How to Fix “This change requires you to restart your device” LSA Protection Error on Windows

The Local Security Authority Protection (LSAP) bears the crucial responsibility of overseeing the enforcement and sustenance of security policies on all devices within a domain. Whenever you encounter the message, “This change necessitates a restart of your device,” it signifies a hitch in the proper execution of security protocols across the devices.

To ensure seamless application and maintenance of security policies, it is imperative to address any issue promptly. Negligence in this regard may result in breaches and leave devices vulnerable to potential threats.

Therefore, if you notice the aforementioned message or any other anomaly in the functioning of your devices, here are a couple of things that you can do to resolve the issue.

Attention Windows Users!!

Facing issues on your Windows PC every now and then? We would recommend you use the Restoro PC Repair tool.

It is a one-stop solution to repair common computer errors, protect your Windows PC from data loss, malware, hardware failure, Registry issues, BSOD errors, etc. and optimize your PC for maximum performance in just three simple steps:

  • Download Restoro Tool that comes with Patented Technologies (see patents here).
  • Install and click on Start Scan to find the issues on your Windows PC.
  • Finally, click on Repair All to fix the issues.

4,533,876 users have downloaded Restoro till now.

Fix “This change requires you to restart your device” Local Security Authority Protection Error

Prior to diving into technical solutions, we strongly advise conducting some preliminary troubleshooting measures:

  • It is common for the Local Security Authority Protection to require a system restart for proper initialization. Therefore, we recommend restarting your system to ensure this feature is fully functional.
  • Certain antivirus software, such as Avast, may provide LSASS protection for their devices. If this is the case, we suggest disabling this feature in the antivirus settings or completely uninstalling the software in order to activate LSASS protection in Windows Security.

If the above workarounds didn’t resolve the issue, try the below-mentioned fixes.

1. Configure LSASS Group Policy settings

To enhance the security of your system, it is imperative to enable LSASS-protected process policy. This policy oversees the configuration of policies that are implemented on your system, ensuring that they are executed efficiently.

To enable the LSASS-protected process policy, follow these simple steps:

1. Open the Run box (Win + R), type gpedit.msc, and hit Enter to open the Group Policy on your Windows PC.

014 gpedit dialog box

2. In the Group Policy editor window that opens up, navigate to the following path:

Computer Configuration\Administrative Templates\System\Local Security Authority

3. In the right panel, double-click on the ‘Configure LSASS to run as a protected process‘ policy.

4. In the policy settings window, set the radio button to the Enabled option, and under the Options section, select the Enabled with UEFI Lock option from the drop-down menu of the Configure LSA to run as a protected process option.

With this setting, LSA will run as a protected process, and the configuration will be UEFI Locked, which means it cannot be disabled remotely. If you don’t want this restriction, you can select Enabled without UEFI Lock in the dropdown.

6. Click on the OK button and restart your PC.

Once your system has restarted, check the security settings to ensure that the changes have been implemented successfully.

2. Configure LSA Registry Values

You can also resolve the issue by editing the registry values. Here are the steps you need to follow to fix the issue:

1. Open the Run dialog by pressing Win + R, enter regedit in the text field, and hit Enter.

023 regedit in the run dialog box

2. The Windows Registry will open up. Here, navigate to the following tree path:

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

3. In the right panel, double-click on the RunAsPPL registry value.

4. Change the Value data to 1 and click on OK.

5. Finally, restart your PC to apply the changes.

3. Repair/Reset Windows Security

If you have tried all the registry tricks and group policy settings to resolve issues related to Windows Security but still have not found a solution, repairing the Windows Security settings can be a viable option.

Here are the steps to follow to reset the Windows Security settings:

1. Launch the Windows settings by pressing Win + I.

2. In the settings window, go to Apps from the left pane and select Installed apps from the right side afterward.

3. You’ll now be greeted with the list of all installed apps. Here, locate the Windows Security app (you can also search for the app in the search bar above), click on the three dots associated with it, and go to Advanced options.

4. Scroll down to the Reset section and click on the Repair button.

5. Let the repair finish and restart the PC. If it doesn’t resolve the issue then again navigate to the same Windows Security Advanced options page in Settings and this time click on the Reset button.

Complete the reset process and then try enabling the Local Security Authority Protection on your PC.

To enable LSA from Windows security settings, follow these steps:

1. Search for Windows Security in the Windows search bar and open the same from the search results.

open windows security

2. In the Windows security window that opens, go to the Device Security tab from the left pane and select the Core isolation details link located under the Core isolation section from the right side.

3. Here, toggle on the switch for the Local Security Authority protection option to enable LSA on your Windows PC.

4. Click on the Yes button in the User Account Control prompt that appears and restart your PC to apply the changes.


Also Read:

Rate this post
Posted by
Bhanu Pratap

Hi! I am Bhanu Pratap, co-founder of Yorker Media Group. A die-heart fan of tech and keeps track of every little happening of the same. When not writing, I usually keep myself busy on YouTube making and exploring new and awesome tech content.

Leave a Reply

Your email address will not be published. Required fields are marked *