“Local Security Authority protection is off.” with persistent restart

Topic

New Reply

https://learn.microsoft.com/en-us/windows/release-health/status-windows-11-22H2#-local-security-authority-protection-is-off—with-persistent-restart

After installing “Update for Microsoft Defender Antivirus antimalware platform – KB5007651 (Version 1.0.2302.21002)”, you might receive a security notification or warning stating that “Local Security protection is off. Your device may be vulnerable.” and once protections are enabled, your Windows device might persistently prompt that a restart is required. Important: This issue affects only “Update for Microsoft Defender Antivirus antimalware platform – KB5007651 (Version 1.0.2302.21002)”. All other Windows updates released on March 14, 2023 for affected platforms (KB5023706 and KB5023698), do not cause this issue.

Workaround: If you have enabled Local Security Authority (LSA) protection and have restarted your device at least once, you can dismiss warning notifications and ignore any additional notifications prompting for a restart. You can verify that LSA protection is enabled by looking in Event Viewer using the information available here. Important: Currently, we do not recommend any other workaround for this issue…

2 users thanked author for this post.

Endora, Hailstorm

Reply | Quote

Replies

Hi there. This exact thing happened to me on my Win 11 Pro desktop and my Win 11 Home laptop. I didn’t know what prompted it but the laptop hasn’t been used so I thought it wasn’t some kind of an attack going on in my system. I did what I was supposed to do and noted that even after 2 restarts, the message still was there….so since Win Security indicated all was well, I just dismissed the alerts. Happy to see that I did what is recommended.

Reply | Quote