LSA Warning logs in Windows 11 Home 22h2


T

TheVisitor

Well-known member
Member
VIP
Local time
3:29 AM
Posts
306
OS
Windows 11 Intel i5 10400 HD630 graphics chip
I never saw any of the following stuff in Win11 21h2.

Each boot up/restart I get the following list of LSA warnings in Event Viewer ID 6155.
LSA package is not signed as expected. This can cause unexpected behavior with Credential Guard.

PackageName: negoexts
PackageName: kerberos
PackageName: msv1_0
PackageName: tspkg
PackageName: pku2u
PackageName: cloudap
PackageName: wdigest
PackageName: schannel
PackageName: sfapm

I have read through 'Configuring Additional LSA Protection' serveral times
and the article indicates its for Windows Server 2022, 2016, 2019.
I am using Windows Home 22h2, not a server. Windows home also does not have GPO.

Under section on the article 'how to disable LSA protection' -
I have looked at registry Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.
but.. I don't have 'RunAsAPPL dword. So I assume by not having the setting
that LSA should not be running/starting, why all the warnings.

To best of my knowledge I don't have Keberos, negoexts, and all the others listed above.

Machine seems to be running just fine but would like to get rid of warnings.
I have also looked thru the Event Viewer 'windows system and application' logs for
Event ID 12 indicating that LSA was started, there are no Event ID 12's.
So if its not loading the above items and no Event ID I assume its not running/starting
at all, so why again the logs.

Thanks in advance, sorry for the large post
 

My Computer My Computer

At a glance

Windows 11 Intel i5 10400 HD630 graphics chipi5-1040012 gbHD630 chipset
OS
Windows 11 Intel i5 10400 HD630 graphics chip
Computer type
PC/Desktop
Manufacturer/Model
HP
CPU
i5-10400
Memory
12 gb
Graphics Card(s)
HD630 chipset
Monitor(s) Displays
LG 24inch
Hard Drives
SSD, external usb drive 1tb for files/backups
Keyboard
wireless Logi
Mouse
ms 4000 wireless mouse
Internet Speed
10meg
Browser
Firefox
Antivirus
Defender
Other Info
Win11 Home 25h2 26200.8655 06/09/2026
Microsoft has LSA protections audit mode enabled by default now in 22H2 and could be generating these alerts. They are warnings so I honestly would ignore them. Most of those packages are irrelevant for a home system
 

My Computer My Computer

At a glance

Linux Mint
OS
Linux Mint
Computer type
Laptop
Manufacturer/Model
System76 Lemur Pro
Thanks for the info, is there a way to suppress those notifications , like maybe something in the registry ?
 

My Computer My Computer

At a glance

Windows 11 Intel i5 10400 HD630 graphics chipi5-1040012 gbHD630 chipset
OS
Windows 11 Intel i5 10400 HD630 graphics chip
Computer type
PC/Desktop
Manufacturer/Model
HP
CPU
i5-10400
Memory
12 gb
Graphics Card(s)
HD630 chipset
Monitor(s) Displays
LG 24inch
Hard Drives
SSD, external usb drive 1tb for files/backups
Keyboard
wireless Logi
Mouse
ms 4000 wireless mouse
Internet Speed
10meg
Browser
Firefox
Antivirus
Defender
Other Info
Win11 Home 25h2 26200.8655 06/09/2026
TheVisitor said:
I never saw any of the following stuff in Win11 21h2.

Each boot up/restart I get the following list of LSA warnings in Event Viewer ID 6155.
LSA package is not signed as expected. This can cause unexpected behavior with Credential Guard.

PackageName: negoexts
PackageName: kerberos
PackageName: msv1_0
PackageName: tspkg
PackageName: pku2u
PackageName: cloudap
PackageName: wdigest
PackageName: schannel
PackageName: sfapm

I have read through 'Configuring Additional LSA Protection' serveral times
and the article indicates its for Windows Server 2022, 2016, 2019.
I am using Windows Home 22h2, not a server. Windows home also does not have GPO.

Under section on the article 'how to disable LSA protection' -
I have looked at registry Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.
but.. I don't have 'RunAsAPPL dword. So I assume by not having the setting
that LSA should not be running/starting, why all the warnings.

