How to Fix Local Security Authority Protection Off Issue in Windows 11

A Deep Dive into Fixing the “Local Security Authority Protection is Off” Error in Windows

The "Local Security Authority protection is off" error can certainly be alarming for Windows users. Thankfully, with some diligence and patience, we can get to the bottom of this issue. In this guide, we’ll cover common causes, troubleshooting steps, and potential solutions so you can rest assured your device is secure.

What Triggers This Concerning Notification?

Before jumping into fixes, let’s first understand what causes Windows to display this warning.

Windows Update Bugs

Microsoft themselves have acknowledged that recent Windows updates are tied to this error popping up erroneously. Specifically, an issue in KB5007651, an update for Windows Security, causes false "Local Security Authority protection is off" warnings even when protection is enabled.

How do I enable LSA protection in Windows 11?

Ensure you are signed in as an administrator to enable the additional protection for Local Security Authority in Windows 11. Check your Windows Security app to enable LSA protection. Ensure that your CPU virtualization is turned on.

How to turn on LSA in Windows 11?

1. Turn On LSA in Windows 11 Using Windows Security Settings Windows Security holds tools and features that constantly monitor and help protect your Windows PC from viruses, malware, and other security threats. It also includes enabling and changing Windows Local Security Authority (LSA) process. Here’s how to do it.

Faulty Third-Party Software

Sometimes, newly installed or faulty third-party programs can tamper with Windows Security settings. This leads to LSA protection being disabled without the user’s intent.

High CPU Usage

On occasion, Windows may proactively turn off LSA protection if the CPU is under heavy strain. Once resources free up, it usually automatically re-enables protection. However, sometimes the OS fails to do so, resulting in the warning.

Cybercriminal Activity

In worst case scenarios, cybercriminals may have compromised the device and manually disabled LSA protection to make the machine vulnerable to further attacks.

Troubleshooting the “Local Security Authority Protection is Off” Notification

With various potential causes, getting to the root of the problem requires some troubleshooting. Here are systematic steps to deal with this error message:

1. Check for False Positives

First, we need to rule out false positives. Verify in the Event Viewer if LSA protection is actually enabled. Sometimes, Windows falsely triggers the alert even when protection is on.

2. Install Pending Updates

If the warning persists, next install all pending Windows updates. Microsoft periodically releases fixes addressing this exact issue.

How do I fix local security authority protection is off?

A Microsoft representative confirmed to a user that it was aware of the problem. To fix “Local Security authority protection is off. Your device may be vulnerable”, follow these steps: Open Windows Registry Editor. Navigate to the following location: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

How to enable local security authority in Windows 11?

You must be signed in as an administrator to enable the additional protection for Local Security Authority in Windows 11. Before you begin, make sure that you have installed the updates fro your Windows 11 OS and Microsoft Defender. is a built-in tool in Windows that constantly monitors the system for viruses, malware, and other security threats.

3. Scan for Malware

It’s also prudent to run a full malware scan using Windows Security. This will detect if any viruses or rootkits have tampered with the LSA protection settings.

4. Uninstall Recent Program Installations

If the previous steps don’t solve the problem, uninstall any software, drivers, or Windows updates installed in the past couple of weeks. Revert back to a restore point before the issue started occurring.

5. Enable LSA Protection

If all else fails, try manually turning on LSA protection in Windows Security. Navigate to "Device Security," then under "Core Isolation Details," enable "Memory Integrity" and "Virtualization Based Security".

Seeking Automated Solutions

If you need a faster, automated way to enable LSA protection, third-party system utilities like Advanced System Optimizer offer the option. This simplifies the process immensely compared to tedious manual tweaking.

Why is the Windows security app showing ‘local security authority protection is off’?

Some users have reported that the Windows Security app is showing “Local Security authority protection is off. Your device may be vulnerable” warnings when the feature is enabled. This bug is in Windows Defender (KB5007651), a mandatory security update shipped alongside Windows 11’s March 2023 Update.

Why is local security authority protection not working in Windows 11?

If you experience Local Security Authority protection not working in Windows 11, try to change the value of RunAsPPL and RunAsPPLBoot in the Windows Registry.

How do I enable local security authority (LSA) protection without UEFI lock?

1 Open Windows Terminal (Admin), and select Command Prompt. 2 Copy and paste the command below you want to use into Windows Terminal (Admin), and press Enter. Turn On Local Security Authority (LSA) Protection without UEFI Lock This is the default setting.

What if local security authority protection is not turning on or grayed out?

If the Local Security Authority protection setting is not turning on or grayed out in Windows Security, you can always follow the Registry Editor and Local Group Policy Editor methods to turn it on. You must know that it requires you to sign into your Administrator account in order to modify the respective setting.

Stay Vigilant Against Future Occurrences

Considering Microsoft themselves have confessed Windows updates can trigger this error, it may return even after fixing it. When the warning pops up again, don’t panic. Just use the above troubleshooting guide to get LSA protection re-enabled pronto. Also, be sure to install Windows updates as soon as they become available to benefit from the latest bug fixes.

The "Local Security Authority protection is off" notification can be unnerving, but some targeted troubleshooting will get Windows Security back on track. Now you’re armed with the knowledge to tackle this issue should it arise. Share your experience in the comments below!

References

1. https://www.systweak.com/blogs/fix-local-security-authority-protection-off/
2. https://www.makeuseof.com/local-security-authority-protection-off-security-windows/

How to fix windows 11 local security authority protection is off?

In addition, you can try to edit Windows Group Policy to solve Windows 11 Local Security Authority protection is off. Note that only Pro and higher support this way and Home Edition doesn’t have Local Group Policy Editor. Step 1: Type group policy in the search box and click Edit group policy.

How do I enable local security on Windows 11?

You can use it to manage security features on your Windows 11 device, including the Local Security Authority protection. Click on the Windows search bar and type ‘windows security’. option at the top of the search results. prompt that appears. Reboot your PC to apply the changes.