Windows Security Bug - Local Security Authority Protection Not Registering a System Restart

Anonymous

After I uninstalled Avira Antimalware, I got an alert from Windows Security that my Local Security Authority Protection was turned off. But after I turned it on and restarted as instructed, I continue to get the same alert that my Local Security Authority Protection is turned off, even though within the same window, the toggle switch under the "Local Security Authority Protection" heading displays that it's already turned on.

Additionally, at the same time that this bug appeared, I've also started to get an old Windows bug where if I try to open File Explorer from the taskbar, the entire taskbar would crash and restart every time (though I can open File Explorer from the Start menu without issue).

Any help resolving either bug would be appreciated. Thanks.

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous

I figure that is a missing reg entry RunAsPPLBoot in my case.

Create a new DWORD32 and set to 2

After reboot no longer get error.

RunAsPPL and RunAsPPLBoot.

By default they are set to 0 to enable this you need to set them to 2.

Also set group policy as enable for uefi lock only , my problem is fixed now, no need to reset windows.

In the Local Group Policy Editor window, navigate to the following path: Computer Configuration\Administrative Templates\System\Local Security Authority.

In the right panel, double-click on the ‘Configure LSASS to run as a protected process‘ policy.

In the policy settings window, select the Enabled option

Then click on the dropdown under Configure LSA to run as a protected process and select Enabled with UEFI Lock

0 comments

138 additional answers

Enric Cortés 39,445 Reputation points Volunteer Moderator

2023-03-17T12:27:49+00:00

Are you still getting the "Standard hardware security not supported" message?

Well, the steps are the same as I gave you: delete the 1.0.2302.21002-0 folder and restart the system.

If that doesn't fix the problem with hardware security, apply the second part of my talk to installing Windows Security Platform.
Was this answer helpful?

0 comments No comments
Monkey57 3,535 Reputation points

2023-03-17T12:16:57+00:00
Please see also: https://answers.microsoft.com/en-us/windows/forum/all/windows-security-local-security-authority/46be4c1c-0cf7-4f81-8d47-c6e3d733391a from _AW_'s post:

type powershell into search then right click on Windows Powershell and run as administrator.

Copy and paste in the command below and press enter:
```
reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPL /t REG_DWORD /d 2 /f;reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPLBoot /t REG_DWORD /d 2 /f;       
```
If it says the command completed successfully, restart your computer.
Was this answer helpful?

0 comments No comments
Anonymous

2023-03-17T12:16:54+00:00

Ok, I just checked 4 more machines and they have all reverted back to "Your device meets the requirements for enhanced hardware security." They were previously showing "Standard hardware security not supported." Huh, I have to dig deeper into this and try to figure out why. The fact that they are running properly doesn't mean that they are all right. I don't like it when a machine starts doing things on its own...
Was this answer helpful?

0 comments No comments
Anonymous

2023-03-17T12:02:07+00:00

Thanks for the reply! I just checked one of the systems and it has corrected itself! This one is now showing "Your device meets the requirements for enhanced hardware security." These machines have been running Windows 11 22H2 since when it was first offered, and all have shown "Your device meets the requirements for enhanced hardware security." It's only since this issue has arisen that they were starting to show "Standard hardware security not supported," but now this one machine has reverted back to "Your device meets the requirements for enhanced hardware security." I will be checking other machines shortly. And yes, all machines have been rebooted, etc.

I note that I saw that another user had reported the same issue.

Thanks Again!
Was this answer helpful?

0 comments No comments