the protection is turned off). There is also an information (second screenshot) that "standard device security is not supported".

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2023-07-06T07:36:56+00:00

Microsoft have just posted that they have resolved the "Local Security Authority protection is off" issue in an update. Has anyone tried to apply it from Windows Update?

Resolution: This issue was resolved in an update for Windows Security platform antimalware platform KB5007651 (Version 1.0.2306.10002). If you would like to install the update before it is installed automatically, you will need to check for updates.

Was this answer helpful?

10+ people found this answer helpful.
0 comments

174 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-05-17T08:21:23+00:00

    Microsoft still says that this has been fixed, and this is a narrative they still persist with regarding the Windows Mail app, which still does not work correctly and has not worked correctly since July 2022, but i digress, this local authority protection is another joke on the "we have fixed this in a previous update " rubbish coming from Microsoft, which begs the question is it all hands to the pump with Windows 12? , or "we do not have enough feedback data in order to fix the issue " all excuses from Microsoft and nothing gets fixed , which makes you wonder if key personnel who would normally be on hand to fix issues are to busy With the next operating system, and that Microsft has already moved on to the "next big thing"

    The latest post suggests their last attempt to fix it causes blue screens and restarts, sounds like a disaster.

    Updated May 16, 2023: This known issue was previously resolved with an update for Microsoft Defender Antivirus antimalware platform KB5007651 (Version 1.0.2303.27001) but issues were found, and that update is no longer being offered to devices. If you encounter this issue, you will need to use the above workaround until the issue is resolved. If you have installed Version 1.0.2303.27001 and receive an error with a blue screen or if your device restarts when attempting to open some games or apps, you will need to disable Kernel-mode Hardware-enforced Stack Protection. To do this, select the Start button, type Windows Security and select it, select Device Security then select Core Isolation then disable Kernel-mode Hardware-enforced Stack Protection.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2023-05-17T02:35:45+00:00

    The latest post suggests their last attempt to fix it causes blue screens and restarts, sounds like a disaster.

    Updated May 16, 2023: This known issue was previously resolved with an update for Microsoft Defender Antivirus antimalware platform KB5007651 (Version 1.0.2303.27001) but issues were found, and that update is no longer being offered to devices. If you encounter this issue, you will need to use the above workaround until the issue is resolved. If you have installed Version 1.0.2303.27001 and receive an error with a blue screen or if your device restarts when attempting to open some games or apps, you will need to disable Kernel-mode Hardware-enforced Stack Protection. To do this, select the Start button, type Windows Security and select it, select Device Security then select Core Isolation then disable Kernel-mode Hardware-enforced Stack Protection.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2023-05-13T14:24:46+00:00
    1. Open Windows Registry Editor.
    2. Navigate to the following location: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
    3. Make sure you have RunAsPPL and RunAsPPLBoot. entries. If you don’t have RunAsPPLBoot listed, create DWORD entries for RunAsPPL and RunAsPPLBoot.
    4. Value for both entries should be 2.
    5. Reboot and warnings should stop.

    If you prefer not to (or cannot) edit the Registry, this web page also has a simple Powershell script you can copy and paste in Powershell to make the settings:

    https://www.windowslatest.com/2023/03/18/windows-11-incorrectly-warns-local-security-authority-protection-is-off/

    Thank you so much! This worked! Great advice.

    Bonjour, ceci marche en effet très bien.

    Est-ce que cette procédure a réellement réactivé la protection de sécurité locale ? On n'avait plus cette protection ou c'était simplement un bug au niveau de l'alerte dans Sécurité Windows ?

    A t'on créé, ou va t'on créer ou non un conflit par rapport au patch de sécurité que Microsoft va nous fournir ... un jour ? ( mais quand ? ).

    Ce qui est tout de même rassurant, c'est que des sites très sérieux proposent de créer ces 2 clés de registre en d word 32 bits ( voir autre lien encore ici ->

    https://www.malekal.com/protection-autorite-securite-locale-est-desactivee-comment-activer/?utm_source=pocket_saves ).

    Quand quelqu'un aura des news pour la suite , on se le partagera, bon dimanche à tous

    Was this answer helpful?

    0 comments
  4. Anonymous
    2023-05-13T09:31:30+00:00

    Same issue!

    Was this answer helpful?

    0 comments