Privacy and Security Enable or Disable Local Security Authority (LSA) Protection in Windows 11


  • Staff
Windows_Security_banner.png

This tutorial will show you how to enable or disable Local Security Authority (LSA) protection for all users in Windows 11.

Core isolation is a security feature of Microsoft Windows that protects important core processes of Windows from malicious software by isolating them in memory. It does this by running those core processes in a virtualized environment.

Windows 11, version 22H2 supports additional protection for the Local Security Authority (LSA) process to prevent code injection that could compromise credentials.

Windows has several critical processes to verify a user’s identity. The LSA is one of those processes, responsible for authenticating users and verifying Windows logins. It is responsible for handling user credentials, like passwords, and tokens used to provide single sign-on to Microsoft accounts and Azure services. Attackers have developed tools and have abused Microsoft tools to take advantage of this process to steal credentials. To combat this, additional LSA protection will be enabled by default in the future for new, enterprise-joined Windows 11 devices making it significantly more difficult for attackers to steal credentials by ensuring LSA loads only trusted, signed code.

Reference:

You must be signed in as an administrator to enable or disable Local Security Authority (LSA) protection.

LSA requires CPU virtualization turned on.


Resolved

After installing "Update for Microsoft Defender Antivirus antimalware platform - KB5007651 (Version 1.0.2302.21002)", you might receive a security notification or warning stating that "Local Security protection is off. Your device may be vulnerable." and once protections are enabled, your Windows device might persistently prompt that a restart is required. Important: This issue affects only "Update for Microsoft Defender Antivirus antimalware platform - KB5007651 (Version 1.0.2302.21002)". All other Windows updates released on March 14, 2023 for affected platforms (KB5023706 and KB5023698), do not cause this issue.

Workaround: If you have enabled Local Security Authority (LSA) protection and have restarted your device at least once, you can dismiss warning notifications and ignore any additional notifications prompting for a restart. You can verify that LSA protection is enabled by looking in Event Viewer using the information available here. Important: Currently, Microsoft does not recommend any other workaround for this issue.

Next steps: Microsoft is working on a resolution and will provide an update in an upcoming release.

Updated July 05, 2023: This issue was resolved in an update for Windows Security platform antimalware platform KB5007651 (Version 1.0.2306.10002). If you would like to install the update before it is installed automatically, you will need to check for updates.

If still needed, you can use Option Two, Option Three, or Option Five below to enable LSA without the warning.



Contents

  • Option One: Turn On or Off Local Security Authority (LSA) Protection in Windows Security
  • Option Two: Turn On or Off Local Security Authority (LSA) Protection using REG file
  • Option Three: Turn On or Off Local Security Authority (LSA) Protection using Command
  • Option Four: Enable or Disable Local Security Authority (LSA) Protection in Local Group Policy Editor
  • Option Five: Enable or Disable Local Security Authority (LSA) Protection using REG file




Option One

Turn On or Off Local Security Authority (LSA) Protection in Windows Security


1 Open Windows Security.

2 Click/tap on Device security on the left side, and click/tap on the Core isolation details link on the right side. (see screenshot below)

LSA_protection_Windows_Security-1.png

3 Turn on (default) or off Local Security Authority protection for what you want. (see screenshots below)

LSA_protection_Windows_Security-2.png
LSA_protection_Windows_Security-3.png

4 If prompted by UAC, click/tap on Yes to approve.

5 Restart the computer to apply. (see screenshot below)

LSA_protection_Windows_Security-5.png




Option Two

Turn On or Off Local Security Authority (LSA) Protection using REG file


1 Do step 2 (on without UEFI Lock), step 3 (on with UEFI Lock) or step 4 (off) below for what you want.

2 Turn On Local Security Authority (LSA) Protection without UEFI Lock

This is the default setting.


