mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-16 10:53:43 +00:00
Updates
This commit is contained in:
@ -15,7 +15,7 @@ In addition to adopting passwordless sign-in, organizations can strengthen secur
|
||||
|
||||
Windows has several critical processes to verify a user's identity. Verification processes include Local Security Authority (LSA), which is responsible for authenticating users and verifying Windows sign-ins. LSA handles tokens and credentials that are used for single sign-on to a Microsoft account and Entra.
|
||||
|
||||
To help keep these credentials safe, with 24H2 LSA protection is enabled by default on all devices (MSA, Entra joined, hybrid, and local) after an evaluation period. By loading only trusted, signed code, LSA provides significant protection against credential theft. LSA protection supports configuration using group policy and other device management solutions.
|
||||
To help keep these credentials safe, LSA protection is enabled by default on all devices (MSA, Entra joined, hybrid, and local) with 24H2. For new installs, it is enabled immediately, and for upgrades, it is enabled after an evaluation period. By loading only trusted, signed code, LSA provides significant protection against credential theft. LSA protection supports configuration using group policy and other device management solutions.
|
||||
|
||||
Users have the ability to manage the LSA protection state in the Windows Security application under **Device Security** > **Core Isolation** > **Local Security Authority protection**.
|
||||
|
||||
|
Reference in New Issue
Block a user