{"id":15678,"date":"2023-05-20T17:00:39","date_gmt":"2023-05-20T11:30:39","guid":{"rendered":"https:\/\/www.systweak.com\/blogs\/?p=15678"},"modified":"2025-01-24T17:33:42","modified_gmt":"2025-01-24T12:03:42","slug":"fix-local-security-authority-protection-off","status":"publish","type":"post","link":"https:\/\/www.systweak.com\/blogs\/fix-local-security-authority-protection-off\/","title":{"rendered":"Fixed: Local Security Authority Protection Off – Your Device May Be Vulnerable"},"content":{"rendered":"

The Local Security Authority protection on your Windows 11 PC is a crucial process that keeps your credentials secure. The idea behind LSA is to ensure that no loopholes in your security allow a third party to intercept your personal information. It is a process that authenticates the genuineness of your credentials before allowing you access to the system.\u00a0<\/span><\/p>\n

While the effectiveness of the process is proven, there are times when a user finds the feature toggled off on the system. Sometimes, it is manually turned off because of the heavy nature of the process, while other times, it is toggled off after Windows or system updates.\u00a0<\/span><\/p>\n

Turning on manually turned off LSA is easy, provided you know how to do it. On the other hand, if the process is closed by the system and it is done after every update, you may require serious actions to fix the error.\u00a0<\/span><\/p>\n

Without this process, your PC may be vulnerable to interception and data theft<\/a>. Hence, it is important to keep it ON.\u00a0<\/span><\/p>\n

But how? Well, that is what we will share with you in this post.\u00a0<\/span><\/p>\n

Ensure you read this until the end, as we will explain how to enable Local Security Authority Protection on your PC. You can enable these steps even when the system cannot do so.\u00a0<\/span><\/p>\n

Let\u2019s begin!<\/span><\/p>\n

What is the LSA problem in Windows?<\/h3>\n

The Local Security Authority feature keeps your PC protected from code-injecting malware and reduces the chances of credentials being compromised. It is a crucial error that this service is always running and makes sure that the PC is safe. The real problem that appears is that the Windows Defender incorrectly gives a notification<\/a> that the LSA is not running or has stopped working.\u00a0<\/span><\/p>\n

You may be thinking if the notification is incorrect and the service is still running, where is the issue? Well, the fake warnings often catch a user off-guard which leads to them making harmful decisions. These notifications are often a work of phishing attacks meaning as soon as users click on them, the script is injected, failing the purpose of LSA.\u00a0<\/span><\/p>\n

Not to mention, the curiosity of a user about \u201cWhat if the LSA is off?\u201d is also a troublesome thought. Hence you should take things into your own hands and try to relaunch the Local Security Authority feature on your PC.\u00a0<\/span><\/p>\n

If it is ON it will remain the same, and if it is OFF you will be able to turn it back on. EASY!<\/span><\/p>\n

Why Does this Warning Occur<\/h3>\n

If that yellow exclamation mark in your security settings has appeared recently, chances are that the LSA process was affected by the recent turn of events on your PC.<\/span><\/p>\n

Usually, the user turns off the Local Security Authority protection from the Task Manager as it appears to be a heavy process. However, if it is not manually disabled and is not running, there can be three reasons behind it –\u00a0<\/span><\/p>\n

    \n
  1. A corrupt Windows Update was installed on your PC, which caused the LSA to go off.<\/span>
    \n<\/span><\/li>\n
  2. The Secure Boot settings have been accidentally reset on Windows. It is the basic security feature that, when disabled, affects other programs, including LSA.<\/span>
    \n<\/span><\/li>\n
  3. Due to unnecessary changes in Group Policy Editor, LSA is disabled.<\/span><\/li>\n<\/ol>\n

    These 3 are the most probable causes of the warning. As you can realize, all of these require a power user to understand and move ahead to fix.\u00a0<\/span><\/p>\n

    Check out our easy-to-execute fixes curated, especially for normal users below!<\/span><\/p>\n

    Ways to Resolve Local Security Authority Protection Off on Windows 11<\/h2>\n

    Way #1 – Turn LSA ON Using Windows Security Application<\/h3>\n

    The first and foremost way to enable LSA on your Windows PC is to follow the traditional path and toggle it ON manually via the security application.\u00a0<\/span><\/p>\n

    Here\u2019s what you need to do –\u00a0<\/span><\/p>\n

    Step 1 – Open the Start Menu & Search for a Security Application in Windows called \u201c<\/span>Windows Security.\u201d<\/b><\/p>\n

    \"Search<\/b><\/p>\n

    Step 2 – In Windows Security, you will come across an option that says \u201c<\/span>Device Security<\/b>\u201d in the left panel of the screen. \"Device<\/span><\/p>\n

    Step 3 – From Device Security, click \u201c<\/span>Core Isolation details<\/b>.\u201d<\/span><\/p>\n

    \"Click<\/span><\/p>\n

    Step 4 – In Core Isolation, you will see the \u201c<\/span>LSA toggle<\/b>.\u201d Turn it ON, and you should be good to go.\u00a0<\/span><\/p>\n

    This is the basic method. If you cannot find the Local Security Authority Protection on the shared locations, do not worry. There are other ways explained below to turn it on.\u00a0<\/span><\/p>\n

