Wonder How to Address the “Local Security Authority Protection Is Off” Security Warning on Windows 11? Try These 8 Effective Solutions!

  • 6 mins read
Updated on January 23, 2024

If you’re receiving a warning saying “Local Security Authority Protection Is Off” on Windows 11, addressing it is critical to maintaining the integrity of the system.

This warning typically indicates vulnerabilities that require immediate attention and action to protect your Windows operating system from the possible security risks highlighted by this warning.

Regarding this, it’s important to understand that resolving this issue requires a strategic approach that involves checking your security settings, running malware scans, updating the OS, reviewing system changes, and so on.

So, by exploring the effective solutions in this guide and knowing how to control your IoT devices effectively, you can ensure “how to turn on local security authority protection” and reinforce the overall security of your Windows 11 environment.

On that note, let’s dive into the details—

What Is Local Security Authority Protection, and What Is Its Importance in Windows 11?

Local Security Authority Protection (LSAP) in Windows 11 is a security feature that safeguards crucial system processes. It shields these processes by isolating and controlling their access, preventing unauthorized modifications or attacks.

In simple words, LSAP, within Windows, contributes to improving the overall strength and security of the system by overseeing how its different parts communicate and interact. This oversight helps to strengthen the system’s defenses against possible vulnerabilities or cyberattacks. Being cyber savvy in LSAP and related security measures is crucial for making a system stronger against potential threats.

So, it won’t be wrong to state that this protection mechanism holds immense significance in ensuring the security, stability, and proper functioning of crucial elements within the Windows 11 system.

Without this safeguard, the system’s essential functions could be at risk, potentially compromising the overall stability and security of the entire Windows 11 environment.

What Are the Reasons Behind Receiving the ‘Local Security Authority Protection Is Off’ Notification?

[Note: Regardless of whether the LSAP feature is enabled or disabled on your computer, or you’ve installed the Microsoft Defender Antivirus Version 1.0.2302.21002—the pop-up of the ‘Local Security Authority Protection is off’ notification has been acknowledged by Microsoft as a known issue related to Windows 11 version 22H2.]

The ‘Windows 11 LSA protection is off’ warning notification typically arises due to several key reasons, as listed below—

  • Disabled Security Settings: If the security settings associated with LSAP are turned off (intentionally or accidentally) due to system configuration changes or modifications in security policies, it triggers the warning notification.
  • System Misconfigurations: If you have made changes to the configuration of the system, such as alterations to Group Policies or registry settings, this may result in LSAP becoming disabled, triggering a notification about its status being disabled.
  • Malware Activity: Malicious software, commonly known as malware, can also disrupt system processes, including LSAP. It can either disable LSAP’s functions directly or cause disturbances that prompt the ‘LSAP is off’ warning notification.
  • Incomplete Updates: Sometimes, incomplete or failed updates to the operating system or security software can also cause LSAP to be turned off or encounter errors, leading to the notification.
  • Software Conflicts: Lastly, certain software-specific conflicts or compatibility issues with them can also unintentionally disrupt LSAP, causing it to malfunction or become disabled.

Also, Read to Learn What is a Network Security Key and How to Find It!

How to Fix ‘Local Security Authority Protection Is Off’ Issue?

After knowing what LSAP is and understanding why the ‘LSAP is off’ warning appears, it’s time to address it. There are methods you can consider to fix this issue and restore system security and integrity. Let’s discuss them—

Method 1: Perform Initial Checks

As you start troubleshooting, you first need to ensure that any temporary issues causing the feature to turn off are ruled out. 

So, begin by closing all currently running applications and restarting your device.

Then, access the ‘Windows Security app’ and navigate to ‘Device Security.’ There, you can attempt to activate the LSA protection in the ‘Core isolation settings.’ 

However, if, despite enabling the feature, the warning persists, you can try the process of toggling it off and then on again. Once this is done, make sure to restart your device again.

And, most importantly, it’s necessary to temporarily disable any third-party security software during this troubleshooting process to prevent potential interference.

Method 2: Malware Scans

Since malicious software might also tamper with LSAP, triggering the notification, you need to conduct comprehensive scans using reputable antivirus or antimalware software like malwarebytes and remove them if there are any identified threats.

Method 3: Check the Event Viewer 

At times, the warning could be a false signal triggered by a Windows update glitch. This means the warning could show up even if the LSAP is active and operational.

