LSA option missing completely

GhostryderID · May 5, 2023

Windows 11 Home, build 22621.1635
Ryzen 5900x & X570mb with TPM 2.0 & SVM enabled

I've found and read several threads about issues with Core Isolation and LSA in Win 11, but I'm not finding this specific issue or a resolution. I noted the security warning on my system today about Core Isolation not being turned on, so I went into the BIOS and enabled SVM, logged back into Windows and turned core isolation memory integrity on, however I am still getting a security warning that LSAP is turned off. Problem is, I don't even have an LSAP option to turn on. I've seen screenshots and it should be right below Core Isolation, but it is completely MIA and I can't find it anywhere else, but this security warning about it is ever present.

Anybody else run into this and are there any resolutions? I've searched extensively and cannot find this specific issue anywhere else.

What I have on my Core Isolation settings screen

What I should apparently see?

Brink · May 5, 2023

Hello, and welcome.

This was a known issue when trying to turn on LSA from Windows Security. It shows as resolved as of 5/03/2023, but some are still having the same issue, and nothing to worry about.

Known and Resolved issues for Windows 11 version 22H2

Windows message center: https://www.elevenforum.com/t/windows-11-version-22h2-end-of-servicing-on-october-08-2024.26638/ Current status as of September 26, 2023 Microsoft is delivering a new wave of continuous innovation to eligible Windows 11, version 22H2 devices with new experiences and AI...

www.elevenforum.com

You can use option 2 or 4 in the tutorial below to enable LSA again without the warning. Currently the LSA setting is missing in Windows Security since Build 22621.1635.

Enable or Disable Local Security Authority (LSA) Protection in Windows 11

This tutorial will show you how to enable or disable Local Security Authority (LSA) protection for all users in Windows 11. Core isolation is a security feature of Microsoft Windows that protects important core processes of Windows from malicious software by isolating them in memory. It does...

www.elevenforum.com

GhostryderID · May 5, 2023

Good grief, I should be used to MS breaking windows with every release. Not sure why I am surprised. I did see that tutorial but wasn't sure if it applied to my situation, since my option isn't stuck, it isn't even there! I will give those a whirl. Thanks.

GhostryderID · May 5, 2023

Did option 2 and traded one problem for another, now I've got the driver cannot load error I've seen in some posts. Back to digging for solutions. Grrr.

Brink · May 5, 2023

Do you mean Memory Integrity below for the driver cannot load error?

Enable or Disable Core Isolation Memory Integrity in Windows 11

This tutorial will show you how to turn on or off core isolation memory integrity in Windows 11. Core isolation is a security feature of Microsoft Windows that protects important core processes of Windows from malicious software by isolating them in memory. It does this by running those core...

www.elevenforum.com

GhostryderID · May 5, 2023

Negative, sorry. I had seen it on several threads (that I cannot find now) so I thought it was a common error. This one, which comes up on reboot now since using the registry file to turn LSA on using UEFI.

Brink · May 5, 2023

If it helps, the ene.sys driver is associated to RGB lighting control on your PC. It could be part of a keyboard or mouse utility program.

Bree · May 5, 2023

Brink said:
This was a known issue when trying to turn on LSA from Windows Security. It shows as resolved as of 5/03/2023, but some are still having the same issue, and nothing to worry about.

I have just had an update for Windows Security....

...and Windows Security now informs me wherever possible that I have a problem with LSA.

But clicking on any of the links provided takes me to a Core Isolation page that is devoid of any mention of LSA !

Brink · May 5, 2023

@Bree,

It seems that the LSA setting is missing in Windows Security since Build 22621.1635. Most likely from that security update.

GhostryderID · May 5, 2023

Bree said:
I have just had an update for Windows Security....

My Antimalware Client Version is older than yours at 4.18.2201.11 (no update available yet), but that is the exact issue I had. Getting the LSA is turned off warning, but no LSA option anywhere to turn on. I would say use caution on turning it on via the registry changes, because now I am getting a driver cannot load error, and am having to track down what driver is having issue. (The error is devoid of any useful information to help ID the offending driver and windows update thinks all my drivers are fine).

Fabler2 · May 5, 2023

@Bree , it's odd that we get different application versions and service versions running the same AV

I don't have LSA showing but have 'Kernel-mode Hardware-enforced Stack Protection' and no warnings.
EDIT, also have Memory access protection.

GhostryderID · May 5, 2023

Brink said:
If it helps, the ene.sys driver is associated to RGB lighting control on your PC. It could be part of a keyboard or mouse utility program.

