How to fix LSA package is not signed as expected event log entries?

I used the "Using Local Group Policy on Windows 11, 22H2" from the article you provided: Configuring Additional LSA Protection | Microsoft Learn

I set the "Enabled with UEFI Lock" option

Still getting 10 errors as before

As of 11/1 I'm now getting: Event 6147, LSA (LsaSrv) : Credential Guard is configured to run, but is not licensed. Credential Guard was not started.

(The only system changes were Windows Update "Dell, Inc. - Firmware - 0.1.19.0")

Was hoping the Windows Updates applied last night would help...

That's odd, it instantly solved all of mine.

Since it was a USB device, try unplugging all nonessential USB accessories, I would bet it's the fob.

If it reboots with no LSA error without the USB accessories you might need that reg key and a viable driver.

Driver files did change a bit and require WHQL drivers for most devices. My headset, which this registry key fixed the LSA for, did recently update theirs for certification.

Solved.

...

The device that was causing the issue for me was a G935 Gaming Headset, which re-prompted to select the device after I created the key and rebooted.

Sadly, in my case this didn't work. Still throwing 10+ LSA errors despite setting that key, and with only a card reader(fob) that's got signed drivers, at this point I'm looking at throwing my hands up in the air and hoping that MS sometime, in the future, will actually fix this.

It really doesn't cause me any huge problems, since said work machine 2 is already network isolated but still...irritation at it. At least it's not as bad as the softmodem fiasco with Win95. Anyway to those throwing hints, at least for me I give thanks for something to try.

Try setting a password.

I know its something to do with the user account controls from an update, possibly to the Group Policies, and since 11 is working on being more secure, I think it is trying to force specific user account controls.

It's something in the user account controls.

Do these both have local Admin accounts enabled or multiple user accounts?

Unfortunately, the person who did a new build didn't respond as to whether it was an upgrade or a fresh install since an upgrade from 10 might have the local admin enabled.

I logged into the local admin on mine and saw an error about the password change requirement, which was previously set to never expire, so I am leaning towards a change in the group policy from the update. After I reset the policies, just through the user account control, to never expire password, etc. I haven't had further issues.