Note about Local Security Authority (LSA) Protection - yellow bam! issue


TVeblen

TVeblen

Well-known member
Member
VIP
Local time
2:19 AM
Posts
285
OS
Windows 11 Pro 23H2
I had the yellow bam! on my Windows Security shield in the systray after the latest cumulative update, warning about Local Security Authority (LSA) Protection being off like so many others.
I never did anything to resolve that - the registry fix posted by Brink below - because I'm working on another problem and I don't like to add more variables to the mix, so I was waiting.

www.elevenforum.com

Enable or Disable Local Security Authority (LSA) Protection in Windows 11 Tutorial

Core isolation is a security feature of Microsoft Windows that protects important core processes of Windows from malicious software by isolating them in memory. It does this by running those core processes in a virtualized environment. Windows 11, version 22H2 supports additional protection for...
www.elevenforum.com www.elevenforum.com

Yesterday the bam! disappeared on it's own. Local Security Authority (LSA) Protection is still OFF, but I no longer get any warning on that - in the Systray or in the Core Isolation settings.
Normal behavior?
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    Intel i7-13700K
    Motherboard
    MSI PRO Z790-A WiFi
    Memory
    Corsair Vengence 5600 - 32GB
    Graphics Card(s)
    MSI RTX3060 Ventus 2x 12GB
    Sound Card
    On board - Realtek ALC4080
    Monitor(s) Displays
    LG 27GL850
    Screen Resolution
    2560 x 1440
    Hard Drives
    WD Black SN850X Nvme - 1TB
    WD Black 6TB HDD 256MB cache CMR
    WD Black 6TB HDD 128MB cache CMR
    PSU
    Corsair RM850x
    Case
    Fractal Design - Define 7
    Cooling
    Deepcool AK400
    Keyboard
    MS KC0405
    Mouse
    MS Model 1113 / MS Wireless Mobile Mouse 3500
    Internet Speed
    940 Mbps
    Browser
    Firefox
    Antivirus
    Windows Security
    Other Info
    I have a Case Speaker!
    I have a Blueray Disk drive!
  • Operating System
    Windows 10 Pro 22H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    i7-9700K
    Motherboard
    Asus Prime Z390-A
    Memory
    Corsair Vengence 32GB
    Graphics card(s)
    EVGA GTX1060
    Sound Card
    On Board
    Monitor(s) Displays
    Acer 27"
    Screen Resolution
    1920 x 1080
    Hard Drives
    WD Black Nvme 500GB
    Toshiba X300 5TB
    PSU
    Corsair RM850x
    Case
    Antec P101 Silent
    Cooling
    CoolerMaster Hyper T4
    Mouse
    Logitec M-U0007
    Keyboard
    MS KC0405
    Internet Speed
    940 Mbps
    Browser
    Firefox
    Antivirus
    Avast!
    Other Info
    I have a Case Speaker!
I did do the reg edit, because after manually sliding the slider to ON, a 'Restart Needed' did not disappear after several restarts.

Things look good now, see pic below, but after reading a couple of cases, I have the feeling that I should not have done the reg edit. But now that I have done the reg edit I have the feeling that I should not be doing anything further either.

All in all, I suggest to leave things alone for a couple of WUs.

Screenshot 2023-03-18 091451.png
 

My Computer

System One

  • OS
    Windows 10 Pro
I turned the slider on and did the registry change. I'm still getting the security warning after several reboots.
 

My Computer

System One

  • OS
    Windows 11 Home 22H2 build 22621.1413
    Computer type
    Laptop
    Manufacturer/Model
    HP14
    CPU
    AMD Rysen 5 3500U
    Motherboard
    HP
    Memory
    8GB
    Graphics Card(s)
    Radeon Vega mobile
    Screen Resolution
    1920x1080
    Hard Drives
    256GB SSD
    Mouse
    Wireless Logitech
    Internet Speed
    36Mbps download FTTC TalkTalk
    Browser
    Firefox
    Antivirus
    Windows Defender
    Other Info
    HP14 Win11 laptop, old HP15 Win10 laptop, old Lenovo Win10 desktop, Linux Mint 11" notebook
silvatel said:
I turned the slider on and did the registry change. I'm still getting the security warning after several reboots.
Click to expand...

Hello, and welcome. :-)

As a test, try step 4 in option 4 below to see if may sort this for you via a policy instead.

www.elevenforum.com

Enable or Disable Local Security Authority (LSA) Protection in Windows 11

This tutorial will show you how to enable or disable Local Security Authority (LSA) protection for all users in Windows 11. Core isolation is a security feature of Microsoft Windows that protects important core processes of Windows from malicious software by isolating them in memory. It does...
www.elevenforum.com www.elevenforum.com
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender
Brink said:
Hello, and welcome. :-)

As a test, try step 4 in option 4 below to see if may sort this for you via a policy instead.

www.elevenforum.com

Enable or Disable Local Security Authority (LSA) Protection in Windows 11

This tutorial will show you how to enable or disable Local Security Authority (LSA) protection for all users in Windows 11. Core isolation is a security feature of Microsoft Windows that protects important core processes of Windows from malicious software by isolating them in memory. It does...
www.elevenforum.com www.elevenforum.com
Click to expand...
Hi Brink. Thanks - that has fixed the warning. I'm not sure what else it's done to my machine, if anything, but I'm happy to fix that annoying little Windows security issue.