A) Click/tap on the Download button below to download the REG file below, and go to step 5 below.​

Turn_ON_Local_Security_Authority_protection_without_UEFI_Lock.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"RunAsPPL"=dword:00000002
"RunAsPPLBoot"=dword:00000002

3 Turn On Local Security Authority (LSA) Protection with UEFI Lock

When LSA is used with UEFI lock and Secure Boot, additional protection is achieved because disabling the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa registry key has no effect. It acts as a tamper protection.


A) Click/tap on the Download button below to download the REG file below, and go to step 5 below.​

Turn_ON_Local_Security_Authority_protection_with_UEFI_Lock.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"RunAsPPL"=dword:00000001
"RunAsPPLBoot"=dword:00000002

4 Turn Off Local Security Authority (LSA) Protection

If you turned on LSA with UEFI Lock using step 3, then you will need to use the Local Security Authority Protected Process Opt-out tool to remove the UEFI variable in the registry.


A) Click/tap on the Download button below to download the REG file below, and go to step 5 below.​

Turn_OFF_Local_Security_Authority_protection.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"RunAsPPL"=dword:00000000
"RunAsPPLBoot"=dword:00000000

5 Save the .reg file to your desktop.

6 Double click/tap on the downloaded .reg file to merge it.

7 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

8 Restart the computer to apply.

9 You can now delete the downloaded .reg file if you like.




Option Three

Turn On or Off Local Security Authority (LSA) Protection using Command


1 Open Windows Terminal (Admin), and select Command Prompt.

2 Copy and paste the command below you want to use into Windows Terminal (Admin), and press Enter.

Turn On Local Security Authority (LSA) Protection without UEFI Lock

This is the default setting.


reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPL /t REG_DWORD /d 2 /f & reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPLBoot /t REG_DWORD /d 2 /f

OR​

Turn On Local Security Authority (LSA) Protection with UEFI Lock

When LSA is used with UEFI lock and Secure Boot, additional protection is achieved because disabling the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa registry key has no effect. It acts as a tamper protection.


reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPL /t REG_DWORD /d 1 /f & reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPLBoot /t REG_DWORD /d 2 /f

OR​

Turn Off Local Security Authority (LSA) Protection

If you turned on LSA with UEFI Lock, then you will need to use the Local Security Authority Protected Process Opt-out tool to remove the UEFI variable in the registry.


reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPL /t REG_DWORD /d 0 /f & reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v RunAsPPLBoot /t REG_DWORD /d 0 /f

3 Restart the computer to apply.




Option Four

Enable or Disable Local Security Authority (LSA) Protection in Local Group Policy Editor


The Local Group Policy Editor is only available in the Windows 11 Pro, Enterprise, and Education editions.

All editions can use Option Fve to configure the same policy.


1 Open the Local Group Policy Editor (gpedit.msc).

2 Navigate to the policy location below in the left pane of the Local Group Policy Editor. (see screenshot below)

Computer Configuration > Administrative Templates > System > Local Security Authority

LSA_protection_gpedit-1.png

3 In the right pane of Local Security Authority in the Local Group Policy Editor, double click/tap on the Configure LSASS to run as a protected process policy to edit it. (see screenshot above)

4 Do step 5 (default), step 6 (disable), step 7 (enable with UEFI Lock), or step 8 (enable without UEFI Lock) below for what you want.

5 Default User Choice Local Security Authority (LSA) Protection

This is the default setting to allow using Option One Option Two, and Option Three.


A) Select (dot) Not Configured. (see screenshot below)​

B) Click/tap on OK, and go to step 9 below.​

LSA_protection_gpedit-2.png

6 Disable Local Security Authority (LSA) Protection

This will override and prevent using Option One, Option Two, and Option Three.


A) Select (dot) Enabled. (see screenshot below)​

B) Select Disabled in the Configure LSA to run as a protected process drop menu.​

C) Click/tap on OK, and go to step 9 below.​

LSA_protection_gpedit-3.png

7 Enable Local Security Authority (LSA) Protection with UEFI Lock

This will override and prevent using Option One, Option Two, and Option Three.

