Microsoft : Local Security Authority not fixed

Topic

New Reply

https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-22H2#-local-security-authority-protection-is-off—with-persistent-restart

Updated 2023-05-16

This known issue was previously resolved with an update for Microsoft Defender Antivirus antimalware platform KB5007651 (Version 1.0.2303.27001) but issues were found, and that update is no longer being offered to devices. If you encounter this issue, you will need to use the above workaround until the issue is resolved. If you have installed Version 1.0.2303.27001 and receive an error with a blue screen or if your device restarts when attempting to open some games or apps, you will need to disable Kernel-mode Hardware-enforced Stack Protection. To do this, select the Start button, type Windows Security and select it, select Device Security then select Core Isolation then disable Kernel-mode Hardware-enforced Stack Protection.

Affected platforms:

​Client: Windows 11, version 22H2; Windows 11, version 21H2…

Reply | Quote

Replies

Moral of this story – games and security do not play well with each other.

Susan Bradley Patch Lady/Prudent patcher

1 user thanked author for this post.

Alex5723

Reply | Quote

Moral of this story – disable Defender by installing 3rd party security suite.

Reply | Quote

I’m still confused as to how this affects me. I have seen numerous LSA warnings (usually 10 or 11) in the event viewer after every boot-up of my six months old Windows 11 Pro 22H2 desktop computer ever since first setting it up. But when I go to the security settings, everything is normal and on, including the proper core isolation settings. Core Isolation Kernel-mode Hardware-enforced Stack Protection got turned off after a particular Windows Defender update was installed some time ago, but I turned it back on again after rebooting and seeing the security warning. I don’t use the computer for gaming, and don’t use Office or any cloud service nor any third party software that connects to the internet other than the Chrome browser (I don’t use Edge or any other browser nor any email client). I only check my email via the brower and the email websites. The spreadsheet and finance applications I use are all so old that they no longer connect regularly to the internet, if they were ever designed to (Microsoft Works 9 and Microsoft Money Sunset Edition).  GnuCash and the VLC media player only connect to the internet when I tell them to check for updates. Is this LSA service something that only deals with security between the cpu and connected accessories? Everything that’s connected to this PC is connected by USB cables, except the Wi-Fi router/cable modem.

 

Reply | Quote

Alex5723 wrote:

Moral of this story – disable Defender by installing 3rd party security suite.

problem occurs only under Windows 11 (both 21H2 & 22H2 versions) though
does not seem to occur with Windows 10 – which is why I’ll stick with
Windows 10 longer until MS gets this specific problem fully fixed for Windows 11

1 user thanked author for this post.

Alex5723

Reply | Quote

It looks like this issue may finally be fixed by Microsoft.  I noticed today that all three of our PCs no longer show the warning about ‘local security authority’.  I went to Windows update and see that this:  KB5007651 (Version 1.0.2306.10002)  was installed on July 5.  It is listed as “Update for Windows Security platform antimalware platform” but there really are no other details about it but there are some Google hits indicating that this patch solves the problem!!!!

I don’t know what this does to PCs where registry changes were made as I did not make any.

Reply | Quote

it’s more like the KB5007651 update was “revised” to have version 1.0.2306.10002 instead of the buggy 1.0.2303.27001 version.

Reply | Quote

That’s what he said.

Reply | Quote

I have been offered 5007651 for my W11 22H2 system again. Before installing it, is there a way to determine the version? The earlier comments about this KB indicate that only version 1.0.2306.10002 is OK. Is the offered one assumed to be the latest?

Reply | Quote

W11 23h2.I have been offered – again – 5007651, now version 10.0.27703.1006. What do I do with this?

Reply | Quote

The advice from MS seems to be to check your installation for errors.
https://answers.microsoft.com/en-us/windows/forum/all/kb5007651-always-showing-up-check-for-updates/5ef7a484-15d1-47e1-889d-fee4ed7c6daa

cheers, Paul

Reply | Quote

Ken wrote:

W11 23h2.I have been offered – again – 5007651, now version 10.0.27703.1006. What do I do with this?

Install it, as it was updated for everyone yesterday:

This update provides latest updates for Windows Security platform, which is comprised of the Windows Security app and its underlying service.

Windows Security Platform Version: 10.0.27703.1006

Reply | Quote