LSA ProtectionID: oval:org.secpod.oval:def:35339 | Date: (C)2016-06-10 (M)2023-12-13 |
Class: COMPLIANCE | Family: windows |
Enable LSA protection. For more information, see http://technet.microsoft.com/en-us/library/dn408187.aspx
Counter Measure:
Enable and configure this setting.
Potential Impact:
Some unprotected LSA processes will be unable to function.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\SCM: Pass the Hash Mitigations\LSA Protection
(2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa!RunAsPPL
Platform: |
Microsoft Windows 10 |