When LSA is used with UEFI lock and Secure Boot, additional protection is achieved because disabling the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa registry key has no effect. It acts as a tamper protection.


A) Select (dot) Enabled. (see screenshot below)​

B) Select Enabled with UEFI Lock in the Configure LSA to run as a protected process drop menu.​

C) Click/tap on OK, and go to step 9 below.​

LSA_protection_gpedit-4.png

8 Enable Local Security Authority (LSA) Protection without UEFI Lock

This will override and prevent using Option One, Option Two, and Option Three.


A) Select (dot) Enabled. (see screenshot below)​

B) Select Enabled without UEFI Lock in the Configure LSA to run as a protected process drop menu.​

C) Click/tap on OK, and go to step 9 below.​

LSA_protection_gpedit-4.png

9 You can now close the Local Group Policy Editor if you like.




Option Five

Enable or Disable Local Security Authority (LSA) Protection using REG file


1 Do step 2 (default), step 3 (disable), step 4 (enable with UEFI Lock), or step 5 (enable without UEFI Lock) below for what you want.


 2. Default User Choice Local Security Authority (LSA) Protection

This is the default setting to allow using Option One, Option Two, and Option Three.


A) Click/tap on the Download button below to download the file below, and go to step 6 below.​

Default_user_choice_Local_Security_Authority_protection.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"RunAsPPL"=-


 3. Disable Local Security Authority (LSA) Protection

This will override and prevent using Option One, Option Two, and Option Three.


A) Click/tap on the Download button below to download the file below, and go to step 6 below.​

Disable_Local_Security_Authority_protection.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"RunAsPPL"=dword:00000000


 4. Enable Local Security Authority (LSA) Protection with UEFI Lock

This will override and prevent using Option One, Option Two, and Option Three.

When LSA is used with UEFI lock and Secure Boot, additional protection is achieved because disabling the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa registry key has no effect.


A) Click/tap on the Download button below to download the file below, and go to step 6 below.​

Always_Enable_Local_Security_Authority_protection_with_UEFI_Lock.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"RunAsPPL"=dword:00000001


 5. Enable Local Security Authority (LSA) Protection without UEFI Lock

This will override and prevent using Option One, Option Two, and Option Three.


A) Click/tap on the Download button below to download the file below, and go to step 6 below.​

Always_Enable_Local_Security_Authority_protection_without_UEFI_Lock.reg


(Contents of REG file for reference)
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"RunAsPPL"=dword:00000002

6 Save the REG file to your desktop.

7 Double click/tap on the downloaded REG file to merge it.

8 When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

9 You can now delete the downloaded REG file if you like.


That's it,
Shawn Brink


 

