Windows Security Bug - Local Security Authority Protection Not Registering a System Restart

Anonymous
2023-01-15T20:14:29+00:00

After I uninstalled Avira Antimalware, I got an alert from Windows Security that my Local Security Authority Protection was turned off. But after I turned it on and restarted as instructed, I continue to get the same alert that my Local Security Authority Protection is turned off, even though within the same window, the toggle switch under the "Local Security Authority Protection" heading displays that it's already turned on.

Additionally, at the same time that this bug appeared, I've also started to get an old Windows bug where if I try to open File Explorer from the taskbar, the entire taskbar would crash and restart every time (though I can open File Explorer from the Start menu without issue).

Any help resolving either bug would be appreciated. Thanks.

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
Anonymous
2023-02-23T14:51:38+00:00

I figure that is a missing reg entry RunAsPPLBoot in my case.

Create a new DWORD32 and set to 2

After reboot no longer get error.

RunAsPPL and RunAsPPLBoot.

By default they are set to 0 to enable this you need to set them to 2.

Also set group policy as enable for uefi lock only , my problem is fixed now, no need to reset windows.

In the Local Group Policy Editor window, navigate to the following path: Computer Configuration\Administrative Templates\System\Local Security Authority.

In the right panel, double-click on the ‘Configure LSASS to run as a protected process‘ policy.

In the policy settings window, select the Enabled option

Then click on the dropdown under Configure LSA to run as a protected process and select Enabled with UEFI Lock

Was this answer helpful?

10+ people found this answer helpful.
0 comments No comments

138 additional answers

Sort by: Oldest
  1. Anonymous
    2023-02-24T12:43:59+00:00

    I just went back into the registry and changed the values to (1) and now it shows normal again. If I boot up tomorrow and the same issue is back agian, then I will just save my Docs and Format and reinstall!

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2023-02-24T19:45:25+00:00

    Tried it, it didn't work.

    Was this answer helpful?

    0 comments No comments
  3. Enric Cortés 39,445 Reputation points Volunteer Moderator
    2023-02-25T12:24:45+00:00

    Excuse my bad english.

    This issue in Local Security Authority Protection (LSA) may be related to another issue that appeared starting in August of last year (Standard hardware security not supported):

    'Standard hardware security not supported', till now the error - Microsoft Community

    And most likely the alternative solution that I proposed for that problem, and that works, can also solve this new one that appears in January:

    This issue has been around for months now and is caused by an issue with the KB5007651 update that was received in August: Update for Windows Security Platform.

    This issue does not affect all computers equally because it is highly dependent on installed hardware, BIOS settings, and installed updates.

    Before continuing, the most important thing is that you update the operating system as much as possible and check if that solves the hardware security problem, both Windows updates and device drivers. Do this:

    A) Update the operating system.

    Go to Settings > Windows Update, and click Check for updates. Check that the system downloads and installs any pending updates.

    After restarting your computer to complete the updates, perform the same operation again: click Check for updates and check that there are no pending updates. Now from the Windows Update option click on Advanced Options, click on OPTIONAL UPDATES and check the list of updates to install.

    B) Update device drivers.

    Visit your PC manufacturer's support website and try to download and install the latest drivers for Windows 11, or at least the latest drivers for Windows 10.

    If after the updates and restarting the computer, the problem remains the same**, the ideal solution has to be implemented by Microsoft through a new update for the Windows Security Platform for Windows 11 22H2.**

    However, there is a workaround until Microsoft releases the new update: try to update Windows Security Platform. Follow these steps:

    1. Download from this link the folder that contains the application:

    https://app.box.com/s/8br9g6arlce8pgxx5hmh6t1jcv4zj2s0

    1. Create a restore point first
    2. Unzip the downloaded ZIP file to the Desktop
    3. Navigate to the location C:\Windows\System32\SecurityHealth to take ownership of that folder: Properties > Security > Advanced Options > Change > Administrators

    Check the "Replace owner on subcontainers and objects" box and click Apply.

    In the "SecurityHealth Permissions" window select Administrators > Full Control. Apply.

    1. Copy the "1.0.2207.20002-0" folder on the Desktop to the SecurityHealth folder
    2. Open the folder and run the "Microsoft.SecHealthUI_8wekyb3d8bbwe.appx" application as administrator to update.
    3. Restart the computer.

    If you see it complicated, it is better that you wait for Microsoft to solve it, although it may take a long time.

    Note: Make these adjustments at your own risk.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2023-02-25T13:34:32+00:00

    After I uninstalled Avira Antimalware, I got an alert from Windows Security that my Local Security Authority Protection was turned off. But after I turned it on and restarted as instructed, I continue to get the same alert that my Local Security Authority Protection is turned off, even though within the same window, the toggle switch under the "Local Security Authority Protection" heading displays that it's already turned on.

    I was browsing a web page when McAfee (which I thought I had deleted) popped up to tell me that the web page I was viewing was a virus threat.

    After dismissing all the pop-ups, I found myself with the same LSA issue.

    I applied Tiago's registry fix/work around and the issue seems to be fixed. I have a home edition, so I can't change Group Policies.

    Some issue with add-on anti-mailware products interacting with Windows?

    Was this answer helpful?

    0 comments No comments