Return
-
Title
Is Defender Desktop login supported with LSA protection enabled? (RunAsPPL registry setting enabled) -
Description
You cannot enter the Defender Desktop Login passcode when LSA protection is enabled on the system.
The LSA protection is enabled by configuring the following registry key:HKLM\SYSTEM\CurrentControlSet\Control\LsaRunAsPPL 1 -
Resolution
WORKAROUND:
NONESTATUS:
Defender Desktop login is not supported when LSA protection is enabled, however, a feature enhancement # 779345 was submitted for consideration to add support for LSA protection. -
Change Request
779345 -
Additional Information
See the following Microsoft link for configuring LSA protection: https://docs.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/configuring-additional-lsa-protection