Attachments

  • Windows_Security.png
    Windows_Security.png
    6 KB · Views: 95
  • Turn_OFF_Local_Security_Authority_protection.reg
    684 bytes · Views: 221
  • Always_Enable_Local_Security_Authority_protection_with_UEFI_Lock.reg
    634 bytes · Views: 256
  • Always_Enable_Local_Security_Authority_protection_without_UEFI_Lock.reg
    638 bytes · Views: 253
  • Disable_Local_Security_Authority_protection.reg
    634 bytes · Views: 266
  • Default_user_choice_Local_Security_Authority_protection.reg
    608 bytes · Views: 250
  • Turn_ON_Local_Security_Authority_protection_with_UEFI_Lock.reg
    672 bytes · Views: 90
  • Turn_ON_Local_Security_Authority_protection_without_UEFI_Lock.reg
    672 bytes · Views: 130
Last edited:
Same here. No R click context menu.
Never noticed cause I never used it. So, what's the problem? What am I missing without it?
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    Intel i7-13700K
    Motherboard
    MSI PRO Z790-A WiFi
    Memory
    Corsair Vengence 5600 - 32GB
    Graphics Card(s)
    MSI RTX3060 Ventus 2x 12GB
    Sound Card
    On board - Realtek ALC4080
    Monitor(s) Displays
    LG 27GL850
    Screen Resolution
    2560 x 1440
    Hard Drives
    WD Black SN850X Nvme - 1TB
    WD Black 6TB HDD 256MB cache CMR
    WD Black 6TB HDD 128MB cache CMR
    PSU
    Corsair RM850x
    Case
    Fractal Design - Define 7
    Cooling
    Deepcool AK400
    Keyboard
    MS KC0405
    Mouse
    MS Model 1113 / MS Wireless Mobile Mouse 3500
    Internet Speed
    940 Mbps
    Browser
    Firefox
    Antivirus
    Windows Security
    Other Info
    I have a Case Speaker!
    I have a Blueray Disk drive!
  • Operating System
    Windows 10 Pro 22H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    i7-9700K
    Motherboard
    Asus Prime Z390-A
    Memory
    Corsair Vengence 32GB
    Graphics card(s)
    EVGA GTX1060
    Sound Card
    On Board
    Monitor(s) Displays
    Acer 27"
    Screen Resolution
    1920 x 1080
    Hard Drives
    WD Black Nvme 500GB
    Toshiba X300 5TB
    PSU
    Corsair RM850x
    Case
    Antec P101 Silent
    Cooling
    CoolerMaster Hyper T4
    Mouse
    Logitec M-U0007
    Keyboard
    MS KC0405
    Internet Speed
    940 Mbps
    Browser
    Firefox
    Antivirus
    Avast!
    Other Info
    I have a Case Speaker!
Same here. No R click context menu.
Never noticed cause I never used it. So, what's the problem? What am I missing without it?
Missing this:
 

Attachments

  • Screenshot 2023-07-09 083816.png
    Screenshot 2023-07-09 083816.png
    28.4 KB · Views: 31

My Computer

System One

  • OS
    Windows 11 Intel i5 10400 HD630 graphics chip
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP
    CPU
    i5-10400
    Memory
    12 gb
    Graphics Card(s)
    HD630 chipset
    Monitor(s) Displays
    LG 24inch
    Hard Drives
    SSD, external usb drive 1tb for files/backups
    Keyboard
    wireless Logi
    Mouse
    ms 4000 wireless mouse
    Internet Speed
    10meg
    Browser
    Firefox
    Antivirus
    Defender
    Other Info
    Win11 Home 23H2 22631.3374 03/26/24
Missing this:
Yes, well done MS. At least the Security dashboard can be accessed with a left-click. Updates can be checked this way or through Windows Update but what mess they've made
 

My Computer

System One

  • OS
    Windows 11 Pro 23H2 (RP channel)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Gigabyte
    CPU
    AMD Ryzen 5900X 12-core
    Motherboard
    X570 Aorus Xtreme
    Memory
    64GB Corsair Platinum RGB 3600MHz CL16
    Graphics Card(s)
    MSI Suprim X 3080 Ti
    Sound Card
    Soundblaster AE-5 Plus
    Monitor(s) Displays
    ASUS TUF Gaming VG289Q
    Screen Resolution
    3840x2160
    Hard Drives
    Samsung 990 Pro 2TB
    Samsung 980 Pro 2TB
    Samsung 970 Evo Plus 1TB
    Samsung 870 Evo 4TB
    Samsung T7 Touch 1TB
    PSU
    Asus ROG Strix 1000W
    Case
    Corsair D750 Airflow
    Cooling
    Noctua NH-D15S
    Keyboard
    Asus ROG Flare
    Mouse
    Logitech G903 with PowerPlay charger
    Internet Speed
    500Mb/sec
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender
Same here. No R click context menu.
Never noticed cause I never used it. So, what's the problem? What am I missing without it?
We had this before MS screwed it up with latest kb5007651.
1688926074073.png


