Fix: ‘Local Security Authority Protection Is Off’ issue on Windows 11

If you want to Fix: ‘Local Security Authority Protection Is Off’ issue on Windows. Protection from the Local Security Authority is off. Your device may be vulnerable to a bug that is still giving Windows 11 users headaches. This bug was first reported in March 2023, and the April 2023 cumulative updates for Windows 11 (KB5025239 and KB5025224) don’t fix it.

So, what’s happening? Local Security Authority (LSA), which is included with all versions of Windows, is also included with Windows 11. LSA is in charge of making sure that security policies are followed. The LSA process is important for many parts of the OS, so it needs to be protected from being changed by malware or other bad people.

The “Local Security Authority protection” feature in Windows 11 was first seen in Windows 8.1 and Server 2012 R2. By default, LSA protection is on, and Microsoft doesn’t want users to turn it off, so it shows a warning that says “Local Security Authority protection is off. When you turn off the feature, the message “Your device may be at risk” shows up.

Fixed: ‘Local Security Authority Protection Is Off’ issue on Windows 11

Update Windows 11

1. Open the Start menu and click on the “Settings” icon.
2. In the Settings window, select “Windows Update.”
3. Click on “Check for updates.”
4. If updates are available, click on “Download” and allow the updates to install.
5. Restart your computer if prompted.

Enable Windows Security Features

1. Open the Start menu and click on the “Settings” icon.
2. In the Settings window, select “Privacy & Security.”
3. Navigate to the “Windows Security” section.
4. Click on “Open Windows Security.”
5. In the Windows Security window, click on “Virus & Threat Protection.”
6. Under “Virus & Threat Protection Settings,” ensure that the Real-time protection toggle is turned on.

Use Group Policy

1. Type Group policy in Windows search and hit Enter.
2. Go to the following location:
   Local Computer Policy > Computer Configuration > Administrative Templates > System > Local Security Authority
3. On the right side of the window, right-click the Configure LSASS to run as a protected process and pick Edit.
4. Choose Enabled.
5. Under Options, select Enabled with UEFI Lock, then click Apply and OK.
6. Restart your computer.

Enable Local Security Authority Protection using Registry

1. Type regedit in Windows search and press Enter.
2. When User Account Control shows up, click Yes.
3. Click File > Export.
4. Under Export Range, select All and save the backup in your desired destination.
5. Next, go to the following location:
   Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
6. On the right side of the window, find the RunAsPPL entry and double-click it.
7. Set the value to 1 and click OK.
8. Finally, restart your system.

What is Local Security Authority Protection

The Local Security Authority (LSA) is a feature of Microsoft’s Windows operating system that is in charge of managing and allowing interactive log-ins to the computer, among other things. This feature was first added to Windows 8.1. Since then, it has been added to all subsequent versions of Windows and is turned on by default.

LSA is also in charge of managing and enforcing the computer’s local security policies, such as the number of times you can try to log in, how long you can be locked out for, etc. It also takes care of the audit policies and records what happened. With this, one of the most important things the Local Security Authority has to do is make access tokens and give them out.