I only have 2 devices with RGB control, my Logitech keyboard (G-Hub) and my AIO cooler (iCUE). I have uninstalled both programs, restarted, reinstalled and rebooted again and I am still getting the "A driver cannot load on this device Driver: ene.sys" error. Thank you for trying though.

Fabler2 said:
@Bree , it's odd that we get different application versions and service versions running the same AV

View attachment 59495
I don't have LSA showing but have 'Kernel-mode Hardware-enforced Stack Protection' and no warnings.
EDIT, also have Memory access protection.

Different updates being pushed out to different people on different days? I also do not have the Kernel-mode Hardware-enforced Stack Protection information on my core isolation page.

I guess I'll quit fiddling with this and wait for MS to unbork it (and bork something else instead) with the next release.

Brink · May 5, 2023

In that case you could try to use option six in the tutorial below to uninstall the "ene.sys" driver with Autoruns.

Uninstall Driver in Windows 11

This tutorial will show you how to uninstall a driver for a device in Windows 10 and Windows 11. When a device is connected to your PC, Windows will usually automatically install drivers for it, or you may have to manually install the device's driver software. Sometimes it might be necessary...

www.elevenforum.com

bvrbvt0s · May 6, 2023

I have seen this notif about LSA being "off". But mine is missing LSA as well. i found a solution that worked for me, you might want to try it too. but take note: create a restore poit first before doing this:

Go to RUN
type "regedit" (if it is not on default)
then, enter
this should be the address: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
look for RunAsPPL & RunAsPPLBoot on the right column. right click and modify, change the value to '2' (both)
if you can't find them, you can create by right-clicking on the blank space of the right column
click 'New', then select 'DWORD'
rename it to RunAsPPL, then right click on it, then change value to '2'
do the same thing to create RunAsPPLBoot, make the value '2' also then restart.

the notif should be non-existent after that. hope it works for you too. I'm also using AMD Ryzen 5000 series on Asus Vivobook 15

bvrbvt0s · May 6, 2023

GhostryderID said:
Windows 11 Home, build 22621.1635
Ryzen 5900x & X570mb with TPM 2.0 & SVM enabled

I've found and read several threads about issues with Core Isolation and LSA in Win 11, but I'm not finding this specific issue or a resolution. I noted the security warning on my system today about Core Isolation not being turned on, so I went into the BIOS and enabled SVM, logged back into Windows and turned core isolation memory integrity on, however I am still getting a security warning that LSAP is turned off. Problem is, I don't even have an LSAP option to turn on. I've seen screenshots and it should be right below Core Isolation, but it is completely MIA and I can't find it anywhere else, but this security warning about it is ever present.

Anybody else run into this and are there any resolutions? I've searched extensively and cannot find this specific issue anywhere else.

View attachment 59476
What I have on my Core Isolation settings screen
View attachment 59478

What I should apparently see?
View attachment 59479

I have seen this notif about LSA being "off". But mine is missing LSA as well. i found a solution that worked for me, you might want to try it too. but take note: create a restore poit first before doing this:

Go to RUN
type "regedit" (if it is not on default)
then, enter
this should be the address: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
look for RunAsPPL & RunAsPPLBoot on the right column. right click and modify, change the value to '2' (both)
if you can't find them, you can create by right-clicking on the blank space of the right column
click 'New', then select 'DWORD'
rename it to RunAsPPL, then right click on it, then change value to '2'
do the same thing to create RunAsPPLBoot, make the value '2' also then restart.

the notif should be non-existent after that. hope it works for you too. I'm also using AMD Ryzen 5000 series on Asus Vivobook 15

BlueNightSky · Jun 6, 2023

Hello all, has Microsoft officially repaired this issue? As it stand now, I am having the exact same issue as the OP where Windows 11 is stating that Local Security Authority Protection is off and when I click on the Go To Settings option, there is no LSA option viewable. I have an Intel processor so this isn't related to AMD at least not on my end.

Windows states that I am fully up to date.

Edition Windows 11 Home
Version 22H2
Installed on ‎5/‎31/‎2023
OS build 22621.1778
Experience Windows Feature Experience Pack 1000.22642.1000.0

LSA option missing completely

New member

My Computer

Administrator

My Computers

New member

My Computer

New member

My Computer

Administrator

My Computers

New member

My Computer

Administrator

My Computers

Well-known member

My Computers

Administrator

My Computers

New member

My Computer

Well-known member

My Computers

New member

My Computer

Administrator

My Computers

Member

My Computer

Member

My Computer

Member

Attachments

My Computer

Similar threads