Also, LSA security option disappeared from Settings, while it is still present with Canary build with the same security update KB5007651 1.0.2306.10002-0. 🤷‍♂️
Yet, the Engine Version in Canary is now higher, 1.1.23060.1005 versus 1.1.23050.3 of all the other builds. 🤷‍♂️🤐
 
Last edited:

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo Yoga 920
    CPU
    Intel I7-8550U
    Motherboard
    n/a
    Memory
    16GB
    Graphics Card(s)
    Intel Graphics UHD 620
    Sound Card
    Realtek High Definition Audio (SST)
    Monitor(s) Displays
    4k Touch screen
    Screen Resolution
    3480 x 2160
    Hard Drives
    512GB NVMe
Ok. Got it.
That would be convenient.
I just accessed all of that by opening up the program before. I don't do much with it very often.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    Intel i7-13700K
    Motherboard
    MSI PRO Z790-A WiFi
    Memory
    Corsair Vengence 5600 - 32GB
    Graphics Card(s)
    MSI RTX3060 Ventus 2x 12GB
    Sound Card
    On board - Realtek ALC4080
    Monitor(s) Displays
    LG 27GL850
    Screen Resolution
    2560 x 1440
    Hard Drives
    WD Black SN850X Nvme - 1TB
    WD Black 6TB HDD 256MB cache CMR
    WD Black 6TB HDD 128MB cache CMR
    PSU
    Corsair RM850x
    Case
    Fractal Design - Define 7
    Cooling
    Deepcool AK400
    Keyboard
    MS KC0405
    Mouse
    MS Model 1113 / MS Wireless Mobile Mouse 3500
    Internet Speed
    940 Mbps
    Browser
    Firefox
    Antivirus
    Windows Security
    Other Info
    I have a Case Speaker!
    I have a Blueray Disk drive!
  • Operating System
    Windows 10 Pro 22H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Self Built
    CPU
    i7-9700K
    Motherboard
    Asus Prime Z390-A
    Memory
    Corsair Vengence 32GB
    Graphics card(s)
    EVGA GTX1060
    Sound Card
    On Board
    Monitor(s) Displays
    Acer 27"
    Screen Resolution
    1920 x 1080
    Hard Drives
    WD Black Nvme 500GB
    Toshiba X300 5TB
    PSU
    Corsair RM850x
    Case
    Antec P101 Silent
    Cooling
    CoolerMaster Hyper T4
    Mouse
    Logitec M-U0007
    Keyboard
    MS KC0405
    Internet Speed
    940 Mbps
    Browser
    Firefox
    Antivirus
    Avast!
    Other Info
    I have a Case Speaker!
Found this thread while trying to debug LSA crashes after installing MSKB5028185 (2023-07 CU).
I have VT-d disabled due to having a 9th Gen Core-i7 system (XPS 15 7590 - blue screens on boot with it on), so Device Security says "Standard hardware security not supported".
Can turn on LSA Protection Mode using the registry and verifying it's on by checking the Event Log, but on or off I'm unable to log in with any domain accounts. These end up failing with "the RPC call failed" and insta-reboot due to lsass.exe crashing (error 0xC0000409). Uninstalling the CU doesn't alter behaviour, so possibly whatever registry change the CU made it's not undone and is triggering the latent bug in the previous CU.
Bizarrely I can set up a VPN connection in the local account, then connect to it and login with a domain account and everything works fine.
Anyone got any tips on fixing this LSA problem?
 

My Computer

System One

  • OS
    Windows 11
Got another update::
Microsoft Defender Antivirus antimalware platform - KB4052623 (Version 4.18.23050.9)

Still NO tooltip or right-click context menu. Unbelieveable.
 