To best of my knowledge I don't have Keberos, negoexts, and all the others listed above.

Machine seems to be running just fine but would like to get rid of warnings.
I have also looked thru the Event Viewer 'windows system and application' logs for
Event ID 12 indicating that LSA was started, there are no Event ID 12's.
So if its not loading the above items and no Event ID I assume its not running/starting
at all, so why again the logs.

Thanks in advance, sorry for the large post
Click to expand...
Yeah few of us have the same problem as your. please see this post all about this ;-)

Microsoft-Windows-Security-Auditing Event#1108 Errors?​

 

My Computer My Computer

At a glance

Windows 11 25H2i9 285KCorsair Vengeance RGB 48GB DDR 9200mt/s 2 x 24gbNVIDIA RTX 4080 Foundation Editon 16 GB
OS
Windows 11 25H2
Computer type
PC/Desktop
Manufacturer/Model
MSI
CPU
i9 285K
Motherboard
MSI Z890 MEG ACE
Memory
Corsair Vengeance RGB 48GB DDR 9200mt/s 2 x 24gb
Graphics Card(s)
NVIDIA RTX 4080 Foundation Editon 16 GB
Sound Card
EVGA NU Audio
Monitor(s) Displays
Acer Predator X35 35-inch Curved G-Sync Ultimate 200Hz
Screen Resolution
3440 x 1440 G-Sync
Hard Drives
M.2 Samsung Pro 1100 1TB
M.2 Samsung Pro 990 1TB HDD 1TB
PSU
EVGA SuperNOVA 1300 X3
Case
EVGA case D77
Cooling
EVGA CLCx 380 Liquid / Water CPU Cooler
Keyboard
EVGA Z10
Mouse
EVGA Torq X10
Internet Speed
900 mb/s
Browser
Mircosoft Edges Google and Bing
Antivirus
Kaspersky Internet
Other Info
Logitech Z906 THX 5.1 Surround Sound Speakers SPDIF
In case some people still want to get rid of the credential guard and the LSA warnings,


How to disable LSA (Credential Guard) using Local Group Policy on Windows 11, 22H2
  1. Press Win-X an then Run
  2. Type in gpedit.msc
  3. Expand Computer Configuration, expand Administrative Templates, expand System, and then expand Local Security Authority.
  4. Open the Configure LSASS to run as a protected process policy.
  5. Set the policy to Enabled.
  6. Under Options, set Configure LSA to "Disabled"
 

My Computer My Computer

At a glance

Windows 11 22H2Ryzen 5600XCorsair Dominator Platinum 3600mhz C16 (2x16gb)MSI RTX 3060 Gaming X 12gb
OS
Windows 11 22H2
Computer type
PC/Desktop
Manufacturer/Model
Self Build
CPU
Ryzen 5600X
Motherboard
Asus Rog Strix B550 E-Gaming
Memory
Corsair Dominator Platinum 3600mhz C16 (2x16gb)
Graphics Card(s)
MSI RTX 3060 Gaming X 12gb
Sound Card
Supreme FX
Monitor(s) Displays
Sammy 55 inch Q80T
Screen Resolution
3840x2160
Hard Drives
Sammy 980 Pro 1tb NVME, Sammy 970 Pro 1tb NVME, Cruzer SSD 2tb
PSU
Corsair RM1000X
Case
Corsair 4000D Airflow
Cooling
Corsair Icue H100 Elite LCD Display
Keyboard
Corsair K70 RGB Pro
Mouse
Corsair RGB Dark Pro
Internet Speed
350 mb/s
Browser
Edge
Antivirus
Windows Defender
You must log in or register to reply here.

Similar threads

Win 11 Home 22H2 won't install KB5044285
Replies
7
Views
4K
gfaloon
G
  • Article Article
Windows Update Read Windows Update Logs in Windows 11
Replies
1
Views
37K
Birk
B
What should I have with Windows 11 Home 22H2 OS Build 22621.457 currently up to date a of 3 hours ago when last checked for updates
Replies
2
Views
2K
dawn121988
D

Latest Support Threads

Latest Tutorials

Back
Top Bottom