The Local Security Authority protection is off - Windows 11 Home

Anonymous
2023-03-17T06:10:20+00:00

A yellow triangle appeared on the Windows Security iron yesterday. It says that Local Security Authority protection is off. Your device may be vulnerable.

I can press Go to settings or Dismiss but when I click go to settings, a notification saying "the page You want to access doesn't contain required functions and is unavailable". 

There is also no option to turn the protection on in the Device Security panel (there is only "dismiss" option).

When I was looking at it yesterday, there was also a notification that "The tpm module is unavailable" but today it doesn't show. I checked the device manager and uefi and both say that the tpm is enabled.

I've found an advice to turn on SMV in UEFI (in the CPU settings) to solve the problem but I don't want to change anything in BIOS without consultation as I'm no expert. I've also found a reply from a truste source that this whole problem is a Microsoft bug and it's better to just wait till they fix it.

What should I do?

Screenshots are in Polish, I hope they can be useful somehow. The first one shows the notification about a page being not available and the second shows the Device security panel (the notification from the first screenshot displays when I close the device security page or when I click on "go to settings" below the information that the protection is turned off). There is also an information (second screenshot) that "standard device security is not supported".

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2023-07-06T07:36:56+00:00

Microsoft have just posted that they have resolved the "Local Security Authority protection is off" issue in an update. Has anyone tried to apply it from Windows Update?

Resolution: This issue was resolved in an update for Windows Security platform antimalware platform KB5007651 (Version 1.0.2306.10002). If you would like to install the update before it is installed automatically, you will need to check for updates.

Was this answer helpful?

10+ people found this answer helpful.
0 comments

174 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-06-03T07:51:42+00:00

    And everything was going so well...

    Was this answer helpful?

    0 comments
  2. Anonymous
    2023-06-01T07:53:27+00:00

    Hello everyone,

    to verify that LSA has started in protected mode, you must go to the event viewer and see this: "LSA protection check: to determine if LSA has started in protected mode when Windows starts , look for the following Wininit event (PS: not Winlnit: there is a typo in the Microsoft text) in the System log under Windows Logs: 12: LSASS.exe started as a protected process with level : 4".

    At home I see this event if I restart my PC but not when I turn it on normally so I can't be 100% sure that the protection is still active.

    In this Microsoft documentation, (see this link: "https://learn.microsoft.com/fr-fr/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection" , sorry if it's in French), it's only proposed to create the RunAsPPL entry and not do any other workaround ( quid de RunAsPPLBoot ??? ), so that's what I did and I I left the alert at the level of "Device Security", without ticking "ignore" on this alert (I hope to see in this way that an update will solve this problem, one can dream).

    Here is the choice I made, so in principle to stick as much as possible to Microsoft's recommendations (PS: I did not find anywhere in MS that it was advisable to create the 2nd registry entry RunAsPPLBoot: nobody does not control the impact of the creation of this or these registry entries on the system, in the present as in the future), with certain gray areas, it must be admitted.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2023-06-01T04:04:40+00:00

    This did not work for me. Even after following the steps and restarting my pc it is still giving me that notification. I dont want to dismiss this notification, but resolve the actual issue

    Was this answer helpful?

    0 comments
  4. Anonymous
    2023-06-01T02:33:02+00:00

    Hi, My name is Rubel. I am a windows 11 user like you and I am here to help you.

    Right click on the Start Menu --> Select Terminal Admin --> Click on Yes.

    After opening the windows terminal, copy and paste the bellow code into the terminal and press enter. now restart the computer.

    After restarting the computer, hope your problem is solved.

    reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPL /t REG_DWORD /d 2 /f;reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPLBoot /t REG_DWORD /d 2 /f;

    Also you can checkout this video Local Security Authority Protection Is Off In Windows 11

    Thanks

    Was this answer helpful?

    0 comments