Reply to thread

Message

<blockquote data-quote="a090" data-source="post: 1037704" data-attributes="member: 99949">That’s exactly it.&nbsp; They removed the ability to manipulate LSA Protection status (on/off) from the Device Security tab in the Windows Security UI.&nbsp; But it can still be enabled via Group Policy (see my previous posts).&nbsp; And if you’ve enabled it via GP, then it’s still running.&nbsp; Regardless of whether it shows up as disabled in Device Security, or missing entirely.Similarly, if you enable Kernel-enforced Hardware Stack Protection via GP and it’s not showing up in Device Security, but is showing up in msinfo32, then this is yet again another visual bug in Device Security.&nbsp; The feature is&nbsp; enabled and actively working.TL;DR: Device Security is a buggy mess.&nbsp; Don’t rely on it fully to know the status of your system protections.&nbsp; It is known to be a bit wonky.&nbsp; And no, LSA Protection was not replaced by Kernel-enforced Hardware Stack Protection.&nbsp; They are two separate protection features, and I can confirm that as I am running them both on my system simultaneously as we speak.</blockquote>

[QUOTE="a090, post: 1037704, member: 99949"] That’s exactly it. They removed the ability to manipulate LSA Protection status (on/off) from the Device Security tab in the Windows Security UI. But it can still be enabled via Group Policy (see my previous posts). And if you’ve enabled it via GP, then it’s still running. Regardless of whether it shows up as disabled in Device Security, or missing entirely. Similarly, if you enable Kernel-enforced Hardware Stack Protection via GP and it’s not showing up in Device Security, but is showing up in msinfo32, then this is yet again another visual bug in Device Security. The feature is enabled and actively working. [B]TL;DR: Device Security is a buggy mess. Don’t rely on it fully to know the status of your system protections. It is known to be a bit wonky. And no, LSA Protection was [U]not[/U] replaced by Kernel-enforced Hardware Stack Protection. They are two separate protection features, and I can confirm that as I am running them both on my system simultaneously as we speak.[/B] [/QUOTE]

Verification