FIXED: Local Security Authority Protection Is Off In Windows 11

See full bio

Uzair Shabir

At Tech4Gamers, I’m a Senior Error Fix Writer specializing in troubleshooting problems. Each article results from deep research, testing fixes and providing solutions.

See full bio

The message “Local Security Authority Protection Is Off” on Windows 11 may indicate potential security vulnerabilities due to corrupt Windows updates, inaccurate LSA configurations, and more. On the other hand, repairing and resetting the Windows Security app and updating the Windows are quick ways to resolve the issue.

The issue in Windows 11 may stem from various causes, including faulty or corrupt Windows updates, system file corruption, temporary glitches or bugs, malware or virus presence, and others. Addressing these potential issues can help resolve the problem.

Those who face the issue will see the following message on the screen:

Method Difficulty Rating

Verify The Warning

We found that sometimes, this message may be a false warning about LSA being turned off. Hence, we need to verify if the problem exists. Users on Kaspersky Foum used this method. These are the steps to verify the warning:

1. Go to Applications And Services Logs: Launch the “Event Viewer” app > navigate to “Applications And Services Logs.”

   

2. Go to Windows: Select “Microsoft” > “Windows.”
3. Local Security Authority: Proceed to find “Local Security Authority.”
4. Event ID: Look for the Event ID 5004. Its presence means that LSA is enabled, and you get a false warning.

Enable Local Security Authority

Before trying anything, ensure that the LSA is enabled and you did not mistakenly turn it off on your system. If you are getting the error message despite LSA being active, we advise you to ignore it. On Windows Eleven Forum users enabled and double-checked their LSA status using the following steps: 

1. Device Security: Search “Windows Security” in Windows Search and open the results > Go to “Device Security” on the left pane.
2. Core Isolation: Click the “Core Isolation Details” button under the “Core Isolation” heading.

   

3. Local Security Authority Protection: Turn on “Local Security Authority Protection” via the toggle switch.

   

4. Yes: Hit “Yes” in the UAC dialog box.

Use Local Group Policy Editor

Alternatively, we used the Local Group Policy Editor to enable LSA and configure the correct settings. The interface lets you configure crucial Windows processes and services. Hence, we noted the error message was gone after activating the LSA Group Policy, and users on the Malware Tips forum reported it. Follow the steps below for this fix:

1. Windows+R: Access the “Run” menu with the “Windows+R” keys.
2. Search: Search for “gpedit.msc.”
3. Go To System: Click on “Administrative Templates” under “Computer Configuration” >  “System.”
4. Local Security Authority: Pick “Local Security Authority.”

   

5. Configure: Come to the right side of this screen and right-click > “Configure LSASS To Run As A Protected Process.”

   

6. Choose Enabled With UEFI Lock: Choose “Enabled” > In the “Options” drop-down, > “Enabled With UEFI Lock.”
7. Apply: Go with “Apply” > “OK.”

Change Registry Settings

One more technique of turning on the Local Security Authority is via the Registry Editor. However, vigilantly deal with each step to avoid any system malfunctions. This technique was used by different users on the SuperUser Forum. These are the exact steps you should perform:

1. Execute Code: Go to the “Run” box > Execute the code “regedit” 
2. Type: Type the address “Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa”  in the “Address Bar.”

   

3. Select New: Now, right-click on the black part of this screen > “New.”
4. Name Folder: Pick “DWORD (32bit) Value” from the following mini-menu > Name the folder “RunAsPPL.”
5. Repeat: Repeat this to create another folder, “RunAsPPLBoot.”

   

6. Pick Value Data: Next, click on these folders and pick “2” in the “Value Data” section.

   

7. Restart: Restart your computer.

Undo Windows Updates

Faulty Windows updates can also interfere with LSAs running on the system. Besides, some users reported receiving the error message after installing Windows updates, so we tested undoing those updates, and it seemed to work. Users on the Tech Support Forum told each other to undo the updates to avoid this problem. Use these instructions to uninstall Windows updates:

1. Go To Update History: Head to the “Settings” >  “Windows Update” tab >  “Update History.”
2. Uninstall Updates: Scroll down and pick “Uninstall Updates.”

   

3. Uninstall: Right-click the topmost Windows update > “Uninstall.”

   

4. Restart: Process with the uninstallation with “Yes” > Lastly, pick “Restart Now.”

Final Thoughts

After detailed research, I found that, to avoid the “Local Security Authority Protection Is Off” issue in Windows 11, promptly address causes such as corrupt updates, system files, malware, or incorrect configurations. Users have been reporting this issue on different forums, mainly Twitter.

Windows 11 incorrectly warns Local Security Authority protection is off !!! @MicrosoftStore @Windows @MicrosoftHelps @Windows pic.twitter.com/8TCumI5YJf

— souchik joardar (@joardar_souchik) May 5, 2023

Regularly updating Windows is crucial to maintaining system security and stability, ensuring a seamless computing experience. Hopefully, windows come up with something through which this issue no longer arises. Until then, you will have to work around the error using this guide. 

Related Articles:

• How To Solve Windows Security Certificate Error
• How To Fix Windows Update Error 0xc1900204
• How To Fix Windows Update Error 0x800f0922
• How To Get Into BIOS [Windows 11]
• Windows 11: Choose Where To Get Apps Missing

Uzair Shabir

[Error Fix Expert]

Hello, I’m Uzair Shabir, a tech enthusiast pursuing a Bachelor’s in Electrical Engineering. At Tech4Gamers, I’m an Error Fix Expert, crafting articles on different issues and how to fix them. With a Google IT Support Certificate, I navigate tech complexities to deliver insightful perspectives.

Get In Touch: UzairShabir@tech4gamers.com