Local Security Authority Protection is Off: 3 Ways to Fix it

If Secure Boot is off, this issue might pop up

Windows 11 » Repair

Reading time icon 3 min. read

Calendar icon Updated on

by Vladimir Popescu 

updated on

Share this article

This article is translated in

Country Flag
Readers help support Windows Report. We may get a commission if you buy through our links. Tooltip Icon

Read our disclosure page to find out how can you help Windows Report sustain the editorial team Read more

local security authority protection is off

Many users reported that Local Security Authority Protection is off on Windows 11 and that can be a problem and leave your PC vulnerable.

Issues with Windows updates can cause this problem and certain security policies. Disabling Safe Boot can also cause this problem.

Before we start, make sure that LSA and CPU virtualization are turned on. Make sure you’re signed in as administrator and enable additional protection for LSA.

How do I turn on Local Security Authority protection?

1. Use the Windows Security app

  1. Press the Windows key to open the Start Menu, type Windows Security in the search box, and press Enter.
  2. From the left pane, choose Device security. Under the Core isolation section, select the Core isolation details option.
  3. Enable the toggle under the Local Security Authority protection section.
  4. Then, click Yes in the UAC prompt that appears.
  5. Restart your PC to apply the changes.

2. Use Registry Editor

  1. Press the Windows + R keys to open the Run dialog box. Type regedit in the dialog box and press Enter.
  2. In the Registry Editor, navigate to the following path: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
  3. Then, double-click on RunAsPPL in the right pane. Change the Value data to 1 (or 2 as some users claim this worked for them) and press Enter.
  4. Repeat step 3 for the RunAsPPLBoot entry. You may create DWORD entries for RunAsPPLBoot and RunAsPPL if you do not have them.
  5. Restart your PC to apply the changes.

3. Via the Local Group Policy Editor

  1. Press the Windows + R keys to open the Run dialog box, type gpedit.msc, and press Enter.
  2. In the Local Group Policy Editor window, navigate to the following path: Computer Configuration\Administrative Templates\System\Local Security Authority
  3. On the right pane of the window, right-click the Configure LSASS to run as a protected process.
  4. Next, click on Enable.
  5. Under Options, select Enabled with UEFI Lock, then click Apply and OK to save the changes.
  6. Restart your device.
Note icon NOTE
Once you have enabled Local Security Authority (LSA) protection and restarted your device at least once, you may dismiss warning notifications and disregard any further notifications requesting a restart.

What happens if Local Security Authority protection is off?

As we outlined above, the LSA protection protects your PC from threats, and if the feature is off, your device is exposed.

Now that you know some factors responsible for disabling the local security authority protection, check out the solutions below to turn it back on.

Some users also claim that signature verification could also be why LSA protection is off. So, if LSA is not signed as expected, you can explore this guide for further assistance.

We also wrote about high Local Security Authority CPU and memory usage in another guide, so don’t miss it.

Before you go, check our dedicated guide to learn what to do if the Local Security Authority Protection option missing. We also have an article explaining why is Local Security Authority trying to access the Internet, so don’t miss it.

And that’s how to re-enable Local Security Authority Protection if it is turned off. If you have any questions or suggestions, please use the comments section below.

More about the topics: Local Security Authority

Vladimir Popescu

Vladimir Popescu Shield

Being an artist his entire life while also playing handball at a professional level, Vladimir has also developed a passion for all things computer-related. With an innate fascination for research and analysis, and realizing many other people share his passion for this subject, he delved into writing Windows-related articles, so other people can also benefit from the acquired information. When not writing kick-ass articles, Vladimir likes to spend his time doing Crossfit and creating art.