Windows Security Bug - Local Security Authority Protection Not Registering a System Restart

Anonymous
2023-01-15T20:14:29+00:00

After I uninstalled Avira Antimalware, I got an alert from Windows Security that my Local Security Authority Protection was turned off. But after I turned it on and restarted as instructed, I continue to get the same alert that my Local Security Authority Protection is turned off, even though within the same window, the toggle switch under the "Local Security Authority Protection" heading displays that it's already turned on.

Additionally, at the same time that this bug appeared, I've also started to get an old Windows bug where if I try to open File Explorer from the taskbar, the entire taskbar would crash and restart every time (though I can open File Explorer from the Start menu without issue).

Any help resolving either bug would be appreciated. Thanks.

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2023-02-23T14:51:38+00:00

I figure that is a missing reg entry RunAsPPLBoot in my case.

Create a new DWORD32 and set to 2

After reboot no longer get error.

RunAsPPL and RunAsPPLBoot.

By default they are set to 0 to enable this you need to set them to 2.

Also set group policy as enable for uefi lock only , my problem is fixed now, no need to reset windows.

In the Local Group Policy Editor window, navigate to the following path: Computer Configuration\Administrative Templates\System\Local Security Authority.

In the right panel, double-click on the ‘Configure LSASS to run as a protected process‘ policy.

In the policy settings window, select the Enabled option

Then click on the dropdown under Configure LSA to run as a protected process and select Enabled with UEFI Lock

Was this answer helpful?

10+ people found this answer helpful.
0 comments

138 additional answers

Sort by: Newest
Most helpful Newest Oldest
  1. Anonymous
    2023-03-16T03:27:39+00:00

    ![Image](https://learn-attachment.microsoft.com/api/attachments/0fd089a8-a5c0-42f8-848a-019529fc68ff?platform=QnAImageI SOLVED THE ISSUE BY FOLLOWING STEPS ON THE BELOW for my Win11 device

    To enable Local Security Authority protection using Registry Editor, follow these steps:

    1. Press the Win+R key combination and type regedit in the Run dialogue box.
    2. Press the Enter key.
    3. Click Yes in the UAC prompt.
    4. In the Registry Editor, navigate to the following path: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
    5. In the right panel, double-click on RunAsPPL
    6. Change the Value data to 2 and click on OK.
    7. Also create new same binary as DWORD32bit and name it to RunAsPPLBoot and set to 2 and click OK
    8. Restart PC > SOLVED

    When I nav'd to the LSA path, I found that I do not have either RunAsPPL or RunAsPPLBoot.

    Can I create RunAsPPL in the same manner as RunAsPPLBoot?

    Or should I wait for a Microsoft fix?

    Was this answer helpful?

    0 comments
  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  3. Anonymous
    2023-03-15T23:48:34+00:00

    Can we please refrain from brow beating someone for attempting to give an answer. ESPECIALLY WHEN this person's attempt at the solution was enough to get the others that did reply to supply the steps needed, so while YOU did not understand what they meant, the fact of the matter is, others did, and were able to translate it for those of us who could not get it right away. Without Tiego's response, we might have still been waiting to find a solution, so I thank you very much also Tiego!

    Was this answer helpful?

    0 comments
  4. Anonymous
    2023-03-15T23:37:22+00:00

    ![Image](https://learn-attachment.microsoft.com/api/attachments/0fd089a8-a5c0-42f8-848a-019529fc68ff?platform=QnAImageI SOLVED THE ISSUE BY FOLLOWING STEPS ON THE BELOW for my Win11 device

    To enable Local Security Authority protection using Registry Editor, follow these steps:

    1. Press the Win+R key combination and type regedit in the Run dialogue box.
    2. Press the Enter key.
    3. Click Yes in the UAC prompt.
    4. In the Registry Editor, navigate to the following path: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
    5. In the right panel, double-click on RunAsPPL
    6. Change the Value data to 2 and click on OK.
    7. Also create new same binary as DWORD32bit and name it to RunAsPPLBoot and set to 2 and click OK
    8. Restart PC > SOLVED

    Thank you! This is what actually worked. I appreciate Tiago trying (I believe his answer probably was able to spur these steps), however, I was at a loss to figure out what Tiago meant (no offense, and I am very thankful). Step by step instructions is always the best for me, and other IMHO.

    Was this answer helpful?

    0 comments