By /

Local Security Authority (LSA) Protection Is Turned Off – Complete Fix Guide (2026)

Table of Contents

Hub: Windows 11 Troubleshooting Hub

Quick Answer
Local Security Authority (LSA) Protection Is Turned Off is a security warning in Windows 11 indicating that the LSA feature, which protects against credential theft, is disabled. To fix this, open Windows Security, go to Device Security > Core Isolation > Local Security Authority (LSA) Protection, and toggle it on. If the option is grayed out, you may need to enable it via Registry Editor or Group Policy, or install missing updates. For more Windows security guides, visit our Windows 11 Troubleshooting Hub.

Why Local Security Authority (LSA) Protection Is Turned Off Happens

Local Security Authority (LSA) Protection Is Turned Off is a security warning that appears when the LSA feature in Windows 11 is disabled. LSA is a critical subsystem that validates local logins and user authentication. When Local Security Authority (LSA) Protection Is Turned Off, the system is more vulnerable to credential theft and pass-the-hash attacks. This warning often appears after a Windows update, a driver installation, or when certain security policies are misconfigured. For official information, refer to the Microsoft Credential Guard and LSA Protection documentation.

Local Security Authority (LSA) Protection Is Turned Off can be triggered by incompatible drivers, outdated BIOS, or conflicts with third-party security software. It is similar to other security warnings like BSOD errors but is a notification rather than a system crash. Enabling Local Security Authority (LSA) Protection Is Turned Off is recommended for all users to enhance system security.

Before enabling Local Security Authority (LSA) Protection Is Turned Off, ensure your system meets the requirements: a 64-bit processor with virtualization extensions (Intel VT-x or AMD SVM) and TPM 2.0. If these are not enabled in BIOS, you may not be able to turn on Local Security Authority (LSA) Protection Is Turned Off. For a broader overview of Windows security, visit our Windows 11 Troubleshooting Hub.

⚠️ Warning: Enabling Local Security Authority (LSA) Protection Is Turned Off may cause compatibility issues with some older drivers. Test the system after enabling to ensure no performance problems.

1. Enable Local Security Authority (LSA) Protection Is Turned Off via Windows Security

The easiest way to fix Local Security Authority (LSA) Protection Is Turned Off is through the Windows Security app. This is the recommended method for most users.

  1. Open Windows Security by clicking the shield icon in the taskbar or searching for it in Start.
  2. Select Device Security from the left menu.
  3. Under Core Isolation, click Core isolation details.
  4. Find Local Security Authority (LSA) Protection and toggle the switch to On to resolve Local Security Authority (LSA) Protection Is Turned Off.
  5. If prompted, restart your PC to apply the changes.

✅ Expected Result: The toggle should turn on, and Local Security Authority (LSA) Protection Is Turned Off warning will disappear after restart. If the toggle is grayed out, proceed to the next method.

2. Enable Local Security Authority (LSA) Protection Is Turned Off via Registry Editor

If the toggle in Windows Security is grayed out, you can enable Local Security Authority (LSA) Protection Is Turned Off using the Registry Editor. This method is useful when the option is blocked by policies or drivers.

  1. Press Win + R, type regedit, and press Enter.
  2. Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
  3. Look for the key RunAsPPL. If it doesn’t exist, right-click on the right pane, select New > DWORD (32-bit) Value, and name it RunAsPPL.
  4. Double-click RunAsPPL and set its value to 1 to enable Local Security Authority (LSA) Protection Is Turned Off (or 2 for UEFI lock).
  5. Also create or modify RunAsPPLBoot with value 1 for UEFI support.
  6. Restart your PC to finalize enabling Local Security Authority (LSA) Protection Is Turned Off.

⚠️ Warning: Editing the registry can cause system issues if done incorrectly. Backup your registry before making changes to fix Local Security Authority (LSA) Protection Is Turned Off.

3. Enable Local Security Authority (LSA) Protection Is Turned Off via Group Policy

For Windows Pro and Enterprise editions, you can enable Local Security Authority (LSA) Protection Is Turned Off through Group Policy. This is useful for managed environments.

