Windows Security Bug - Local Security Authority Protection Not Registering a System Restart

Anonymous
2023-01-15T20:14:29+00:00

After I uninstalled Avira Antimalware, I got an alert from Windows Security that my Local Security Authority Protection was turned off. But after I turned it on and restarted as instructed, I continue to get the same alert that my Local Security Authority Protection is turned off, even though within the same window, the toggle switch under the "Local Security Authority Protection" heading displays that it's already turned on.

Additionally, at the same time that this bug appeared, I've also started to get an old Windows bug where if I try to open File Explorer from the taskbar, the entire taskbar would crash and restart every time (though I can open File Explorer from the Start menu without issue).

Any help resolving either bug would be appreciated. Thanks.

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2023-02-23T14:51:38+00:00

I figure that is a missing reg entry RunAsPPLBoot in my case.

Create a new DWORD32 and set to 2

After reboot no longer get error.

RunAsPPL and RunAsPPLBoot.

By default they are set to 0 to enable this you need to set them to 2.

Also set group policy as enable for uefi lock only , my problem is fixed now, no need to reset windows.

In the Local Group Policy Editor window, navigate to the following path: Computer Configuration\Administrative Templates\System\Local Security Authority.

In the right panel, double-click on the ‘Configure LSASS to run as a protected process‘ policy.

In the policy settings window, select the Enabled option

Then click on the dropdown under Configure LSA to run as a protected process and select Enabled with UEFI Lock

Was this answer helpful?

10+ people found this answer helpful.
0 comments

138 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-03-01T21:29:14+00:00

    Same here, McAfee popped up on my machine for some reason (after my free trial). After I cleaned up/removed it the problem started on my relatively new Win 11 Home machine.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2023-03-01T21:08:37+00:00

    I had the "Local Security Authority protection is off" warning issue after uninstalling the free McAfee that came with my PC. I had a long web chat with MS Support and even uploaded to them a screenshot of the Windows Security page showing the Local Security Authority warning "Local Security Authority protection is off" just above the toggle that is "on". I was told by the online chat that "this is actually a known bug with the windows security" and that "Windows will automatically issue an update to fix this". I asked when this update is expected and the response was "should be able to see it gone by the second or third Friday of March". The chat also told me that while this issue is present "rest assured the Windows security system is working and the system is protected". I'm going to just wait and see if the expected update fixes the issue.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2023-02-28T12:47:08+00:00

    I set my values to (1) and it solved my problem, on Win 11 21H2. Setting the values to (2) workd for one day, as you can see in my previous posts and then showed Unknown the next morning I booted up. Well it has been about a week now and everything works perfectly with the values set to (1).

    Was this answer helpful?

    0 comments
  4. Anonymous
    2023-02-25T13:34:32+00:00

    After I uninstalled Avira Antimalware, I got an alert from Windows Security that my Local Security Authority Protection was turned off. But after I turned it on and restarted as instructed, I continue to get the same alert that my Local Security Authority Protection is turned off, even though within the same window, the toggle switch under the "Local Security Authority Protection" heading displays that it's already turned on.

    I was browsing a web page when McAfee (which I thought I had deleted) popped up to tell me that the web page I was viewing was a virus threat.

    After dismissing all the pop-ups, I found myself with the same LSA issue.

    I applied Tiago's registry fix/work around and the issue seems to be fixed. I have a home edition, so I can't change Group Policies.

    Some issue with add-on anti-mailware products interacting with Windows?

    Was this answer helpful?

    0 comments