My Computer

System One

  • OS
    Windows 11 Intel i5 10400 HD630 graphics chip
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP
    CPU
    i5-10400
    Memory
    12 gb
    Graphics Card(s)
    HD630 chipset
    Monitor(s) Displays
    LG 24inch
    Hard Drives
    SSD, external usb drive 1tb for files/backups
    Keyboard
    wireless Logi
    Mouse
    ms 4000 wireless mouse
    Internet Speed
    10meg
    Browser
    Firefox
    Antivirus
    Defender
    Other Info
    Win11 Home 23H2 22631.3374 03/26/24
Same here, wish they did a change log.
Would be hilarious :)
 

My Computer

System One

  • OS
    11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    PC Specialist
    CPU
    I7 12700K
    Motherboard
    Gigabyte Z690 Aorus Elite
    Memory
    2 X Corsair Vengeance DDR4 @ 3600 32 gb total
    Graphics Card(s)
    Zotac RTX 3070 ti
    Sound Card
    onboard
    Monitor(s) Displays
    Iiyama 27"
    Screen Resolution
    2560 x 1440
    Hard Drives
    2 TB OEM M.2 + 2TB Samsung Evo 860 sata 3
    PSU
    Corsair 850 watt modular
    Case
    Fractal Meshify 2
    Cooling
    AIO on CPU trinity on GPU
    Keyboard
    Roccat Arvo
    Mouse
    RAT 5
    Internet Speed
    52gb
    Browser
    Edge Chrome
    Antivirus
    Defender
Option Three, you cannot use semicolon ; instead of ampersand & in a command prompt.
 

My Computers

System One System Two

  • OS
    11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Asus TUF Gaming (2024)
    CPU
    i7 13650HX
    Memory
    16GB DDR5
    Graphics Card(s)
    GeForce RTX 4060 Mobile
    Sound Card
    Eastern Electric MiniMax DAC Supreme; Emotiva UMC-200; Astell & Kern AK240
    Monitor(s) Displays
    Sony Bravia XR-55X90J
    Screen Resolution
    3840×2160
    Hard Drives
    512GB SSD internal
    37TB external
    PSU
    Li-ion
    Cooling
    2× Arc Flow Fans, 4× exhaust vents, 5× heatpipes
    Keyboard
    Logitech K800
    Mouse
    Logitech G402
    Internet Speed
    20Mbit/s up, 250Mbit/s down
    Browser
    FF
  • Operating System
    11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Medion S15450
    CPU
    i5 1135G7
    Memory
    16GB DDR4
    Graphics card(s)
    Intel Iris Xe
    Sound Card
    Eastern Electric MiniMax DAC Supreme; Emotiva UMC-200; Astell & Kern AK240
    Monitor(s) Displays
    Sony Bravia XR-55X90J
    Screen Resolution
    3840×2160
    Hard Drives
    2TB SSD internal
    37TB external
    PSU
    Li-ion
    Mouse
    Logitech G402
    Keyboard
    Logitech K800
    Internet Speed
    20Mbit/s up, 250Mbit/s down
    Browser
    FF
Another update yesterday:
Microsoft Defender Antivirus antimalware platform - KB4052623 (Version 4.18.23070.1004)
Still NO tooltips or right-click context menu....
 

My Computer

System One

  • OS
    Windows 11 Intel i5 10400 HD630 graphics chip
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP
    CPU
    i5-10400
    Memory
    12 gb
    Graphics Card(s)
    HD630 chipset
    Monitor(s) Displays
    LG 24inch
    Hard Drives
    SSD, external usb drive 1tb for files/backups
    Keyboard
    wireless Logi
    Mouse
    ms 4000 wireless mouse
    Internet Speed
    10meg
    Browser
    Firefox
    Antivirus
    Defender
    Other Info
    Win11 Home 23H2 22631.3374 03/26/24
Another update yesterday:
Microsoft Defender Antivirus antimalware platform - KB4052623 (Version 4.18.23070.1004)
Still NO tooltips or right-click context menu....
Antimalware KB4052623 has nothing to do with KB5007651 which is the one that caused all these screwed-up changes.
 

