Microsoft has again announced that it has fixed the Local Security Authority (LSA) bug. (but,It hasn’t really been fixed.details later)
In a Windows 11 22H2 and 21H2 environment, as of around January 2023, even though Local Security Authority Protection is turned on (enabled), the message “Local Security Authority Protection is turned off. Your device may be vulnerable to attack.” its a problem. (Already turned on due to a visual glitch)
Protect Local Security Authority continues to show warnings
Micorsoft announced that this bug was fixed in April 2023, but contrary to the announcementThere was a problem where the “Protect Local Security Authority” screen disappeared.
The “Local Security Authority Protection” screen does not appear
Moreover, Microsoft pulled the fix because this fix caused new issues like showing blue screen error (BSoD) and game not starting. but,The phenomenon that the “Local Security Authority Protection” screen does not appear has not been corrected.
and July 5, 2023 (local time). Microsoft has finally fixed this bug in “Windows Security Anti-Malware Platform Update – KB5007651 (Version 1.0.2306.10002)” (hereinafter KB5007651 v1.0.2306.10002).advertisementan act.
KB5007651 v1.0.2306.10002 will drop if you check WindowsUpdate. When I installed it in my environment,
I can’t see “Protect Local Security Authority”
Since April 2023, the “Protect your local security authority” screen has not been shown.Windows11 22H2, 21H2 Insider Preview developer build, nothing is displayed.
“Local Security Authority Protection” is an item displayed in “Settings” -> “Privacy and Security” -> “Windows Security” -> select “Open Windows Security” -> “Device Security” -> “Basic Quarantine Details”. It is not displayed. What do you mean by “debugger”?
I don’t think so, but I’d like to think that deleting the setup item itself doesn’t “fix”. (I wouldn’t call it a fix anyway)
The “Local Security Body Protection” item is still not displayed, but I was able to confirm that the protection itself is enabled. To check if it is enabled correctly, open Event Viewer
Protection runs in the background
Go to “Windows Logs” → “System” and if there is an event (Source: Wininit / Event ID: 12) marked “LSASS.exe was started as a protected process at level 4”, its protection works.
“Travel maven. Beer expert. Subtly charming alcohol fan. Internet junkie. Avid bacon scholar.”