  1. Press Win + R, type gpedit.msc, and press Enter.
  2. Navigate to Computer Configuration > Administrative Templates > System > Local Security Authority.
  3. Find Configure Local Security Authority (LSA) protection and double-click it.
  4. Select Enabled and choose Enable UEFI lock (Recommended) from the dropdown to fix Local Security Authority (LSA) Protection Is Turned Off.
  5. Click Apply and OK.
  6. Restart your PC.

💡 Quick Tip: This policy may override the Windows Security toggle. Ensure the policy is set to “Not Configured” if you want to use the toggle for Local Security Authority (LSA) Protection Is Turned Off.

4. Verify System Integrity and Run SFC

Corrupted system files can prevent Local Security Authority (LSA) Protection Is Turned Off from being enabled. Run SFC and DISM to repair system integrity. For a full guide, see our How to Use DISM Windows 11 article.

  1. Open Command Prompt as Administrator.
  2. Run DISM /Online /Cleanup-Image /RestoreHealth and wait for completion.
  3. Then run sfc /scannow.
  4. After completion, restart and try enabling Local Security Authority (LSA) Protection Is Turned Off again.

✅ Expected Result: SFC and DISM will repair corrupted files, which may resolve any underlying issues preventing Local Security Authority (LSA) Protection Is Turned Off from being enabled.

5. Install the Latest Windows Updates

Sometimes the Local Security Authority (LSA) Protection Is Turned Off warning appears because your Windows is out of date. Microsoft frequently releases updates to improve security features.

  1. Open Settings > Windows Update and click Check for updates.
  2. Install any pending updates, especially cumulative updates.
  3. After updating, restart and check if Local Security Authority (LSA) Protection Is Turned Off can be enabled.
  4. If you encounter update errors, see our guides on Windows 11 Update Stuck or Cumulative Update Failure 0x80073701.

💡 Quick Tip: Ensure you have the latest driver updates as well, as outdated drivers can block Local Security Authority (LSA) Protection Is Turned Off from being turned on.

6. Check for Incompatible Drivers

Some older drivers, especially graphics and audio drivers, are incompatible with Local Security Authority (LSA) Protection Is Turned Off. If enabling LSA causes system instability, you may need to update or roll back drivers.

  1. Open Device Manager and check for any devices with yellow exclamation marks.
  2. Update drivers for graphics, storage, and network adapters. For a complete guide, see How to Update Drivers Windows 11.
  3. If a recently updated driver caused the issue, roll it back via Device Manager > Properties > Driver > Roll Back Driver.
  4. After updating/rolling back, restart and try enabling Local Security Authority (LSA) Protection Is Turned Off again.

❌ Common Mistake: Forgetting to check for driver updates after enabling Local Security Authority (LSA) Protection Is Turned Off. If you encounter blue screens, disable LSA and update drivers.

7. Temporarily Disable Conflicting Security Software

Third-party antivirus or security software can conflict with Local Security Authority (LSA) Protection Is Turned Off. Temporarily disable them to enable LSA.

  1. Open your antivirus and turn off real-time protection temporarily.
  2. Also disable any firewall or VPN that may interfere.
  3. Enable Local Security Authority (LSA) Protection Is Turned Off via Windows Security or Registry.
  4. After enabling, restart and re-enable your security software.
  5. If Local Security Authority (LSA) Protection Is Turned Off remains on after re-enabling, the conflict is resolved.

🔁 Alternative Solution: If you cannot disable your antivirus, try adding Windows Security to the exclusion list to fix Local Security Authority (LSA) Protection Is Turned Off.

8. Advanced Troubleshooting for Local Security Authority (LSA) Protection Is Turned Off

If the standard methods fail, try these advanced solutions to fix Local Security Authority (LSA) Protection Is Turned Off.

Enable Virtualization in BIOS

Local Security Authority (LSA) Protection Is Turned Off requires hardware virtualization (Intel VT-x or AMD SVM) and TPM 2.0. Enter BIOS/UEFI and enable these features. Consult your motherboard manual for guidance.

