Local Security Authority Protection toggle not showing up

984 Views 19 Replies 4 Participants Last post by bravepills, 17 d ago

bravepills

Discussion Starter · 19 d ago (Edited)

Hi.

So when I boot Windows the security shield shows a yellow triangle. So I click on it and it says under Device Security:

'Local Security Authority Protection is off. Your device may be vulnerable'.

I have 2 options, 'go to settings' or dismiss. When I go to the settings I have no option at all to turn it on (image below). I have read that this is a Windows bug, and that it actually is on, but how do I fix the warning? I checked in BIOS and TPM is turned on. I tried running Get-AppPackage Microsoft.SecHealthUI in powershell but that didn't help. Any ideas?

Font Rectangle Multimedia Screenshot Display device

See less See more

1 - 20 of 20 Posts

Corday

· #2 · 19 d ago

Did you intstall this week's Windows Update?

spunk.funk

· #3 · 18 d ago

You can try these options: https://www.elevenforum.com/t/enabl...authority-lsa-protection-in-windows-11.11104/

bravepills

Discussion Starter · #4 · 18 d ago

Corday said:
Did you intstall this week's Windows Update?

Think so, had an update about 2 days ago.

Corday

· #5 · 18 d ago

Did the problem start then?

Corday

· #6 · 18 d ago

Since you've gone off line and the problem didn't coincide with the update, open and make a copy of the Registry . Navigate to Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa > double-click RunAsPPL > Change the value to 1> OK >Reboot

bravepills

Discussion Starter · #7 · 18 d ago

Corday said:
Did the problem start then?

No, problem existed before the update.

bravepills

Discussion Starter · #8 · 18 d ago

spunk.funk said:
You can try these options: https://www.elevenforum.com/t/enabl...authority-lsa-protection-in-windows-11.11104/

I tried the 2nd option, which was reg edit the LSA folder. I added the DWORD stuff manually (and like a fool I totally forgot to backup first!).

OK, so now the security shield has a green tick, so I must have done it right, I think, so thank you for that.

So Windows is happy, but it still doesn't have the LSA toggle option?

Do I need to do anything else or is everything ok now?

Corday

· #9 · 18 d ago

Green means you're good to go. I'm not positive the toggle still exists depending on the Windows version.

bravepills

Discussion Starter · #10 · 18 d ago

Corday said:
Green means you're good to go. I'm not positive the toggle still exists depending on the Windows version.

Oh OK. So as long as the shield is ticked it doesn't matter about the toggle? (Not that I would turn it off).

Strange because I've seen screen shots online in the same security window with the toggle, I assumed me not having it was part of the problem!

spunk.funk

· #11 · 18 d ago

Toggle may have been removed if you have done a major update recently.
If the icon has a Green check mark, Windows is happy, and so should you be.

Gary R

· #12 · 18 d ago

Navigate to Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa > double-click RunAsPPL > Change the value to 1> OK >Reboot

Which version of W11 are you using, because if it's 22H2, then the RunAsPPL value should be 2.

To check which version, open Search and type winver

bravepills

Discussion Starter · #13 · 18 d ago

spunk.funk said:
Toggle may have been removed if you have done a major update recently.
If the icon has a Green check mark, Windows is happy, and so should you be.

Thanks for your help

Reactions: 1

bravepills

Discussion Starter · #14 · 18 d ago

Gary R said:
Which version of W11 are you using, because if it's 22H2, then the RunAsPPL value should be 2.

To check which version, open Search and type winver

I did do hex value 2 on RunAsPPL and RunAsPPLBoot.

I will check version later when at my pc.

Cheers.

bravepills

Discussion Starter · #15 · 17 d ago

Gary R said:
Which version of W11 are you using, because if it's 22H2, then the RunAsPPL value should be 2.

To check which version, open Search and type winver

Windows version is 22H2 (OS Build 22621.1702)

bravepills

Discussion Starter · #16 · 17 d ago

OK guys, thanks for all your help, I will mark this as solved.

(unfortunately I don't know how to, so if a mod wants to or something?)

Corday

· #17 · 17 d ago

2

Use the triple dot menu at the very top of the topic, which is only visible to the Original Poster (OP) that started a topic:

Font Rectangle Circle Magenta Number

And, once activated, choose Edit thread.

You'll then be presented with a dialog to edit your Title. Change 'No Prefix' to [Solved]:

Product Rectangle Azure Font Parallel

Finally, activate that Save button to save the change in the topic title.

See less See more

bravepills

Discussion Starter · #18 · 17 d ago

Ye, but there is no 'prefix' to change, I can only change title.

Font Rectangle Screenshot Software Parallel

See less See more

Corday

· #19 · 17 d ago

Someone already marked it the way it is. Next time you'll apply the method shown in Post #17

bravepills

Discussion Starter · #20 · 17 d ago

Corday said:
Someone already marked it the way it is. Next time you'll apply the method shown in Post #17

I marked it that way.

Reactions: 1

1 - 20 of 20 Posts