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo Yoga 920
    CPU
    Intel I7-8550U
    Motherboard
    n/a
    Memory
    16GB
    Graphics Card(s)
    Intel Graphics UHD 620
    Sound Card
    Realtek High Definition Audio (SST)
    Monitor(s) Displays
    4k Touch screen
    Screen Resolution
    3480 x 2160
    Hard Drives
    512GB NVMe
Same here on this laptop. Winver 22621.1928.
For anybody that was missing the Context Menu on the Security Icon right click, it looks like it has finally been fixed.
Took a few months but it is now working again after receiving these security updates. 😉👍
The problem was common to all Builds except for latest Canary Builds.
The context menu on the System Tray Security icon that was missing on Right Click is now back and working properly in R.P. 22631.2861, Beta Build 22635.2921, Dev 23612.1000 and current public Build 22631.2861 that received the new versions of the Security Application and the new version of the Security Service showing below.

Redirecting

Windows Security Service KB5007651 Version 1.0.2311.17002-0 and Windows Security Application Version 1000.25992.0.9000 updates.

1704780200527.png


1704780282146.png
 

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo Yoga 920
    CPU
    Intel I7-8550U
    Motherboard
    n/a
    Memory
    16GB
    Graphics Card(s)
    Intel Graphics UHD 620
    Sound Card
    Realtek High Definition Audio (SST)
    Monitor(s) Displays
    4k Touch screen
    Screen Resolution
    3480 x 2160
    Hard Drives
    512GB NVMe
For anybody that was missing the Context Menu on the Security Icon right click, it looks like it has finally been fixed.
Took a few months but it is now working again after receiving these security updates. 😉👍
Indeed, I just noticed it recently. (y) (y) :cool:
 

My Computer

System One

  • OS
    Windows 11 Pro 23H2
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo IdeaPad L340
    CPU
    Intel Core i3-8145U
    Memory
    8GB
    Internet Speed
    45MB
    Browser
    Firefox | Chrome
    Antivirus
    Microsoft Defender | Block unknown executables | Various ASR rules enabled
Indeed, I just noticed it recently. (y) (y) :cool:
I did not get the updates on all the machines at the same date, the updates seem to roll out gradually.
On the machines that did not get the updates I just added them manually by copying this folder and the SecurityHealthSetup.exe below to a Temp folder and then running the setup as Administrator, that did the trick and updated the other machines.
May take a few minutes to get both the updates completed and visible in the system information, after that it takes a reboot to get the updates to take effect. 😉

1704782414230.png


1704782829345.png
 

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo Yoga 920
    CPU
    Intel I7-8550U
    Motherboard
    n/a
    Memory
    16GB
    Graphics Card(s)
    Intel Graphics UHD 620
    Sound Card
    Realtek High Definition Audio (SST)
    Monitor(s) Displays
    4k Touch screen
    Screen Resolution
    3480 x 2160
    Hard Drives
    512GB NVMe
Can someone tell me how to check these information? please

Click on Settings in the lower corner and then About and it will show the information.
1704784355890.png


1704784468886.png


1704784536233.png
 

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo Yoga 920
    CPU
    Intel I7-8550U
    Motherboard
    n/a
    Memory
    16GB
    Graphics Card(s)
    Intel Graphics UHD 620
    Sound Card
    Realtek High Definition Audio (SST)
    Monitor(s) Displays
    4k Touch screen
    Screen Resolution
    3480 x 2160
    Hard Drives
    512GB NVMe

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Asus
    CPU
    i5 13500
    Motherboard
    B760M
    Memory
    32GB ddr4 3200
    Graphics Card(s)
    3060ti
    Hard Drives
    samsung 980 pro
    Antivirus
    windows defender
didn't take long :)
 

