LSA Protection

Andreas 1,301 Reputation points
2022-10-27T13:56:25.23+00:00

Hi,

We are enabling LSA protection: Reference https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection

I am wondering about the following... As I understand if we see any Event 3065 or 3066, then we need to look into that process, because that process will fail if we enable LSA protection. Yet we have not found any of these events, but we do see machines that have event 3033. The event below is from .Net Framework, and this is showing in CodeIntegrity even if we have not enabled LSA protection. When it comes to the 3033 events, do we need to follow these up ? Will applications have problems ?

254805-event.png

Thanks for any reply

/R
Andy

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,083 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,717 questions
0 comments No comments
{count} vote