Windows Security Bug - Local Security Authority Protection Not Registering a System Restart

Anonymous
2023-01-15T20:14:29+00:00

After I uninstalled Avira Antimalware, I got an alert from Windows Security that my Local Security Authority Protection was turned off. But after I turned it on and restarted as instructed, I continue to get the same alert that my Local Security Authority Protection is turned off, even though within the same window, the toggle switch under the "Local Security Authority Protection" heading displays that it's already turned on.

Additionally, at the same time that this bug appeared, I've also started to get an old Windows bug where if I try to open File Explorer from the taskbar, the entire taskbar would crash and restart every time (though I can open File Explorer from the Start menu without issue).

Any help resolving either bug would be appreciated. Thanks.

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2023-02-23T14:51:38+00:00

I figure that is a missing reg entry RunAsPPLBoot in my case.

Create a new DWORD32 and set to 2

After reboot no longer get error.

RunAsPPL and RunAsPPLBoot.

By default they are set to 0 to enable this you need to set them to 2.

Also set group policy as enable for uefi lock only , my problem is fixed now, no need to reset windows.

In the Local Group Policy Editor window, navigate to the following path: Computer Configuration\Administrative Templates\System\Local Security Authority.

In the right panel, double-click on the ‘Configure LSASS to run as a protected process‘ policy.

In the policy settings window, select the Enabled option

Then click on the dropdown under Configure LSA to run as a protected process and select Enabled with UEFI Lock

Was this answer helpful?

10+ people found this answer helpful.
0 comments

138 additional answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2023-03-28T19:41:15+00:00

    I am still having this Standard hardware security not supported even though my cpu and motherboard are compatible with windows 11

    CPU: AMD Ryzen 5 5600G -Ryzen 5 5000 G-Series

    motherboard: ASUS TUF GAMING B550-PLUS WIFI II AM4 AMD B550

    1. TPM 2.0 (also referred to as your security processor) is enable
    2. Secure boot enabled is enable
    3. DEP is enable
    4. UEFI MAT is enable

    I have the latest window update that came out today

    Was this answer helpful?

    0 comments
  2. Anonymous
    2023-03-28T20:04:53+00:00

    After installing update (KB5023778) - What a mess!

    Now I get this. Everything was fine before update. I am running same CPU as you @rayminator2008.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2023-04-01T14:25:04+00:00

    I don't recall where I saw this, but it worked for me with one variable change I'll mention below:

    1. Select WIN+R and type regedit
    2. In Registry Editor select path Computer\HKEY_LOCAL_MACHINE_\SYSTEM\CurrentControlSet\Control\Lsa
    3. In the right panel, double click RunAsPPL
    4. Change Value data to 2******* and click OK
    5. Create new same binary [right click in right panel, select New, select DWORD32bit] name it RunAsPPLBoot, set value to 2******* & click OK
    6. Restart PC

    *** My value data was already set to 2. I read in another thread that someone else saw the same thing, and changed the value to 1. I changed both abovementioned to 1 as well, and lo & behold!
    I was afraid to mess around with this, but it really was simple by just following the directions.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2023-04-01T15:33:17+00:00

    This worked for me--the value was also already set to 2 but following all steps worked. Thank you!

    Was this answer helpful?

    0 comments