Fixed: Local Security Authority Protection Off – Your Device May Be Vulnerable

Local-Security-Authority-Protection-Off-Your-Device-May-Be-Vulnerable

The Local Security Authority protection on your Windows 11 PC is a crucial process that keeps your credentials secure. The idea behind LSA is to ensure that no loopholes in your security allow a third party to intercept your personal information. It is a process that authenticates the genuineness of your credentials before allowing you access to the system. 

While the effectiveness of the process is proven, there are times when a user finds the feature toggled off on the system. Sometimes, it is manually turned off because of the heavy nature of the process, while other times, it is toggled off after Windows or system updates. 

Turning on LSA that is manually turned off is easy, provided you know how to do it. On the other hand, if the process is closed by the system and it is done after every update, you may require serious actions to fix the error. 

Without this process, your PC may be vulnerable to interception and data theft. Hence, it is important to keep it ON. 

But how? Well, that is what we will share with you in this post. 

Ensure you read this until the end, as we will explain how to enable Local Security Authority Protection on your PC. Using these steps, you can enable it even when the system cannot do so. 

Let’s begin!

Local Security Authority Protection Off Warning on Windows – Why Does it Occur?

If that yellow exclamation mark in your security settings has appeared recently, chances are that the LSA process was affected by the recent turn of events on your PC.

Usually, the user turns off the Local Security Authority protection from the Task Manager as it appears to be a heavy process. However, if it is not manually disabled and is not running, there can be three reasons behind it – 

  1. A corrupt Windows Update was installed on your PC, which caused the LSA to go off.
  2. The Secure Boot settings have been accidentally reset on Windows. It is the basic security feature that, when disabled, affects other programs, including LSA.
  3. Due to unnecessary changes in Group Policy Editor, LSA is disabled.

These 3 are the most probable causes of Local Security Authority Protection not running on your Windows PC. As you can realize, all of these require a power user to understand and move ahead to fix. 

Check out our easy-to-execute fixes curated, especially for normal users below!

Ways to Resolve Local Security Authority Protection Off on Windows 11

Way #1 – Turn LSA ON Using Windows Security Application

The first and foremost way to enable LSA on your Windows PC is to follow the traditional path and toggle it ON manually via the security application. 

Here’s what you need to do – 

Step 1 – Open the Start Menu & Search for Security Application in Windows called “Windows Security.”

Search for Windows Security Application

Step 2 – In Windows Security, you will come across an option that says “Device Security” in the left panel of the screen. Device Security Option

Step 3 – From Device Security, click “Core Isolation details.”

Click on Core Isolation details

Step 4 – In Core Isolation, you will see the “LSA toggle.” Turn it ON, and you should be good to go. 

This is the basic method to enable LSA on your PC. If you cannot find the Local Security Authority Protection on the shared locations, do not worry. There are other ways explained below to turn it on. 

Read Also: Minecraft Error – ‘An Existing Connection Was Forcibly Closed by the Remote Host’ Fixed!

Way #2 – Enable LSA Protection Via Policy Editor on Windows

The Local Group Policy Editor is another way you can spot the LSA protection settings and enable them. Simply follow the steps given below – 

Step 1 – Press Windows+R on your keyboard to open the Run Search.
Step 2 – In the Run Search, use the command “GPEDIT.msc.”

GPEDIT command

Step 3 – After opening the local group policy editor, navigate to the following path – 

Computer Configuration\Administrative Templates\System\Local Security Authority

Step 4 – Following the above path, you can find the configured LSASS to run as a protected process.
Step 5 – Select the option mentioned above and right-click on it. You will find the enable option. Just click on it and restart your PC for changes to take effect. 

Way #3 – Use Registry Editor to Enable LSA

In many Windows 11 PCs, the group policy editor is unavailable if you have never used it. If the above method did not work, you can use the registry editor to sort your Local Security Authority Protection off situation. 

Here’s what you can do – 

Step 1 – Press Windows + R to open the run search.
Step 2 – In the run search, use the command “regedit.”

use command regedit in run search bar

Step 3 – This will open the registry editor for you.
Step 4 – In the registry editor, navigate to the following path – 

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

Registry Editor

Step 5 – Find RunAsPPL and RunAsPPL boot entries at the destination. If these are unavailable, create new DWORD entries with value 2 for both. 

Find RunAsPPL and RunAsPPL boot entries

create new DWORD entries with value 2 for both

Once you have both the values set to 2, restart your PC, and you should be ready. 

In case this does not work, there are chances that your registries require optimization. It is better to use Advanced System Optimizer in such situations instead of making unnecessary changes that may worsen the situation. This PC Optimization tool offers Registry Cleaner and Optimizer that helps clean invalid entries and help optimize the registry for better performance. 

Check out this thorough guide on how and why you should consider optimizing your registries to learn more about it!

Enable LSA Protection Instantly & Fix Your PC’s Security!

The 3 ways mentioned above are your best chances of enabling the Local Security Authority Protection on Windows 11. Remember that this is a crucial process as it keeps your private data confidential and safe from cyber-attacks. 

Use any of the mentioned ways, and you should have LSA enabled. Also, check out the Advanced System Optimizer, as it can help you achieve wonders with your PC’s performance and registries. 

That’ll be all for this post. Thanks for reading. Good luck!

Recommended :

Is Microsoft Edge Running Slow? These Fixes Will Help Speed it up!
5 New Creative Things You Can Do With Your Old PC

Share On :

About The Author

Dishank Sharma
Dishank Sharma

A creative tech-writer who loves to explore latest tech-trends & convey them to his readers in the simplest way possible. He loves to blend the crispness of technology with a pinch of creativity while curating best practices for the readers. In his free time, he likes to scribble poetry, listen to rap & travel.

Related Posts

Leave a Reply

Your email address will not be published. Required fields are marked *

Seen on