This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
A yellow triangle appeared on the Windows Security iron yesterday. It says that Local Security Authority protection is off. Your device may be vulnerable.
I can press Go to settings or Dismiss but when I click go to settings, a notification saying "the page You want to access doesn't contain required functions and is unavailable".
There is also no option to turn the protection on in the Device Security panel (there is only "dismiss" option).
When I was looking at it yesterday, there was also a notification that "The tpm module is unavailable" but today it doesn't show. I checked the device manager and uefi and both say that the tpm is enabled.
I've found an advice to turn on SMV in UEFI (in the CPU settings) to solve the problem but I don't want to change anything in BIOS without consultation as I'm no expert. I've also found a reply from a truste source that this whole problem is a Microsoft bug and it's better to just wait till they fix it.
What should I do?
Screenshots are in Polish, I hope they can be useful somehow. The first one shows the notification about a page being not available and the second shows the Device security panel (the notification from the first screenshot displays when I close the device security page or when I click on "go to settings" below the information that the protection is turned off). There is also an information (second screenshot) that "standard device security is not supported".
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
Microsoft have just posted that they have resolved the "Local Security Authority protection is off" issue in an update. Has anyone tried to apply it from Windows Update?
Resolution: This issue was resolved in an update for Windows Security platform antimalware platform KB5007651 (Version 1.0.2306.10002). If you would like to install the update before it is installed automatically, you will need to check for updates.
The tasklet still had a yellow exclamation point after boot but after I opened it a couple times, it now has a green checkmark. The problem seemed to be fixed immediately in Device Security in Windows Security dialog that opens after clicking the tasklet. Thanks! (nice try for the initial posting; it got the ball rolling).
Hello everybody,
I only created the 32-bit word entry and put a value of 2, because when you go to the link below from microsoft, they only advise that and do no other workarounds.
The link from microsoft is :
Microsoft write in this link:
Workaround: If you have enabled Local Security Authority (LSA) protection and have restarted your device at least once, you can dismiss warning notifications and ignore any additional notifications prompting for a restart. You can verify that LSA protection is enabled by looking in Event Viewer using the information available here. Important: Currently, we do not recommend any other workaround for this issue.
So I live with the warning, have a nice day.
In this link from Microsoft ->
https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection , this is specified :
How to enable LSA protection on a single computer
Using the Registry
Sorry, but i forgot to mention this link. I couldn't find any documentation from Microsoft that recommended creating the 2nd RunAsPPLBoot entry: where does this recommendation come from? What is it for on the PC? Apart from knowing that when there is no longer the alert in Windows security, it is impossible at least for me to know what it is for and what it does on my Windows 11.
Sorry ... found an answer to my question
Dyrek Litzenberger
I DONT HAVE RunAsPPL value in the right pane. HELP. MY PC IS UNDER ATTACK BECAUSE MICROSOFT CANT DO ITS JOB RIGHT. AND IS JUJST ROBBING ME THE LAST 4 YEARS
TOPIC IS -I think there's an issue with LSA in the latest updates. There are a lot of users reporting it in the feedback hub. If you press Windows + F this and then search "Local Security Authority" you will see the reports submitted just a couple of hours ago.
You can still try to force this through the registry by following the method below, but if it fails as well, we may need to wait for MS to fix this.
Have a wonderful day/evening!
I DONT HAVE RunAsPPL value in the right pane
