Windows 10: Not able to enable LSA protection because of buggy Windows Defender UI. Help?

I got a notification that my LSA protection got turned "OFF" by itself. Why does this happen? And I need someone to tell me how I can re enable it again because the Defender app is not showing the feature where it normally is supposed to be

:)

 

Disabling LSA protection

We have an internal issue causing something not to work when the LSA protection is enabled.

As we also have "Block credential stealing from the Windows local security authority subsystem (lsass.exe)" ASR rule, and following this recommendation that "having both running at the same time would be redundant" we want to turn off the LSA protection.

The problem starts with the fact that all our devices support Secure Boot and since years we use UEFI based devices.

On those machines the task of disabling LSA protection seems like very cumbersome and not straight forward.

Is there more easy and centralized way to disable LSA protection on a few thousands windows machines?

Thanks in advance

 

LSA Protection

What I am seeing within the Core Isolation is the following

1. Memory Integrity
   
2. Memory Access Protection
   
3. Vulnerable Driver Blocklist
   

Are all of the above parts of the LSA system? If so are all supposed to be toggled on?

Kenneth

 

Windows defender is not going to enable manually....

Hi,

Windows Defender Antivirus works help protect your device by scanning for malicious or unwanted software and uses real-time protection to scan everything you download or run on your device. To efficiently assist you, we'd like to gather more information:

• What is the exact error message you received?
• Are you able to use Windows Defender before?

Meanwhile, we suggest that you follow the steps in this article on how to turn on/off Windows Defender.

Let us know if you need further assistance.