Why does Local Security Authority Protection indicate that protection is off when I have it turned on (Windows 11 Pro)?

Jerr- 35 Reputation points

I have a new Lenovo ThinkBook 14 G4 IAP with 12th Gen Intel(R) Core(TM) i7-1255U 1.70 GHz and Windows 11 Pro installed. Windows Security shows that Local Security Authority Protection is off, but it is toggled on and I have restarted the laptop several times.

What do I have to do to get Windows Security to recognize that LSA Protection is on?

Is there something (else) I need to install?

All updates have been installed, however, I noticed that KB2267602 has been installed several times with different version numbers.

Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
5,972 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Limitless Technology 41,191 Reputation points

    Hello there,

    This bug is in Windows Defender (KB5007651), a mandatory security update shipped alongside Windows 11's March 2023 Update. The issue seems widespread, and Microsoft is aware of the reports.

    To fix “Local Security authority protection is off. Your device may be vulnerable”, follow these steps:

    Open Windows Registry Editor.

    Navigate to the following location: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

    Make sure you have RunAsPPL and RunAsPPLBoot. If you don’t have RunAsPPLBoot listed, create DWORD entries for RunAsPPL and RunAsPPLBoot.

    The value for both entries should be 2.

    Hope this resolves your Query !!

    --If the reply is helpful, please Upvote and Accept it as an answer–

    42 people found this answer helpful.

  2. Glenn S 0 Reputation points

    No, because what do you do when you get to the registry? Just restart?