Local Security Authority is off. Your device may be vulnerable

Question

Local Security Authority is off. Your device may be vulnerable. How do I fix this? I'm on KB5007651 ver. 1.0.2303.28002.

Answer 1

Open Windows Registry Editor.

Navigate to the following location: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

Make sure you have RunAsPPL and RunAsPPLBoot. If you don’t have RunAsPPLBoot listed, create DWORD entries for RunAsPPL and RunAsPPLBoot.

Value for both entries should be 2.

Reboot and warnings should stop

Answer 2

Hi@FrankTurner-3752.

PLEASE NOTE: Backup the registry or create a system restore point before making any changes to the system through the registry editor.

In addition to enabling LSA in the registry, you can also try to enable it locally. The steps are as follows:

1. Click on the Windows search bar and type ‘windows security’.
2. Click on the Windows Security option at the top of the search results.
3. Click on the menu icon to expand the left menu in the Windows Security app.
4. Click on the Device Security option.
5. Click on the Core isolation details link under the Core isolation section.
6. Turn the toggle button On for the Local Security Authority protection option.
7. Click Yes in the User Account Control prompt that appears.
8. Reboot your PC to apply the changes.

Hope the information is helpful.

============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 3

Hello,

See if this fix helps you:

https://www.kapilarya.com/fix-local-system-authority-protection-is-off-in-windows-11

Let us know if this helps!

Note: Included link in this reply refers to blog post by a trusted Microsoft MVP.

Answer 4

how to turn on local security

Answer 5

I do not want to mess with the registry! It's Microsoft's job!