Reply to thread

Message

<blockquote data-quote="a090" data-source="post: 1036812" data-attributes="member: 99949">Following up on my previous post.&nbsp; I have both Local Security Authority Protection and Kernel-mode Hardware Enforced Stack Protection enabled, simultaneously.&nbsp; Here are some pics:[SPOILER][ATTACH=full]274744[/ATTACH][ATTACH=full]274745[/ATTACH][/SPOILER]As you can see, LSA Protection is still showing in my Device Security tab and set to enabled.&nbsp; However, you don’t see Kernel-mode Hardware-enforced Stack Protection in the Device Security tab.&nbsp; So how do I know that particular tweak is enabled too?&nbsp; Easy.&nbsp; Open up System Information (msinfo32), and find the line called Virtualization-based security services Running.&nbsp; And if you see Hardware-enforced Stack Protection (Kernel-mode) there, it’s working fine and is enabled.This is exactly what I was talking about in my previous post.&nbsp; Sometimes things don’t appear in Device Security, but are clearly still running.&nbsp; Device Security is buggy and that’s why things “disappear.”&nbsp; If you do follow the GPO process outlined in my previous post, you can enable LSA Protection via Group Policy.&nbsp; And if it shows up in Device Security, that’s well and good.&nbsp; And if it doesn’t, don’t worry about it.&nbsp; It’s just a visual bug, similar to my Kernel-enforced Hardware Stack Protection missing from Device Security, but shown to actually be enabled in System Information.Edit:&nbsp; And yes, I’m fully updated.&nbsp; Checked Windows Update multiple times over multiple restarts.</blockquote>

[QUOTE="a090, post: 1036812, member: 99949"] Following up on my previous post. I have both [B]Local Security Authority Protection[/B] and [B]Kernel-mode Hardware Enforced Stack Protection[/B] [B][U]enabled[/U][/B], simultaneously. Here are some pics: [SPOILER] [ATTACH type="full" alt="IMG_7346.png"]274744[/ATTACH] [ATTACH type="full" alt="IMG_7349.jpeg"]274745[/ATTACH][/SPOILER] As you can see, [B]LSA Protection[/B] is still showing in my Device Security tab and set to enabled. However, you don’t see [B]Kernel-mode Hardware-enforced Stack Protection[/B] in the Device Security tab. So how do I know that particular tweak is enabled too? Easy. Open up System Information (msinfo32), and find the line called [B]Virtualization-based security services Running[/B]. And if you see [B]Hardware-enforced Stack Protection (Kernel-mode)[/B] there, it’s working fine and is enabled. This is exactly what I was talking about in my previous post. Sometimes things don’t appear in Device Security, but are clearly still running. Device Security is buggy and that’s why things “disappear.” If you do follow the GPO process outlined in my previous post, you can enable LSA Protection via Group Policy. And if it shows up in Device Security, that’s well and good. And if it doesn’t, don’t worry about it. It’s just a visual bug, similar to my Kernel-enforced Hardware Stack Protection missing from Device Security, but shown to actually be enabled in System Information. Edit: And yes, I’m fully updated. Checked Windows Update multiple times over multiple restarts. [/QUOTE]

Verification