LSA Protection

Information

For Windows 11 version 22H2 and beyond a new setting is used to configure this. IT can be located at 'System\Local Security Authority\Configures LSASS to run as a protected process' which provides additional configuration options. Enable LSA protection. For more information see http://technet.microsoft.com/en-us/library/dn408187.aspx

Solution

Policy Path: MS Security Guide
Policy Setting Name: LSA Protection

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-11-version-24h2-security-baseline/ba-p/4252801

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-7

Plugin: Windows

Control ID: 325a43972ee1466491208c4e295d3ac994119331caefa9153610d0522d44fd3c