Reply to thread

Message

<blockquote data-quote="a090" data-source="post: 1036601" data-attributes="member: 99949">Will check if mine is showing these changes.&nbsp; Nevertheless, I don’t know why all these tech sites are claiming the LSA protection feature is”gone” or replaced.&nbsp; It’s not.&nbsp; Even if it’s hidden on the Device Security UI, you can still enable it via Group Policy.&nbsp; Just need W10/W11 Pro.&nbsp; And there are ways to get Group Policy Management Editor on Home Editions too.I expect better from a well-regarded site like Bleeping Computer.In Group Policy Management Editor go to Computer Configuration &gt; Administrative Templates &gt; System &gt; Local Security Authority &gt; Configure LSASS to run as a protected process &gt; Choose option (see image below)[ATTACH=full]274733[/ATTACH]And that’s it.&nbsp; You’ve got LSA Protection running, even if the option “disappears” in Device Security.&nbsp; Keep in mind Device Security is a buggy mess.&nbsp; Like most things M$ makes.&nbsp; It often claims I don’t have TPM enabled, yet I know I do because I did it myself in BIOS (fTPM on my AMD Ryzen processor).&nbsp; Sometimes Memory Integrity “disappears” from Core Isolation.&nbsp; Other times firmware protection does.&nbsp; Or even after enabling LSA Protection, it stays “disabled” in the UI.&nbsp; And yet it’s actually running fine in the background and that warning is just a bug (Microsoft had to make a post about this one calming everyone down and saying it was just a visual bug, and their devices are secure).&nbsp; And the list of bugs go on and on…All in all, that Device Security UI is not to be taken too seriously,&nbsp; Monitor it, by all means.&nbsp; But don’t worry if some setting disappear.&nbsp; That’s likely just another bug.</blockquote>

[QUOTE="a090, post: 1036601, member: 99949"] Will check if mine is showing these changes. Nevertheless, I don’t know why all these tech sites are claiming the LSA protection feature is”gone” or replaced. It’s not. Even if it’s hidden on the Device Security UI, you can still enable it via Group Policy. Just need W10/W11 Pro. And there are ways to get Group Policy Management Editor on Home Editions too. I expect better from a well-regarded site like Bleeping Computer. In Group Policy Management Editor go to [B]Computer Configuration > Administrative Templates > System > Local Security Authority > Configure LSASS to run as a protected process > Choose option (see image below)[/B] [ATTACH type="full" width="583px" alt="IMG_7288.png"]274733[/ATTACH] And that’s it. You’ve got LSA Protection running, even if the option “disappears” in Device Security. Keep in mind Device Security is a buggy mess. Like most things M$ makes. It often claims I don’t have TPM enabled, yet I know I do because I did it myself in BIOS (fTPM on my AMD Ryzen processor). Sometimes Memory Integrity “disappears” from Core Isolation. Other times firmware protection does. Or even after enabling LSA Protection, it stays “disabled” in the UI. And yet it’s actually running fine in the background and that warning is just a bug (Microsoft had to make a post about this one calming everyone down and saying it was just a visual bug, and their devices are secure). And the list of bugs go on and on… All in all, that Device Security UI is not to be taken too seriously, Monitor it, by all means. But don’t worry if some setting disappear. That’s likely just another bug. [/QUOTE]

Verification