Use the LSA Protection Troubleshooter

Microsoft provides a dedicated tool to diagnose and fix Local Security Authority (LSA) Protection Is Turned Off. Download the LSA Protection Troubleshooter from the Microsoft Support site and run it.

Perform a System Restore

If the warning started after a system change, use System Restore to revert to a previous state. See How to Use System Restore Windows 11.

Check for Malware

Malware can disable security features. Run a full scan with Windows Defender Offline. For detailed steps, see How to Scan Malware Windows 11.

If none of these work, consider performing an in-place upgrade with the Windows 11 ISO to repair the system. This is also effective for Windows Update Error 0x80240020 and Windows Installation Failed in Safe_OS Phase.

Conclusion

Local Security Authority (LSA) Protection Is Turned Off is a critical security warning that should be addressed immediately to protect your system from credential theft. The easiest method is to enable it via Windows Security. If that is grayed out, use Registry Editor or Group Policy. Always ensure your system is updated, drivers are compatible, and hardware virtualization is enabled in BIOS. If conflicts arise, disable third-party security software temporarily or update drivers. By following this guide, you can successfully resolve Local Security Authority (LSA) Protection Is Turned Off and secure your Windows 11 system.

For comprehensive Windows security, explore our Windows 11 Troubleshooting Hub and check out related articles on BSOD fixes, High CPU usage, and System performance issues.

Related Guides

FAQ

What does Local Security Authority (LSA) Protection Is Turned Off mean?

Local Security Authority (LSA) Protection Is Turned Off is a Windows Security warning indicating that LSA protection, which safeguards against credential theft, is disabled. Enabling it is recommended.

How do I enable LSA protection in Windows 11?

Open Windows Security > Device Security > Core Isolation details > toggle Local Security Authority (LSA) Protection to On to fix Local Security Authority (LSA) Protection Is Turned Off. If grayed out, use Registry or Group Policy.

Why is LSA protection grayed out on my PC?

It may be grayed out if hardware virtualization or TPM is not supported, incompatible drivers are installed, or Group Policy blocks Local Security Authority (LSA) Protection Is Turned Off from being changed.

Can enabling LSA protection cause performance issues?

In rare cases, it may cause slight performance degradation or compatibility issues with older drivers, but the security benefits outweigh risks when fixing Local Security Authority (LSA) Protection Is Turned Off.

What is the difference between LSA protection and Credential Guard?

LSA protection isolates the LSA process using virtualization-based security. Credential Guard is a more advanced feature that also protects against credential theft, and both help resolve Local Security Authority (LSA) Protection Is Turned Off.

How do I enable virtualization in BIOS for LSA protection?

Restart, enter BIOS/UEFI, find CPU configuration, enable Intel VT-x or AMD SVM, save and exit. This is required to fix Local Security Authority (LSA) Protection Is Turned Off.

Can I enable LSA protection via Command Prompt?

Yes, use bcdedit /set lsaenable 1 in an elevated Command Prompt to enable Local Security Authority (LSA) Protection Is Turned Off.

Will enabling LSA protection prevent all credential theft attacks?

It significantly reduces the risk but is not a complete solution. Use it alongside other security practices after resolving Local Security Authority (LSA) Protection Is Turned Off.

How do I revert LSA protection if it causes issues?

Toggle it off in Windows Security, set RunAsPPL to 0, or disable the Group Policy setting. Restart after changes to undo Local Security Authority (LSA) Protection Is Turned Off enabling.

Do I need to enable LSA protection on Windows 10?

Yes, Local Security Authority (LSA) Protection Is Turned Off is also available on Windows 10 version 1709 and later. Steps are similar.

HowToFixPro Editorial Team

We’re a team of system administrators, technical writers, and platform specialists who genuinely enjoy solving the problems most users find frustrating. From persistent Windows errors and Android sync failures to browser crashes and network drops — we’ve seen it all, and we document every fix properly. Our guides are built on official documentation, direct testing, and real troubleshooting experience. No filler, no guesswork — just reliable, step-by-step solutions you can trust.

Scroll to Top