Local Security Authority Protection is Off: A Complete Guide to Fix and Understand the Problem

If you are using Windows 10 or Windows 11 and have seen the message “Local Security Authority Protection is off,” you may wonder what it means and whether it affects your computer’s safety. This guide will explain everything you need to know in simple terms and help you fix the issue step by step.

What is Local Security Authority Protection

Local Security Authority (LSA) Protection is a Windows feature that protects sensitive parts of your operating system. It helps defend your PC from malware and hackers who try to steal your login information. When this protection is enabled, your system becomes much more secure because LSA prevents untrusted software from accessing certain security functions.

Why Does the Message Appear

When you see the message “Local Security Authority Protection is off,” it means this important feature is currently disabled. This could be due to a Windows update, a system bug, or a change in your settings. Even if the protection was previously turned on, something might have disabled it, and now your system wants to alert you.

Why LSA Protection is Important

LSA Protection plays a major role in protecting the credentials on your system. Here is why it matters:

• It helps block tools that try to steal passwords.
• It keeps sensitive processes safe.
• It provides extra protection against viruses and malware.
• It ensures better security in business and personal systems.

If LSA protection is off, your system is more vulnerable to threats.

Common Reasons LSA Protection Turns Off

Here are some common reasons why LSA protection may get turned off:

• A Windows update reset the setting.
• A security software disabled it.
• You changed a setting unknowingly.
• System files became corrupted.
• There is a bug in your Windows version.

Knowing the cause can help you find the right solution.

How to Turn On LSA Protection from Windows Security

The simplest way to enable LSA protection is through the Windows Security app. Here are the steps:

1. Click on the Start menu and open Windows Security.
2. Go to Device Security.
3. Click on Core Isolation Details.
4. Look for Local Security Authority Protection.
5. If it is off, toggle the switch to On.
6. Restart your computer for the changes to take effect.

After restarting, check again to make sure the message is gone.

Using the Registry Editor to Enable LSA Protection

If the Windows Security app does not work or the toggle is missing, you can enable LSA protection manually using the Registry Editor:

Warning: Editing the registry can cause problems if not done correctly. Follow the steps carefully.

1. Press Windows + R to open the Run dialog.
2. Type regedit and press Enter.
3. Navigate to the following location: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
4. On the right pane, look for these two values:
   • RunAsPPL
   • RunAsPPLBoot
5. If they don’t exist, right-click and create a new DWORD (32-bit) value for each.
6. Set both values to 1.
7. Close the registry and restart your computer.

After restarting, LSA protection should be enabled.

Using Group Policy Editor (for Pro and Enterprise Versions)

If you use Windows Pro or Enterprise, you can also use the Group Policy Editor to manage LSA protection:

1. Press Windows + R and type gpedit.msc, then press Enter.
2. Navigate to: Computer Configuration > Administrative Templates > System > Local Security Authority
3. Double-click Configure LSASS to run as a protected process.
4. Set it to Enabled.
5. Restart your computer.

What If LSA Protection Won’t Stay On

Some users find that even after turning it on, the warning keeps showing up. Here are some fixes:

• Run Windows Update to install the latest patches.
• Use the System File Checker tool. Open Command Prompt as admin and type: sfc /scannow
• Check your antivirus or security software to see if it’s interfering.
• Reset the Core Isolation settings and try again.

How to Know If LSA Protection is Really Working

Even if the warning disappears, you may want to confirm LSA protection is active. Here’s how:

1. Press Ctrl + Shift + Esc to open Task Manager.
2. Go to the Details tab.
3. Look for the lsass.exe process.
4. Check the Platform column. If it says “Protected Process Light” or “PPL”, LSA protection is enabled.

You can also use tools like Windows Event Viewer or PowerShell for deeper confirmation, but Task Manager is the easiest for most users.

Keep Your PC Secure After Enabling LSA Protection

Turning on LSA Protection is just one step in keeping your computer safe. Here are a few more tips:

• Keep Windows updated regularly.
• Avoid downloading unknown software.
• Use strong passwords or a password manager.
• Enable other features like Memory Integrity if available.
• Backup your data often.

LSA Protection works best when your system is healthy and updated.

FAQ

1. What does “Local Security Authority Protection is off” mean?

It means a Windows security feature that protects your login and passwords is turned off, making your system less secure.

2. Is it dangerous to keep LSA protection off?

Yes, it can be risky. Without LSA protection, hackers and malware can more easily access sensitive information like your login credentials.

3. Why did LSA protection turn off automatically after an update?

Sometimes, Windows updates or third-party software can reset security settings, which might turn off LSA protection without your knowledge.

4. How can I turn LSA protection back on using Windows settings?

Go to Windows Security > Device Security > Core Isolation Details, and switch Local Security Authority Protection to ON. Then restart your computer.

5. Can I leave LSA protection off if I already use antivirus?

While antivirus helps, LSA protection adds another layer of defense. It is highly recommended to keep it turned on for full security.

Final Thoughts

Seeing “Local Security Authority Protection is off” may seem scary, but it’s a fixable issue. By following the steps in this guide, you can turn LSA protection back on and keep your computer safe from threats. Whether you use the Settings app, Registry Editor, or Group Policy, the methods above are simple and effective. Take action today to boost your Windows security and stay protected.

 

---