GuidesError FixesFIXED: Local Security Authority Protection Is Off In Windows 11

FIXED: Local Security Authority Protection Is Off In Windows 11

Uninstalling faulty Windows updates and shady third-party apps, running security scans, and enabling LSA from Local Group Policy are some solutions for this problem.

Expert Verified By

The message “Local Security Authority Protection Is Off” on Windows 11 may indicate potential security vulnerabilities due to corrupt Windows updates, inaccurate LSA configurations, and more. On the other hand, repairing and resetting the Windows Security app and updating the Windows are quick ways to resolve the issue.

The issue in Windows 11 may stem from various causes, including faulty or corrupt Windows updates, system file corruption, temporary glitches or bugs, malware or virus presence, and others. Addressing these potential issues can help resolve the problem.

Key Takeaways
  • You may face problems due to incorrect settings, corrupt data, glitches within the Windows Security app, and more.
  • Enable the LSA via Local Group Policy or Registry Editor, undo faulty Windows updates, or scan for threats to eliminate the warning.
  • Ensure you have backed up important files and created System Restore Points before troubleshooting this issue.

Those who face the issue will see the following message on the screen:

Error Message: This change requires you to restart your device. Local Security Authority protection is off. Your device may be vulnerable.
Local Security Authority Protection Is Off Error Message
Local Security Authority Protection Is Off (Image By Tech4Gamers)

Method Difficulty Rating

Verify Warning
Rated: 6/10

Enable LSA
Rated: 7/10

Use Local Editor
Rated: 7/10

Change Registry 
Rated: 7/10

Undo Windows 
Rated: 8/10

Important: Apply basic troubleshooting steps, like power cycling the computer, updating Windows, and scanning for malware and viruses before moving on.

Verify The Warning

We found that sometimes, this message may be a false warning about LSA being turned off. Hence, we need to verify if the problem exists. Users on Kaspersky Foum used this method. These are the steps to verify the warning:

  1. Go to Applications And Services Logs: Launch the “Event Viewer” app > navigate to “Applications And Services Logs.”
    Applications And Services Logs in Event Viewer
    Applications And Services Logs (Image By Tech4Gamers)
  2. Go to Windows: Select “Microsoft” > “Windows.”
  3. Local Security Authority: Proceed to find “Local Security Authority.”
  4. Event ID: Look for the Event ID 5004. Its presence means that LSA is enabled, and you get a false warning.

Enable Local Security Authority

Before trying anything, ensure that the LSA is enabled and you did not mistakenly turn it off on your system. If you are getting the error message despite LSA being active, we advise you to ignore it. On Windows Eleven Forum users enabled and double-checked their LSA status using the following steps: 

  1. Device Security: Search “Windows Security” in Windows Search and open the results > Go to “Device Security” on the left pane.
  2. Core Isolation: Click the “Core Isolation Details” button under the “Core Isolation” heading.
    Core Isolation Details In Device Security
    Core Isolation Details (Image By Tech4Gamers)
  3. Local Security Authority Protection: Turn on “Local Security Authority Protection” via the toggle switch.
    Enable LSA With Toggle Button
    Enable LSA (Image By Tech4Gamers)
  4. Yes: Hit “Yes” in the UAC dialog box.

Use Local Group Policy Editor

Alternatively, we used the Local Group Policy Editor to enable LSA and configure the correct settings. The interface lets you configure crucial Windows processes and services. Hence, we noted the error message was gone after activating the LSA Group Policy, and users on the Malware Tips forum reported it. Follow the steps below for this fix:

  1. Windows+R: Access the “Run” menu with the “Windows+R” keys.
  2. Search: Search for “gpedit.msc.”
  3. Go To System: Click on “Administrative Templates” under “Computer Configuration” >  “System.”
  4. Local Security Authority: Pick “Local Security Authority.”
    Select Local Security Authority Option
    Local Security Authority (Image By Tech4Gamers)
  5. Configure: Come to the right side of this screen and right-click > “Configure LSASS To Run As A Protected Process.”
    Configure LSASS To Run
    Configure LSASS (Image By Tech4Gamers)
  6. Choose Enabled With UEFI Lock: Choose “Enabled” > In the “Options” drop-down, > “Enabled With UEFI Lock.”
  7. Apply: Go with “Apply” > “OK.”
Enable LSASSS To Run
Enabled (Image By Tech4Gamers)

WARNING: Don’t make major changes in the Policy Editor as it contains important files.

