FIXED: Local Security Authority Protection Is Off In Windows 11

The message “Local Security Authority Protection Is Off” on Windows 11 may indicate potential security vulnerabilities due to corrupt Windows updates, inaccurate LSA configurations, and more. On the other hand, repairing and resetting the Windows Security app and updating the Windows are quick ways to resolve the issue.

Key Takeaways

• You may face the problem due to incorrect settings, corrupt data, glitches within the Windows Security app, and more.
• Enable the LSA via Local Group Policy or Registry Editor, undo faulty Windows updates, or scan for threats to eliminate the warning.
• Ensure you have backed up important files and created System Restore Points before troubleshooting this issue.

What Causes Local Security Authority Protection Is Off Windows 11 Error?

We can list down multiple causes behind this issue, such as;

• Faulty or corrupt Windows updates.
• Corrupt system files.
• Temporary glitches or bugs.
• Presence of malware and virus in the system.
• Incorrect Windows configurations.
• Outdated Windows.

Those who face the issue will see the following message on the screen:

Also Read: Windows 11 Stuck On Restarting Screen

How To Fix Local Security Authority Protection Is Off Windows 11?

These are all the solutions to help you troubleshoot this problem:

1. Verify The Warning.
2. Enable Local Security Authority.
3. Use Local Group Policy Editor.
4. Change Registry Settings.
5. Undo Windows Updates.
6. Use Windows PowerShell.

Verify The Warning

We found that sometimes, this message may be a false warning about LSA being turned off. Hence, we need to verify if the problem exists.

These are the steps to verify the warning:

1. Launch the “Event Viewer” app.
2. Navigate to “Applications And Services Logs.”

   

3. Select “Microsoft.”
4. Choose “Windows.”
5. Proceed to find “Local Security Authority.”
6. Look for the Event ID 5004. Its presence means that LSA is enabled, and you got a false warning.

Also Read: How To Get Into BIOS [Windows 11]

Enable Local Security Authority

Before trying anything, ensure that the LSA is enabled and you did not mistakenly turn it off on your system. In case you are getting the error message despite LSA being active, we would advise you to ignore it.

Here is how you can double-check the LSA status:

1. Search “Windows Security” in Windows Search and open the results.
2. Go to “Device Security” on the left pane.
3. Click the “Core Isolation Details” button under the “Core Isolation” heading.

   

4. Turn on “Local Security Authority Protection” via the toggle switch.

   

5. Hit “Yes” in the UAC dialog box.

Also Read: Windows 11 Time Zone Greyed Out

Use Local Group Policy Editor

Alternatively, we used the Local Group Policy Editor to enable LSA and configure the correct settings. The interface lets you configure crucial Windows processes and services. Hence, we noted the error message was gone after activating the LSA Group Policy.

Follow the steps below for this fix:

1. Access the “Run” menu with the “Windows+R” keys.
2. Search for “gpedit.msc.”
3. Click on “Administrative Templates” under “Computer Configuration.”
4. Then, select “System.”
5. Pick “Local Security Authority.”

   

6. Come to the right side of this screen and right-click “Configure LSASS To Run As A Protected Process.”

   

7. Choose “Enabled.”
8. In the “Options” drop-down, select “Enabled With UEFI Lock.”
9. Go with “Apply” and then “OK.”

Change Registry Settings

One more technique of turning on the Local Security Authority is via the Registry Editor. Although vigilantly deal with each step to avoid any system malfunctions. Additionally, this method also worked for some Reddit users.

These are the exact steps you should perform:

1. Execute the code “regedit” in the “Run” box.
2. Type the address “Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa” in the “Address Bar.”

   

3. Now, right-click on the black part of this screen and choose “New.”
4. Pick “DWORD (32bit) Value” from the following mini-menu.
5. Name the folder “RunAsPPL.”
6. Repeat this to create another folder, “RunAsPPLBoot.”

   

7. Next, click on each of these folders and pick “2” in the “Value Data” section.

   

8. Restart your computer.

Also Read: Windows 11: Computer Won’t Wake Up From Sleep

Undo Windows Updates

Faulty Windows updates can also be responsible for interfering with LSA’s running on the system. Besides, some users reported receiving the error message after installing Windows updates, so we tested undoing those updates, and it seemed to work.

Use these instructions to uninstall Windows updates:

1. Head to the “Settings” and open the “Windows Update” tab.
2. Select “Update History.”
3. Scroll down and pick “Uninstall Updates.”

   

4. Right-click the topmost Windows update and click “Uninstall.”

   

5. Process with the uninstallation with “Yes.”
6. Lastly, pick “Restart Now.”

Use Windows PowerShell

Several users reported that running a certain code in PowerShell instantly helped fix the issue. So, we tried the fix, and it worked. Enter this code as it is into the PowerShell box:
reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPL /t REG_DWORD /d 2 /f;reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPLBoot /t REG_DWORD /d 2 /f; 

Related Articles:

• How To Solve Windows Security Certificate Error
• How To Fix Windows Update Error 0xc1900204
• How To Fix Windows Update Error 0x800f0922

Arsalan Shakil

[Errors Troubleshooting Expert]

Arsalan Shakil (aka GuyThatDoesEverything on YouTube) is a PC Tech Enthusiast and Electronic Geek. With over 10+ years of experience in Electronics, he then decided to explore Software Engineering to design embedded products and automate existing hardware solutions. 

When he started tearing down old cameras to understand how they worked, he was shocked (literally, when he got zapped by a flash discharge capacitor), giving him the power (debatable) to fall in love with videography/photography. He also started making some fun videos that later became YouTube tech reviews.

Skills:

• 10+ years of experience in Electronics design, embedded solutions, and prototyping
• Majored in Software Engineering
• Research paper publication in IEEE for Embedded Military Uniform & LoRa WAN wireless technology
• Specialized in IoT Solutions
• PC Enthusiast & PC Modder

In his local region, he’s known to expose cheap PSU brands, often claiming fake certification or false claims on the box. He’s a true nerd and needed some friends in his life. Then he met some guys who work at Tech4Gamers, and they also came out to be equal nerds who suggested he join Tech4Gamers as a Hardware Expert.