    \n
    \n
    <\/i><\/div>\n
    \n

    Note : <\/strong>Even if the LSA toggle button is enabled, experts recommend that you turn it off and enable it after a few seconds.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n\n\n\n\n
    Editor\u2019s Tip –<\/strong> If you do not see the LSA toggle switch then copy and paste the following command in your Terminal window (Win + X) followed by Enter.<\/span><\/p>\n

    Get-AppPackage | Where-Object {$_.Name -like “Microsoft.SecHealthUI”}<\/b><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    Read Also: Minecraft Error \u2013 \u2018An Existing Connection Was Forcibly Closed by the Remote Host\u2019 Fixed!<\/a><\/p>\n

    Way #2 Ensure the Warning Isn’t Just a False Flag<\/h3>\n

    Some experts have reported that this error could be a false alarm due to certain anomalies that occur when updating Windows. To check if the LSA warning is false, follow these steps.<\/span><\/p>\n

    1. Press Win + S to open the Windows Search box and type \u201cEvent Viewer\u201d app.
    \n<\/span>2. Click on Applications and Services Logs in the left panel followed by Microsoft > Windows > LSA
    \n\"Event
    \n<\/span>3. Locate the event with ID 5004 related to LSA protection and confirm that it is enabled and working.
    \n<\/span>4. If you cannot find an event with this ID, the feature may be disabled. In that case, try applying the other fixes to resolve the issue.<\/span><\/p>\n

    Way #3 – Enable LSA Protection Via Policy Editor on Windows<\/h3>\n

    The Local Group Policy Editor is another way you can spot the LSA protection settings and enable them. Simply follow the steps given below –\u00a0<\/span><\/p>\n

    Step 1 – Press Windows+R on your keyboard to open the Run Search.
    \n<\/span>Step 2 – In the Run Search, use the command \u201c<\/span>GPEDIT.msc<\/b>.\u201d<\/span><\/p>\n

    \"GPEDIT<\/span><\/p>\n

    Step 3 – After opening the local group policy editor, navigate to the following path –\u00a0<\/span><\/p>\n

    Computer Configuration\\Administrative Templates\\System\\Local Security Authority<\/i><\/strong><\/p>\n

    Step 4 – Following the above path, you can find the configured LSASS to run as a protected process.
    \n<\/span>Step 5 – Select the option mentioned above and right-click on it. You will find the enable option. Just click on it and restart your PC for changes to take effect.\u00a0<\/span><\/p>\n

    Way #4 – Use Registry Editor to Enable LSA<\/h3>\n

    If the above method does not work, you can use the registry editor to sort your Local Security Authority Protection off situation. Many users say that after editing the RunAsPPL registry entry, their problem was fixed. <\/span><\/p>\n

    However, before you make any changes to the registry, we suggest taking a backup.
    \n<\/span><\/p>\n

    To do so, open the Registry Editor > click File > Export. Once the backup is created, follow the instructions below to enable LSA via Windows Registry.<\/p>\n

    Step 1 – Press Windows + R to open the run search.
    \n<\/span>Step 2 – In the run search, use the command \u201c<\/span>regedit.\u201d<\/b><\/p>\n

    \"use<\/b><\/p>\n

    Step 3 – This will open the registry editor for you.
    \n<\/span>Step 4 – In the registry editor, navigate to the following path –\u00a0<\/span><\/p>\n

    Computer\\HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa<\/i><\/strong><\/p>\n

    and look for the RunAsPPl entry as shown in the below image.<\/p>\n

    \"regedit-runasppl\"<\/p>\n

    Step 5 – Double-click the RunAsPPL entry and change its Value Data to 2. Click Ok to save the changes.<\/p>\n

    \n
    \n
    <\/i><\/div>\n
    \n

    Note : <\/strong>If you cannot find the RunAsPPL entry, create one by clicking New > select Dword (32-bit) Value. Name the entry as RunAsPPL. Double-click on it, and under the Value Data field, enter 2 and click Ok to save.<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<\/p>\n

    Step 6 – Next, click on the empty area, click New > select DWORD (32-bit) Value.<\/p>\n

    \"Dword
    \nStep 7 – Name the new registry as RunAsPPLBoot and click Ok.
    \nStep 8 – Double click RunAsPPLBoot and change the Value Data to 2 > click Ok to apply changes.<\/p>\n

    \"create<\/p>\n

    Step 9 – Restart the PC. The Local Security Authority Protection is Off should be fixed.<\/p>\n

    However, if this does not help, we suggest changing the Value Data of RunAsPPLBoot to 1.<\/span><\/p>\n

    \"RunAsPPLBoot-change-1\"
    \nNow restart your PC and check the error must be fixed.<\/p>\n

    In case this does not work, there are chances that the Windows registry requires optimization. The best way to do that is to use a PC Optimization tool like Advanced System Optimizer. Instead of making unnecessary changes that may worsen the situation, the tool cleans only the invalid registry entries and helps optimize the registry for better performance.\u00a0<\/span><\/p>\n

    \"download\"<\/a><\/p><\/div>\n

    Check out this thorough guide on <\/span>how and why you should consider optimizing your registries<\/span><\/a> to learn more about it!<\/span><\/p>\n

    What is the impact of enabling LSA protection?<\/h3>\n

    Most network experts recommend enabling this feature to ensure that the OSPF (Open Shortest Path First) protocol is stable and secure. It also helps to secure the network from malicious and unauthorized LSAs. Here are a few benefits of enabling LSA.<\/span><\/p>\n