LSA option missing completely

Windows 11 Home, build 22621.1635
Ryzen 5900x & X570mb with TPM 2.0 & SVM enabled

I've found and read several threads about issues with Core Isolation and LSA in Win 11, but I'm not finding this specific issue or a resolution. I noted the security warning on my system today about Core Isolation not being turned on, so I went into the BIOS and enabled SVM, logged back into Windows and turned core isolation memory integrity on, however I am still getting a security warning that LSAP is turned off. Problem is, I don't even have an LSAP option to turn on. I've seen screenshots and it should be right below Core Isolation, but it is completely MIA and I can't find it anywhere else, but this security warning about it is ever present.

Anybody else run into this and are there any resolutions? I've searched extensively and cannot find this specific issue anywhere else.


What I have on my Core Isolation settings screen


What I should apparently see?

Hello, and welcome.

This was a known issue when trying to turn on LSA from Windows Security. It shows as resolved as of 5/03/2023, but some are still having the same issue, and nothing to worry about.


You can use option 2 or 4 in the tutorial below to enable LSA again without the warning. Currently the LSA setting is missing in Windows Security since Build 22621.1635.

Good grief, I should be used to MS breaking windows with every release. Not sure why I am surprised. I did see that tutorial but wasn't sure if it applied to my situation, since my option isn't stuck, it isn't even there! I will give those a whirl. Thanks.

Did option 2 and traded one problem for another, now I've got the driver cannot load error I've seen in some posts. Back to digging for solutions. Grrr.

Do you mean Memory Integrity below for the driver cannot load error?

Negative, sorry. I had seen it on several threads (that I cannot find now) so I thought it was a common error. This one, which comes up on reboot now since using the registry file to turn LSA on using UEFI.

If it helps, the ene.sys driver is associated to RGB lighting control on your PC. It could be part of a keyboard or mouse utility program.

Brink said:

This was a known issue when trying to turn on LSA from Windows Security. It shows as resolved as of 5/03/2023, but some are still having the same issue, and nothing to worry about.

Click to expand...

I have just had an update for Windows Security....





...and Windows Security now informs me wherever possible that I have a problem with LSA.



But clicking on any of the links provided takes me to a Core Isolation page that is devoid of any mention of LSA !

@Bree,

It seems that the LSA setting is missing in Windows Security since Build 22621.1635. Most likely from that security update.

Bree said:

I have just had an update for Windows Security....

Click to expand...

My Antimalware Client Version is older than yours at 4.18.2201.11 (no update available yet), but that is the exact issue I had. Getting the LSA is turned off warning, but no LSA option anywhere to turn on. I would say use caution on turning it on via the registry changes, because now I am getting a driver cannot load error, and am having to track down what driver is having issue. (The error is devoid of any useful information to help ID the offending driver and windows update thinks all my drivers are fine).

@Bree , it's odd that we get different application versions and service versions running the same AV


I don't have LSA showing but have 'Kernel-mode Hardware-enforced Stack Protection' and no warnings.
EDIT, also have Memory access protection.

Brink said:

If it helps, the ene.sys driver is associated to RGB lighting control on your PC. It could be part of a keyboard or mouse utility program.

Click to expand...

I only have 2 devices with RGB control, my Logitech keyboard (G-Hub) and my AIO cooler (iCUE). I have uninstalled both programs, restarted, reinstalled and rebooted again and I am still getting the "A driver cannot load on this device Driver: ene.sys" error. Thank you for trying though.

Fabler2 said:

@Bree , it's odd that we get different application versions and service versions running the same AV

View attachment 59495
I don't have LSA showing but have 'Kernel-mode Hardware-enforced Stack Protection' and no warnings.
EDIT, also have Memory access protection.

Click to expand...

Different updates being pushed out to different people on different days? I also do not have the Kernel-mode Hardware-enforced Stack Protection information on my core isolation page.

I guess I'll quit fiddling with this and wait for MS to unbork it (and bork something else instead) with the next release.

In that case you could try to use option six in the tutorial below to uninstall the "ene.sys" driver with Autoruns.

I have seen this notif about LSA being "off". But mine is missing LSA as well. i found a solution that worked for me, you might want to try it too. but take note: create a restore poit first before doing this:

Go to RUN
type "regedit" (if it is not on default)
then, enter
this should be the address: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
look for RunAsPPL & RunAsPPLBoot on the right column. right click and modify, change the value to '2' (both)
if you can't find them, you can create by right-clicking on the blank space of the right column
click 'New', then select 'DWORD'
rename it to RunAsPPL, then right click on it, then change value to '2'
do the same thing to create RunAsPPLBoot, make the value '2' also then restart.

the notif should be non-existent after that. hope it works for you too. I'm also using AMD Ryzen 5000 series on Asus Vivobook 15

GhostryderID said:

Windows 11 Home, build 22621.1635
Ryzen 5900x & X570mb with TPM 2.0 & SVM enabled

I've found and read several threads about issues with Core Isolation and LSA in Win 11, but I'm not finding this specific issue or a resolution. I noted the security warning on my system today about Core Isolation not being turned on, so I went into the BIOS and enabled SVM, logged back into Windows and turned core isolation memory integrity on, however I am still getting a security warning that LSAP is turned off. Problem is, I don't even have an LSAP option to turn on. I've seen screenshots and it should be right below Core Isolation, but it is completely MIA and I can't find it anywhere else, but this security warning about it is ever present.

Anybody else run into this and are there any resolutions? I've searched extensively and cannot find this specific issue anywhere else.

View attachment 59476
What I have on my Core Isolation settings screen
View attachment 59478

What I should apparently see?
View attachment 59479

Click to expand...

I have seen this notif about LSA being "off". But mine is missing LSA as well. i found a solution that worked for me, you might want to try it too. but take note: create a restore poit first before doing this:

Go to RUN
type "regedit" (if it is not on default)
then, enter
this should be the address: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
look for RunAsPPL & RunAsPPLBoot on the right column. right click and modify, change the value to '2' (both)
if you can't find them, you can create by right-clicking on the blank space of the right column
click 'New', then select 'DWORD'
rename it to RunAsPPL, then right click on it, then change value to '2'
do the same thing to create RunAsPPLBoot, make the value '2' also then restart.

the notif should be non-existent after that. hope it works for you too. I'm also using AMD Ryzen 5000 series on Asus Vivobook 15

Hello all, has Microsoft officially repaired this issue? As it stand now, I am having the exact same issue as the OP where Windows 11 is stating that Local Security Authority Protection is off and when I click on the Go To Settings option, there is no LSA option viewable. I have an Intel processor so this isn't related to AMD at least not on my end.

Windows states that I am fully up to date.

Edition Windows 11 Home
Version 22H2
Installed on ‎5/‎31/‎2023
OS build 22621.1778
Experience Windows Feature Experience Pack 1000.22642.1000.0