"Local Security Authority protection is off." with persistent restart
Status | Originating update | History |
---|
Resolved | N/A | Resolved: 2023-05-03, 13:27 PT
Opened: 2023-03-21, 11:18 PT |
After installing "Update for Microsoft Defender Antivirus antimalware platform -
KB5007651 (Version 1.0.2302.21002)", you might receive a security notification or warning stating that "Local Security protection is off. Your device may be vulnerable." and once protections are enabled, your Windows device might persistently prompt that a restart is required.
Important: This issue affects only "Update for Microsoft Defender Antivirus antimalware platform -
KB5007651 (Version 1.0.2302.21002)". All other Windows updates released on March 14, 2023 for affected platforms (
KB5023706 and
KB5023698), do not cause this issue.
Workaround: If you have
enabled Local Security Authority (LSA) protection and have restarted your device at least once, you can dismiss warning notifications and ignore any additional notifications prompting for a restart. You can verify that LSA protection is enabled by looking in Event Viewer using the information available
here.
Important: Currently, we do
not recommend any other workaround for this issue.
Resolution: This issue was resolved in an update for Microsoft Defender Antivirus antimalware platform
KB5007651 (Version 1.0.2303.27001). If you would like to install the update before it is installed automatically, you will need to
check for updates.