Having just joined, I'll post a proper introduction somewhere appropriate and upload a suitable avatar.

Thanks again. Much appreciated. :-)
 

My Computer

System One

  • OS
    Windows 11 Home 22H2 build 22621.1413
    Computer type
    Laptop
    Manufacturer/Model
    HP14
    CPU
    AMD Rysen 5 3500U
    Motherboard
    HP
    Memory
    8GB
    Graphics Card(s)
    Radeon Vega mobile
    Screen Resolution
    1920x1080
    Hard Drives
    256GB SSD
    Mouse
    Wireless Logitech
    Internet Speed
    36Mbps download FTTC TalkTalk
    Browser
    Firefox
    Antivirus
    Windows Defender
    Other Info
    HP14 Win11 laptop, old HP15 Win10 laptop, old Lenovo Win10 desktop, Linux Mint 11" notebook
silvatel said:
Hi Brink. Thanks - that has fixed the warning. I'm not sure what else it's done to my machine, if anything, but I'm happy to fix that annoying little Windows security issue.

Having just joined, I'll post a proper introduction somewhere appropriate and upload a suitable avatar.

Thanks again. Much appreciated. :-)
Click to expand...

That's great news, and you're most welcome. That option used a policy to force it with tamper protection.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    CyberPower CP1500PFCLCD
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Surface Laptop 7 Copilot+ PC
    CPU
    Snapdragon X Elite (12 core) 3.42 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Monitor(s) Displays
    15" HDR
    Screen Resolution
    2496 x 1664
    Hard Drives
    1 TB SSD
    Internet Speed
    Wi-Fi 7 and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender
Haydon said:
I did do the reg edit, because after manually sliding the slider to ON, a 'Restart Needed' did not disappear after several restarts.

Things look good now, see pic below, but after reading a couple of cases, I have the feeling that I should not have done the reg edit. But now that I have done the reg edit I have the feeling that I should not be doing anything further either.

All in all, I suggest to leave things alone for a couple of WUs.
Click to expand...
I'm liking that advice!
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    Intel i7-13700K
    Motherboard
    MSI PRO Z790-A WiFi
    Memory
    Corsair Vengence 5600 - 32GB
    Graphics Card(s)
    MSI RTX3060 Ventus 2x 12GB
    Sound Card
    On board - Realtek ALC4080
    Monitor(s) Displays
    LG 27GL850
    Screen Resolution
    2560 x 1440
    Hard Drives
    WD Black SN850X Nvme - 1TB
    WD Black 6TB HDD 256MB cache CMR
    WD Black 6TB HDD 128MB cache CMR
    PSU
    Corsair RM850x
    Case
    Fractal Design - Define 7
    Cooling
    Deepcool AK400
    Keyboard
    MS KC0405
    Mouse
    MS Model 1113 / MS Wireless Mobile Mouse 3500
    Internet Speed
    940 Mbps
    Browser
    Firefox
    Antivirus
    Windows Security
    Other Info
    I have a Case Speaker!
    I have a Blueray Disk drive!
  • Operating System
    Windows 10 Pro 22H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    i7-9700K
    Motherboard
    Asus Prime Z390-A
    Memory
    Corsair Vengence 32GB
    Graphics card(s)
    EVGA GTX1060
    Sound Card
    On Board
    Monitor(s) Displays
    Acer 27"
    Screen Resolution
    1920 x 1080
    Hard Drives
    WD Black Nvme 500GB
    Toshiba X300 5TB
    PSU
    Corsair RM850x
    Case
    Antec P101 Silent
    Cooling
    CoolerMaster Hyper T4
    Mouse
    Logitec M-U0007
    Keyboard
    MS KC0405
    Internet Speed
    940 Mbps
    Browser
    Firefox
    Antivirus
    Avast!
    Other Info
    I have a Case Speaker!
Haydon said:
I did do the reg edit, because after manually sliding the slider to ON, a 'Restart Needed' did not disappear after several restarts.

Things look good now, see pic below, but after reading a couple of cases, I have the feeling that I should not have done the reg edit. But now that I have done the reg edit I have the feeling that I should not be doing anything further either.

All in all, I suggest to leave things alone for a couple of WUs.

View attachment 55647
Click to expand...
I was sitting on the fence since I had the issue for some time, but I installed the latest update, did the registry hack afterwards and everything looks good now. OCDC urges all satisfied! :D
 

My Computer

System One

  • OS
    Windows 11 Pro 23H2
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo IdeaPad L340
    CPU
    Intel Core i3-8145U
    Memory
    16GB
    Hard Drives
    500 GB M2 1 TB HDD
    Internet Speed
    400 MB
    Browser
    Chrome | Edge
    Antivirus
    Microsoft Defender | Block unknown executables | Various ASR rules enabled
You must log in or register to reply here.

Similar threads

  • Article Article
Privacy and Security Verify Local Security Authority (LSA) Protection in Windows 11
Replies
0
Views
6K
Brink
Brink
Solved Local Security Authority protection warning - legitimate, or false-positive?
Replies
1
Views
3K
safron
safron
Solved Local Security Authority protection warning - legitimate, or false-positive?
Replies
19
Views
8K
safron
safron
  • Article Article
Privacy and Security Enable or Disable Local Security Authority (LSA) Protection in Windows 11
10 11 12
Replies
231
Views
205K
Tester
Tester

Latest Support Threads

Latest Tutorials

Back
Top Bottom