- Local time
- 11:14 AM
- Posts
- 43
- OS
- Windows 11 23H2 (OS Build 22631.3296)
I've already set "Configure LSA to run as a protected process" to "Enabled without UEFI lock" in Group Policy, as described here. I've of course rebooted. But I still see a series of warnings in the Event Viewer System log:
The "RunAsPPL" value is set to 2 under "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" and this was done by Group Policy, not by direct registry editing. I don't have a "RunAsPPLBoot" value at all.
Is this a real issue? What should I do?
LSA package is not signed as expected. This can cause unexpected behavior with Credential Guard.
PackageName: negoexts ... PackageName: kerberos ... PackageName: msv1_0 ... PackageName: tspkg ... PackageName: pku2u ...
PackageName: cloudap ... PackageName: wdigest ... PackageName: schannel ... PackageName: sfapm
The "RunAsPPL" value is set to 2 under "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" and this was done by Group Policy, not by direct registry editing. I don't have a "RunAsPPLBoot" value at all.
Is this a real issue? What should I do?
- Windows Build/Version
- 23H2
My Computer
System One
-
- OS
- Windows 11 23H2 (OS Build 22631.3296)
- Computer type
- PC/Desktop
- Manufacturer/Model
- Maingear Vybe
- CPU
- AMD Ryzen 5 3600X
- Motherboard
- Gigabyte X570 Gaming X
- Memory
- HyperX Predator RGB DDR4 3200MHz (32 GB total)
- Graphics Card(s)
- NVIDIA GeForce RTX 2070 Super
- Sound Card
- RealTek ALC887 (Onboard)
- Hard Drives
- Seagate FireCuda 520 SSD/NVMe (1 TB)
- PSU
- EVGA 750W SuperNOVA B2 80+ BRONZE
- Cooling
- Maingear Epic 240
- Keyboard
- SteelSeries Apex 3 TKL
- Mouse
- Razer Viper 8KHz
- Internet Speed
- 1 Gbps
- Browser
- Brave
- Antivirus
- Microsoft Defender
- Other Info
- No third-party security software