我无法打开新的本地安全机构保护Windows 11（版本 22H2，内部版本 22621.1344）的功能。
“
尝试去排除故障在事件查看器中我看到了一堆如下错误：
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.
或者：
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2211.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_3ad50285c3647623\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
但我没有看到任何事件3065或3066。
尝试修复 Windows 表明我也没有任何报告的问题：
❯ sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection did not find any integrity violations.
❯ DISM /Online /Cleanup-Image /RestoreHealth
Deployment Image Servicing and Management tool
Version: 10.0.22621.1
Image Version: 10.0.22621.1344
[==========================100.0%==========================] The restore operation completed successfully.
我该如何修复此问题并启用本地安全机构保护？
答案1
我无法打开 Windows 11（版本 22H2，内部版本 22621.1344）的新本地安全机构保护功能。
以下内容应该可以解决您的问题：
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"RunAsPPL"=dword:00000002
"RunAsPPLBoot"=dword:00000002