LSA Protection

Supported on: At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1

Registry

HKLM SYSTEM\CurrentControlSet\Control\Lsa

Value name: RunAsPPL

Enabled: RunAsPPL = 1

Disabled: RunAsPPL = 0

Description

For Windows 11, version 22H2 and beyond a new setting is used to configure this. IT can be located at 'System\Local Security Authority\Configures LSASS to run as a protected process' which provides additional configuration options. Enable LSA protection. For more information, see http://technet.microsoft.com/en-us/library/dn408187.aspx