My Computer

System One

  • OS
    11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    PC Specialist
    CPU
    I7 12700K
    Motherboard
    Gigabyte Z690 Aorus Elite
    Memory
    2 X Corsair Vengeance DDR4 @ 3600 32 gb total
    Graphics Card(s)
    Zotac RTX 3070 ti
    Sound Card
    onboard
    Monitor(s) Displays
    Iiyama 27"
    Screen Resolution
    2560 x 1440
    Hard Drives
    2 TB OEM M.2 + 2TB Samsung Evo 860 sata 3
    PSU
    Corsair 850 watt modular
    Case
    Fractal Meshify 2
    Cooling
    AIO on CPU trinity on GPU
    Keyboard
    Roccat Arvo
    Mouse
    RAT 5
    Internet Speed
    52gb
    Browser
    Edge Chrome
    Antivirus
    Defender
I would like to fix the blank screen in Windows Security on the new system. Are there any consequences to option two, the reg file I need to be aware of.

Windows 11 Pro 22H3
 

Attachments

  • PC SpecsDocument.txt
    1.7 KB · Views: 7

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Acer Aspire 7 A715-55EP GTX1050
    CPU
    Intel Core i5 @ 2.30GHz 38 °C Coffee Lake 14nm Tech.
    Motherboard
    CFL Charmeleon_CFS (U3E1)
    Memory
    8.0 GB
    Graphics Card(s)
    Intel UHD Graphics 630. 4095MB NVIDIA GeForce GTX 1050
    Sound Card
    Realtek High Definition Audio
    Monitor(s) Displays
    Generic PnP Monitor (1920x1080@60Hz)
    Screen Resolution
    1536x824 pixels
    Hard Drives
    119GB Hitachi HFS128G39TND-N210A (SATA (SSD)) 31 °C 931GB Western Digital WDC WD10SPZX-21Z10T0 (SATA (SSD)) 24 °C
    Mouse
    Touchpad, Wireless Logetech M325
    Internet Speed
    Telus Smart Hub (15 to 25)
    Browser
    Chrome
    Antivirus
    Windows Security. Malwarebytes Premium
  • Operating System
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    MEMORY EXPRESS
    CPU
    13th Gen Intel Core i7-13700
    Motherboard
    PRIME B760M-A AX, ASUSTeK COMPUTER INC.
    Memory
    32MB
    Graphics card(s)
    Intel(R) UHD Graphics 770 (1.00 GB)
    Sound Card
    Realtek High Definition Audio.
    Monitor(s) Displays
    BenQ GW2480
    Screen Resolution
    1920x1080 pixels
    Hard Drives
    MSI M371 1TB, 931 GB (1,000,202,273,280 byte) SSD
    Mouse
    Wireless Logetech M510
    Keyboard
    Wave Keyboard K350 Logetech
    Internet Speed
    Currently 27.4 Mbps (Telus Smart Hub 25)
    Browser
    Chrome
    Antivirus
    Eset Antivirus software. Malwarebytes Premium
I would like to fix the blank screen in Windows Security on the new system. Are there any consequences to option two, the reg file I need to be aware of.

Windows 11 Pro 22H3
Hello Alicia, :alien:

Option two would be the same settings used by option one. The note box under step 4 in option two is the only thing to know.

If you're having an issue with the Windows Security app, then you could see if resetting it below may help.

 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    HP Spectre x360 2in1 14-eu0098nr (2024)
    CPU
    Intel Core Ultra 7 155H 4.8 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Graphics card(s)
    Integrated Intel Arc
    Sound Card
    Poly Studio
    Monitor(s) Displays
    14" 2.8K OLED multitouch
    Screen Resolution
    2880 x 1800
    Hard Drives
    2 TB PCIe NVMe M.2 SSD
    Internet Speed
    Intel Wi-Fi 7 BE200 (2x2) and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender and Malwarebytes Premium

Latest Support Threads

Back
Top Bottom