So, to check if the warning is right or not and to make sure the feature remains activated, follow these steps—

  • Step 1: Press Win + X and select Event Viewer from the menu. Or, you can open the Event Viewer app by searching for Event Viewer in Windows Search.
    Open Event Viewer
  • Step 2: Then, through the left pane, navigate to Applications and Services Logs > Microsoft > Windows > LSA.
    Navigate to Applications and Services Logs > Microsoft > Windows > LSA.” class=”wp-image-1370″></figure></li></ul><ul><li><strong>Step 3:</strong> There, locate the event <strong>ID 5004</strong> linked to LSA protection and confirm its status as enabled and operational.</li></ul><p>However, if you cannot locate an event with this ID in the Event Viewer app, it means that the feature is disabled and in such a case, you need to follow these steps—</p><ul><li><strong>Step 4:</strong> Go back to the left pane to expand <strong>Windows Logs</strong> and click <strong>Security</strong>.<figure class=Expand Windows Logs and click Security.
  • Step 5: Now, look for events related to LSAP, security policy changes, or warnings indicating its deactivation.
    Look for events related to LSAP.
  • Step 6: After that, right-click non-critical events or warnings, choose Clear Log, and confirm to dismiss them if they’re not directly linked to LSAP issues.

Method 4: Update Your Windows 11 OS or Security Software

Afterward, you should verify if there are any pending updates for your operating system or security software. This is because downloading and applying updates can address known vulnerabilities and potential issues related to LSAP.

So, here are the steps to follow—

  • Step 1: Click on the Start menu.
  • Step 2: Then, click on the gear icon for Settings.
    From the Start menu, open Settings.
  • Step 3: After that, select Windows Update from the Settings menu.
    Select Windows Update from the Settings.
  • Step 4: Now, click on Check for Updates and allow the system to search for available updates.
    Click on Check for Updates.
  • Step 5: If updates are available, download and install them to your Windows 11.
  • Step 6: Once you’re done installing, restart the system to complete the update process.

Method 5: Review System Modifications

If you’ve updated your system shortly before receiving the LSAP security warning, then you must take a look at recent changes, including updates and software installations.

And, if the updates or changes you’ve made accidentally caused a problem with LSAP Subsystem Service, you should revert or adjust the settings or configurations that could be causing the issue or conflicting with LSAP.

Method 6: Modify the System Registry Settings

Next, you might consider making changes to the system registry. However, remember that modifying the registry requires precision and could affect your system’s stability if done incorrectly. Hence, proceed with caution.

[Note: It’s crucial to back up your registry or seek professional assistance if uncertain about making changes to the system registry.]

  • Step 1: On your Windows 11, press Win + R, type regedit, and click on OK to open the Registry Editor.
    Open the Registry Editor
  • Step 2: Then, navigate to LSAP Key “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.”
  • Step 3: There, check for values like “RunAsPPL” or “LsaCfgFlags” and ensure their values are correctly set as per default configurations or required settings.
    Navigate to LSAP Key and check for values like RunAsPPL or LsaCfgFlags.
  • Step 4: If not, you can modify Registry Values. To do so, right-click on the Value, select Modify, and input the Correct Value Data as per recommendations or default settings.
  • Step 5: Once you’re done making changes, restart your computer for the registry modifications to take effect.

Method 7: Reset Security Settings

If all previous attempts to fix the ‘local security authority protection is off on Windows 11’ issue fail, you might want to consider resetting the security settings back to their original/default configurations (if allowed). This is because resetting can potentially resolve any inconsistencies or problems that might have caused LSAP to be deactivated or turned off.

Method 8: Seek Expert Assistance

Lastly, if the issue still persists, you can consult LSAP related online forums for specific troubleshooting guides or consider seeking help from Microsoft technical support or IT professionals for advanced diagnostics and repairs.

With these solutions, you can effectively troubleshoot and resolve the ‘LSA Protection Is Off’ notification, reinstating LSAP to reinforce your system’s security.

Final Thoughts

That’s all! Receiving the LSAP is off notification on your Windows 11 often indicates a potential vulnerability in the system’s security setup. This warning typically appears when LSAP isn’t actively securing or protecting crucial system processes due to various factors such as disabled security settings, system configuration changes, or malware interference.

However, verifying security settings, ensuring timely updates, and performing malware scans are initial steps to address this notification. These actions aim to reinstate LSAP, strengthen system integrity, and prevent potential security breaches on Windows systems.

Next, check out: 5 Easy Solutions for How to Track a Stolen Laptop!


Ans: You can fix LSA protection is off on Windows 11 through a strategic approach involving checks on security settings, updates, malware scans, system alterations, and consulting expert help if needed.

Ans: To enable LSA process in Windows 11—you need to access system settings, navigate to Security Options, locate LSAP to ensure it’s enabled. If disabled, you can modify it.

Ans: To fix Windows security on Windows 11—ensure that your system is updated. Other than this, you can run reputable antivirus software, review security settings for modifications, and seek expert guidance for persistent issues.

Ans: To reset your security settings on Windows 11—access Security Settings in Control Panel, choose Security and Maintenance, click Restore Defaults, and confirm to reset security settings to default configurations. However, note that you should always back up important data before resetting.

About Author:
Divya Sharma
Computer and Software Expert
I am a Bachelor’s in Computer Science from Shyama Prasad Mukherji College (University of Delhi) dedicated to sharing tips and…