Change Registry Settings

One more technique of turning on the Local Security Authority is via the Registry Editor. However, vigilantly deal with each step to avoid any system malfunctions. This technique was used by different users on the SuperUser Forum. These are the exact steps you should perform:

  1. Execute Code: Go to the “Run” box > Execute the code “regedit” 
  2. Type: Type the address Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa”  in the “Address Bar.”
    Enter Address In Address Bar
    LSA Search (Image By Tech4Gamers)
  3. Select New: Now, right-click on the black part of this screen > “New.”
  4. Name Folder: Pick “DWORD (32bit) Value” from the following mini-menu > Name the folder “RunAsPPL.”
  5. Repeat: Repeat this to create another folder, “RunAsPPLBoot.”
    Create DWORD And Name Them
    Create DWORD (Image By Tech4Gamers)
  6. Pick Value Data: Next, click on these folders and pick “2” in the “Value Data” section.
    Change Value Data To 2
    Change Value Data (Image By Tech4Gamers)
  7. Restart: Restart your computer.

Important: Look for these two folders, if they already exist, before creating them.

Undo Windows Updates

Faulty Windows updates can also interfere with LSAs running on the system. Besides, some users reported receiving the error message after installing Windows updates, so we tested undoing those updates, and it seemed to work. Users on the Tech Support Forum told each other to undo the updates to avoid this problem. Use these instructions to uninstall Windows updates:

  1. Go To Update History: Head to the “Settings” >  “Windows Update” tab >  “Update History.”
  2. Uninstall Updates: Scroll down and pick “Uninstall Updates.”
    Uninstall Updates Option
    Uninstall Updates (Image By Tech4Gamers)
  3. Uninstall: Right-click the topmost Windows update > “Uninstall.”
    Uninstall Faulty Windows Update
    Uninstall Windows Update (Image By Tech4Gamers)
  4. Restart: Process with the uninstallation with “Yes” > Lastly, pick “Restart Now.”

Tip: Several users reported that running a specific code in PowerShell instantly helped fix the issue. So, we tried the fix, and it worked. Enter this code as it is into the PowerShell box:

  • reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPL /t REG_DWORD /d 2 /f;reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPLBoot /t REG_DWORD /d 2 /f; 

Final Thoughts

After detailed research, I found that, to avoid the “Local Security Authority Protection Is Off” issue in Windows 11, promptly address causes such as corrupt updates, system files, malware, or incorrect configurations. Users have been reporting this issue on different forums, mainly Twitter.

Regularly updating Windows is crucial to maintaining system security and stability, ensuring a seamless computing experience. Hopefully, windows come up with something through which this issue no longer arises. Until then, you will have to work around the error using this guide. 

Frequently Asked Questions

What Does “Local Security Authority Protection Is Off” Mean In Windows 11?

It is a security warning that LSA may not be working on your system and might be at risk of getting exposed to threats.

Why Am I Seeing This Error Message?

malware or viruses, faulty Windows updates, and misconfigured settings are some reasons for this issue.

How Do I Fix Windows 11 Local Security Authority Protection Is Off?

Scan your computer for threats, manually enable LSA, or update your Windows to fix the problem.

Related Articles:

Was our article helpful? 👨‍💻

Thank you! Please share your positive feedback. 🔋

How could we improve this post? Please Help us. 😔

Related articles

Star Wars Forces of Corruption Exception Errors [FIXED]

Uncover how to fix different star wars exception errors in detail. Follow our step-by-step breakdown to tackle these exception errors.

Windows Cannot Create A Homegroup On This Computer [FIXED]

Have you ever received the error "Windows cannot create a homegroup on this computer"? This error occurs by IPv6 error or different PC names.

Your PC Did Not Start Correctly: Our Proven Fixes [2024]

Eliminate the issue with methods like reinstalling the drivers and updates, and fishing out corrupt system files from the system registries.

Proven Fixes: PC Keeps Crashing While Gaming

Sometimes, the PC keeps crashing while gaming. The error occurs due to corrupt system files or full RAM or memory.

[FIXED] DCOM Was Unable To Communicate With The Computer

The computer often displays "DCOM was unable to communicate with the computer". This issue is caused by corrupted registries and firewalls.

Similar Guides